The agreed arrangement under which suppliers tell the manufacturer about vulnerabilities in their components, and the manufacturer tells suppliers about findings affecting them, during the support period.
Agreement or business case Work product in the Vehicle cybersecurity and software update lifecycle
It makes sure vulnerability information from the supply chain reaches the manufacturer's monitoring quickly and in usable form. Without it, a supplier may know of a vulnerability for months before the manufacturer hears of it, and notifications arrive without the detail needed to judge impact.
The full lifecycle detail, with its charts, flows, tables and every section, is for registered members. Registration is free and takes a minute. You come back to this page afterwards.