The software that implements the item's security functions and controls, written to the software security specification and secure coding rules, kept under configuration control.
Source Work product in the Vehicle cybersecurity and software update lifecycle
It is the actual implementation of the controls the cybersecurity case relies on, so it must be traceable, reviewed and reproducible. Without controlled implementation, tests run on unknown versions, the bill of materials is incomplete, and vulnerabilities in third party components cannot be matched to vehicles.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.