ISO 24089 Road Vehicles — Software update engineering Overview

In this video course, you will get an introduction to the most relevant standard on software updates for the automotive industry: the ISO 24089. After completing the video course, you will be able to distinguish the different software update phases, recognize the most important components of the standard, as well as gain an understanding of how it intersects with UN Regulation No. 156.

With increasing software updates, automotive cybersecurity professionals worldwide have kept an eagle eye on ISO 24089. The standard’s purpose is to standardize requirements and documentation for software updates in the automotive industry. Thus, just like the ISO/SAE 21434 supports in achieving compliance with UN Regulation No. 155 and the topic of CSMS, the ISO 24089 supports compliance with UN Regulation No. 156 along the topic of Software Update Management System (SUMS). In this video course, you will get a first overview on the scope of ISO 24089, including involved stakeholders and the steps required to ensure secure software updates.

First, we will introduce the three main phases of software updates: pre-update, update, and post-update. As a result, you will learn which steps and considerations must take place at each stage.

Shortly after, we will also introduce the topic of Software Update Management System (SUMS) and how it is treated by the UN Regulation No. 156 and ISO 24089. You will also be able to recognize the main differences between the standard and regulation.

As the main learning goal of this video course, you will first get an overview on ISO 24089 as we go through the structure and main components. Then, you will get to know all the relevant topics and steps that must be considered for each of main clauses of the ISO 24089 standard starting at the organizational and project levels and continue presenting relevant topics for the clauses remaining on the infrastructure, the software update package itself, the software update campaign and the corresponding vehicle.

Afterwards, we will also show you where the work products and processes take place along the software update process and at which level in a visual overview. As the last lesson, we will also highlight which topics and tasks from the ISO 24089 standard relate to those from the ISO/SAE 21434 and the required Cybersecurity Management System CSMS.