Guidance
Principles of cyber security for connected and automated vehicles
Overview of the principles for obtaining good cyber security within the automotive sector.
Documents
Details
As vehicles continue to become smarter, it’s crucial that we take the correct steps to make them cyber secure.
The 8 principles in this guidance set out how the automotive sector can make sure cyber security is properly considered at every level, from designers and engineers, through to suppliers and senior level executives.
The quick start guide to vehicle cyber security lists the 8 principles:
- organisational security is owned, governed and promoted at board level
- security risks are assessed and managed appropriately and proportionately, including those specific to the supply chain
- organisations need product aftercare and incident response to ensure systems are secure over their lifetime
- all organisations, including sub-contractors, suppliers and potential 3rd parties, work together to enhance the security of the system
- systems are designed using a defence-in-depth approach
- the security of all software is managed throughout its lifetime
- the storage and transmission of data is secure and can be controlled
- the system is designed to be resilient to attacks and respond appropriately when its defences or sensors fail