After our ISO/SAE DIS 21434 Pocket Guide (exclusively with contents of the then current version of the standard) and The Essential Guide to ISO/SAE 21434 (the comprehensive reference book on automotive cybersecurity), the first practical handbook with tools for the application of the standard is now available. Since October 2023, the big ISO/SAE 21434:2021 Workbook from CYRES Consulting can be... read more →
→ Read full article

In 2019 a research team from Google’s quantum computing lab published a paper entitled “Quantum supremacy using a programmable superconducting processor” (Arute et al., 2019). The ripples this sent through the scientific community, however, were not limited to the domain of Physics, but rather were felt across numerous fields, including, notably, cryptography. This is because the arrival of industry-capable quantum... read more →
→ Read full article

Cybersecurity risks and the resulting goals and requirements alone have a significant impact on development. But when cybersecurity is considered and introduced after the development has already progressed and decisions on system, hardware, or software have already been made, the impact and difficulties increase even more. Throughout this article we want to talk about the hurdles arising from introducing cybersecurity... read more →
→ Read full article

Amid the upcoming July 2024 deadline, OEMs and their suppliers worldwide are facing a variety of challenges arising from the prerequisites and requirements of UN Regulation No. 155. The aim is to be able to continue selling vehicles to the relevant target markets affected by the regulation in the future. The most important task here is the introduction of a... read more →
→ Read full article

In almost all product developments in the automotive industry, the ISO/SAE 21434 standard (officially published as early as 2021 in the so-called "First Edition") is currently being used worldwide in some extents along the entire value chain and quickly became clear that the standard has deliberately been kept very abstract. But how does this lack of detail and the deliberately... read more →
→ Read full article

Autonomous driving. Currently an exciting vision for the masses. Being able to move around on the roads in a vehicle without anyone having to drive. While there are already several such approaches on the roads, in everyday life, autonomous driving is still more of a futuristic topic. For those involved in the value creation processes of automotive development work, however,... read more →
→ Read full article

In other industries, cybersecurity knowledge has been readily available for decades, whereas in the automotive industry it is still hard to come by. This current situation only exacerbates the challenge to properly integrate cybersecurity during product development in the vehicle industry as demanded by emerging standards and regulations. Without proper competence management, sufficient cybersecurity awareness, and competence; vehicle security also... read more →
→ Read full article

To be honest, security by design is currently more of an ideal idea than an established working principle in most product development processes across all industries. Especially in the intertwined supply chains of the automotive industry, even the most ambitious OEM quickly realizes: Security-by-Design fails due to the complexity of vehicle development. In this article, we will explore why this... read more →
→ Read full article

How do you manage the holistic organization of all the things that need to be done in terms of cybersecurity within an automotive development project? A major hub for this is the setting up of the so-called Cybersecurity plan. In this article we want to explain (in addition to our related learning video courses) why the Cybersecurity plan is of... read more →
→ Read full article

With regard to the rapid pace of technological progress in the automotive industry, times are currently dynamic and challenging in terms of cybersecurity aspects. In particular, UN Regulation No. 155, which sets the course for an overarching regulatory framework around cybersecurity, is creating new tasks for ensuring cybersecurity. It not only affects existing processes. It is also necessary to establish... read more →
→ Read full article