ISO 21434: Vulnerability Management

So let's zoom all the way in. Past the whole cybersecurity lifecycle, past the risk-assessment methods, down to Clause 8: continual cybersecurity activities. This is the part of ISO 21434 that never stops running, even years after your vehicle is on the road.

Part of the Critical Systems Analysis functional-safety series on ISO 21434.

In this episode:

• So here's the clause on the table.
• First, name the thing that can go wrong.
• Now, where are you standing in the process? Clause 8 is a conveyor belt that never switches off.
• Let's watch a weakness turn into harm, because the hinge in the middle is everything.
• Here's the move every standard in this family makes: risk is never one number.
• Take those two factors and run them through a lookup.

Reference: ISO/SAE 21434:2021 places continual cybersecurity activities in Clause 8, with cybersecurity monitoring, cybersecurity event assessment, vulnerability analysis, and vulnerability m

More in this series: ISO 26262 — Automotive Functional Safety | Semiconductor Functional Safety (ISO 26262-11)

Explore more from Critical Systems Analysis.

• Partner with us
• Follow on LinkedIn
• Visit our website
• Read our feature on Automate.org

All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.