ISO 21434: Cybersecurity Concept

So let's zoom all the way in. Past the whole lifecycle, past the management plan, down to the clause where the standard stops describing process and starts actually thinking.

Part of the Critical Systems Analysis functional-safety series on ISO 21434.

In this episode:

• Here's the map for the next few minutes.
• First, what does this standard even call the thing that can go wrong? It does not say hazard, that is the safety world.
• These two live inside a pipeline called the TARA, threat analysis and risk assessment.
• Here is the core move of this whole pack.
• Each factor gets its own scale.
• Now you combine them with a lookup.

Reference: Clause mapping: The threat analysis and risk assessment (TARA) methods are in Clause 15 of ISO/SAE 21434:2021; the concept phase (cybersecurity goals and cybersecurity concept) is

More in this series: IEC 62443 — Industrial Cybersecurity

Explore more from Critical Systems Analysis.

• Partner with us
• Follow on LinkedIn
• Visit our website
• Read our feature on Automate.org

All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.