ISO 21434: Cyber Security Training

So let's zoom all the way in — past the lifecycle diagram, past the management plan — down to the beating heart of ISO slash SAE twenty-one four thirty-four: the threat analysis and risk assessment, the TARA, laid out in Clause fifteen.

Part of the Critical Systems Analysis functional-safety series on ISO 21434.

In this episode:

• Right — you've seen why cars need a cybersecurity standard, and where twenty-one four thirty-four sits in the family.
• First, meet the thing we're chasing: a vulnerability.
• Now watch it travel.
• So here's the fork the whole software-and-systematic world turns on.
• So the standard makes a move that almost sounds like a confession.
• And that dial has a name: the Cybersecurity Assurance Level — CAL one through CAL four.

Reference: Clause 15 in ISO/SAE 21434:2021 is titled 'Threat analysis and risk assessment methods' (TARA). This is believed correct; verify the clause number against the published standard be

More in this series: IEC 62443 — Industrial Cybersecurity

Explore more from Critical Systems Analysis.

• Partner with us
• Follow on LinkedIn
• Visit our website
• Read our feature on Automate.org

All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.