Chip lifecycle / Vehicle cybersecurity lifecycle / Cybersecurity Goals & Concept

Cybersecurity Goals & Concept

Turning the risks to be reduced into cybersecurity goals, recording cybersecurity claims for risks that are retained or shared, and writing the cybersecurity concept: the requirements on the item and its operational environment that achieve the goals, allocated to the vehicle architecture and to suppliers, and checked for conflicts with the functional safety concept.

Where this stage sits

This stage with its neighbours. Each row is a discipline active here, shaded by how mature its work is by the end of each stage.

Stage

^A03 Threat Analysis & Risk Assessment (TARA)

^A04 Cybersecurity Goals & ConceptYou are here

^A05 Cybersecurity Specification & Design

Organisation, approval and support milestones

Cybersecurity engineering milestones

CPCybersecurity plan agreed IACybersecurity interface agreements signed TATARA baselined CCCybersecurity concept approved DACybersecurity design approved

Cybersecurity management and governance^A

0.3

0.5

Supplier and interface management^A

0.3

0.5

Item definition, concept and architecture^A

0.5

0.8

Threat analysis and risk assessment^A

0.5

0.8

Hardware security and chip suppliers^A

0.5^A

Integration verification and testing^A

0.0

0.3

0.5

Validation and penetration testing^A

0.0

0.3

0.5

Type approval and homologation^A

0.3

0.5

Production security^A

0.0

0.3

Software update management^A

0.0

0.3

0.5

Key0.0Planned0.3Outlined0.5Analysed0.8Feature complete1.0CompleteFreezeFrozenFaded block: still at the step shown before it, Held below Complete or Maintained under change control once complete or frozenFreeze or sign-off pointMilestone for one item; the rest of the work carries onMilestone gateYou are here: Cybersecurity Goals & ConceptAI impactDisruption (red)Augmentation (blue)Opportunity (green)How AI is changing the workWhat the steps mean What the codes mean

Show this chart as a list

Stages

Threat Analysis & Risk Assessment (TARA)^A
Cybersecurity Goals & Concept (this stage)^A
Cybersecurity Specification & Design^A

Organisation, approval and support milestones

Cybersecurity engineering milestones

Disciplines

Cybersecurity management and governance^A
- Threat Analysis & Risk Assessment (TARA): maturity 0.3, Outlined. Project cybersecurity plan agreed: activities, tailoring and responsible people named; the first reviews check the item definition and the TARA for scope and method.
- Cybersecurity Goals & Concept: maturity 0.5, Analysed. Concept and specification reviews held; the plan, tailoring and records are current and the evidence the cybersecurity case needs is mapped to its sources.
- Cybersecurity Specification & Design: maturity 0.5, Analysed. Concept and specification reviews held; the plan, tailoring and records are current and the evidence the cybersecurity case needs is mapped to its sources.
Supplier and interface management^A
- Threat Analysis & Risk Assessment (TARA): maturity 0.3, Outlined

Register or sign in to read on

The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.