Planning Cybersecurity in Projects: Get to know Cybersecurity Case and Plan
Planning cybersecurity activities is a critical success factor for E/E development projects (see also Clause 6 of ISO/SAE 21434). While the ISO standard intentionally does not provide clear guidance, this video course aims to concretize the procedure for planning around cybersecurity, showing an exemplary structure of a cybersecurity plan and a cybersecurity case.
Learn about cybersecurity planning during projects and prove your products are cybersecure with a Cybersecurity Case
What cybersecurity activities should look like for an automotive development project according to the ISO/SAE 21434? How can we prove a product is cybersecure? In this video course we answer those questions by presenting the Cybersecurity Plan and the Cybersecurity Case.
First and foremost, you will get a detailed explanation on what are the expectations of the ISO/SAE 21434 regarding the planning cybersecurity activities to achieve compliance.
Thereafter, you will recognize the importance of having a cybersecurity plan to establish a common understanding on how cybersecurity is handled in the cybersecurity context.
In addition, since the standard does not provide guidance on how to establish a plan, we will present an exemplary plan including the overall structure in detail. At this point, you will understand why cybersecurity should not be considered separately from the project management on development projects.
Finally, we will introduce the cybersecurity case and go over its significance for the entire development project. An exemplary cybersecurity case will also be presented.
Please note: This video is based on content from ISO/SAE 21434:2021 Road Vehicles – Cybersecurity Engineering.
The CYRES Consulting ISO/SAE 21434 Pocket Guide and The Essential Guide to ISO/SAE 21434 are followed by the now released ISO/SAE 21434:2021 Workbook, The new publication is designed to simplify practical work with the most important automotive cybersecurity standard and is the first ISO/SAE 21434:2021 Workbook. It will include:
- all work products (and corresponding requirements, recommendations and permissions) of ISO/SAE 21434:2021 („First Edition“) – officially licensed by ISO
- Field-tested templates for key work products, such as TARA, Cybersecurity Plan, Item Definition, CIA, and more
- Expert interviews, background information, explanations with a practical perspective across the automotive value chain
The workbook is ready for ordering here and is available worldwide as a digital workbook (ebook / PDF).
Who the Cybersecurity Planning in Projects video course is for
Learn what should be included in a cybersecurity plan
Apart from being a requirement from ISO/SAE 21434, the cybersecurity plan sets a common understanding of the cybersecurity activities during the project. In this video course we will explain the standard’s expectations and go over the details of which topics should be addressed on the cybersecurity plan.
Understand the cruciality of a cybersecurity case
The cybersecurity case is not just necessary to prove your product is cybersecure as required by the ISO/SAE 21434, but is also an essential document for the future. You will learn why the cybersecurity case is crucial in the case incidents arise and the importance of updating it along each lifecycle phase even after the end of production.
Cybersecurity Planning in Projects and Cybersecurity Case – Video course content
Get into the key aspects and relevant documents for planning cybersecurity activities for a project – as required by ISO/SAE 21434 for all future E/E development projects.
II. Importance of planning cybersecurity activities
Learn about the importance of the Cybersecurity Plan and the Cybersecurity Case.
III. What is required for cybersecurity planning and the cybersecurity plan?
Here you will learn about the prerequisite for cybersecurity planning along ISO/SAE 21434, the details of the cybersecurity planning process and the Cybersecurity Plan.
All the elements that a Cybersecurity Plan should contain are presented. You will also get a detailed explanation of the Cybersecurity Case as evidence for a secure product.
V. Sum Up
Get a recap on what we have learned on the Cybersecurity Plan and Cybersecurity Case.
More video courses related to Cybersecurity Planning in Projects
Cybersecurity Requirements for Post-Development In Vehicles
Cybersecurity requirements for post-development are demanded by UN R155 and ISO/SAE 21434:2021. Learn the main considerations in this video course.
Production Control Plan for Cybersecurity in Vehicle Manufacturing
Know what the pre-requirements and specific contents of the Production Control Plan are. Learn about this major work product with this video course.
Release for Post-Development Report
Learn about the release for post development report as a work product for ISO/SAE 21434:2021 and UN Regulation No. 155. Watch video course.
Communication and Stakeholder Management
In this video course, you will learn about how to approach communication and stakeholder management in vehicle cybersecurity as required by ISO/SAE 21434:2021.
Cybersecurity Monitoring and Event Evaluation
Understand what cybersecurity monitoring and event evaluation is based in the cybersecurity continual activities framework. Watch video course.
Product Security Incident Response Team (PSIRT) Overview
In this video course, you will learn exactly all the Product Security Incident Response Team or PSIRT service areas, their purpose, and contents.
Cybersecurity Incident Response Plan
Learn what a cybersecurity incident response plan is and what it should contain to comply with ISO/SAE 21434 in this video course.
Vulnerability Analysis for Vehicle Cybersecurity
Learn what is the cybersecurity vulnerability analysis in continual cybersecurity activities and as required by the ISO/SAE 21434. Also, learn how to correctly decide a course of action to treat a vulnerability.
Cybersecurity Case as ISO/SAE 21434 Work Product
Learn how to create a cybersecurity case, which is a work product of ISO/SAE 21434. In this video course, you will also get lessons learned from real projects.
Supplier Selection Process in Automotive
Learn about the supplier selection process in automotive and which cybersecurity capabilities should be followed to comply with ISO/SAE 21434 and other automotive cybersecurity standards and regulations.
Cybersecurity Interface Agreement as required ISO/SAE 21434 work product
Learn how to build the structure of the Cybersecurity Interface Agreement as required by ISO/SAE 21434. Template incl. in this 7 min video course.
Cybersecurity plan in automotive: what it is and how it is structured
Learn what is a cybersecurity plan in automotive and what aspects are required by ISO/SAE 21434 in this short video course and sample plan.
Tool Management according to ISO/SAE 21434
Understand why tool management is crucial and what is required from the ISO/SAE 21434 standpoint, while taking ISO 26262 as a base to define the tool management methods.
Managing Cybersecurity at Organizational Level Summary
Get an overview on managing cybersecurity at the organizational level as for ISO/SAE 21434 and required work products. Watch video course.
Cybersecurity Audits and Assessments in Automotive
Learn more about automotive cybersecurity audits and assessments in this video course. Get a glimpse on how ISO/PAS 5112, ASPICE, VDA QMC ACSMS can support you to audit and assess along the ISO/SAE 21434 and UN R155.
Competence Management in Vehicle Cybersecurity
Learn how competence management according to ISO/SAE 21434 can be achieved and recognize the negative consequences of ignoring it.
Cybersecurity Policy Rules and Processes
The cybersecurity policy is a requirement for ISO/SAE 21434 and UN Regulation No 155. Learn about it on this video course.
Cybersecurity Culture in Automotive
Building cybersecurity culture is a requirement for ISO/SAE 21434 and an important component that benefits organizations.
Understanding the Impact of Cybersecurity in Project Lifecycle
Learn how to manage and plan cybersecurity in the project lifecycle and understand the possible negative consequences if ignored.
Distributed Development In Automotive
Learn how distributed development enables successful projects in automotive and meet ISO/SAE 21434 expectations.
The Importance of Including Cybersecurity in Project Management Activities
In this video you will learn how important is to include Cybersecurity in Project Management activities to ensure project success.