ISO 21434: Vulnerability Analysis

So far we have zoomed out to the whole cybersecurity lifecycle. Now zoom all the way in, to one clause that keeps working the entire time your vehicle is on the road. In ISO S-A-E twenty-one four thirty-four, Clause 8 covers continual cybersecurity activities, the part of the standard that never stops after the product ships.

Part of the Critical Systems Analysis functional-safety series on ISO 21434.

In this episode:

• This is ISO S-A-E twenty-one four thirty-four, road vehicles, cybersecurity engineering.
• First, name what can go wrong, because twenty-one four thirty-four is picky about words.
• Locate yourself.
• Why sweat a single weakness.
• Here is the move that unites this whole family of standards.
• Zoom in on feasibility for a second, because it is where engineers argue most.

Reference: Vulnerability analysis sits in ISO/SAE 21434 Clause 8, 'Continual cybersecurity activities.' I state the subclause order as monitoring, event assessment, vulnerability analysis, vu

More in this series:

Explore more from Critical Systems Analysis.

• Partner with us
• Follow on LinkedIn
• Visit our website
• Read our feature on Automate.org

All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.