ISO 21434: Distributed cybersecurity activities

So let's zoom all the way in, past the whole cybersecurity lifecycle, and land on one clause that most people skip right over: Clause 7, Distributed cybersecurity activities. Here's why it matters. Almost no carmaker builds the whole vehicle. The braking controller comes from one supplier, the telematics unit from another, the software stack from a third.

Part of the Critical Systems Analysis functional-safety series on ISO 21434.

In this episode:

• Let's start by killing a myth.
• So here's the term, in plain language.
• Picture the two sides of the table.
• And notice what has to happen first.
• So the shape of the whole clause is a sequence.
• That agreement in the middle has a name: the cybersecurity interface agreement.

Reference: Clause 7 of ISO/SAE 21434:2021 is titled 'Distributed cybersecurity activities' and covers responsibility sharing between customer and supplier. Confirmed via web sources; exact su

More in this series: IEC 62443 — Industrial Cybersecurity

Explore more from Critical Systems Analysis.

• Partner with us
• Follow on LinkedIn
• Visit our website
• Read our feature on Automate.org

All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.