ISO 21434: Case Study

So far we've flown over the whole cybersecurity lifecycle. Now drop down into the part almost nobody films: the management clauses.

Part of the Critical Systems Analysis functional-safety series on ISO 21434.

In this episode:

• Here's the trap.
• The standard splits it in two.
• So who's actually on the hook? At the top, governance is a top-management job — they set the policy, fund it, and answer for it if the culture rewards shipping over securing.
• The spine of the whole thing is the cybersecurity plan.
• Here's the rule that keeps everyone honest: every activity has to leave a trace.
• All those work products roll up into one thing: the cybersecurity case.

Reference: Clause-level mapping is accurate for ISO/SAE 21434:2021: Clause 5 = organizational cybersecurity management, Clause 6 = project-dependent cybersecurity management, Clause 7 = distr

More in this series: The V-Model and Safety Lifecycle

Explore more from Critical Systems Analysis.

• Partner with us
• Follow on LinkedIn
• Visit our website
• Read our feature on Automate.org

All shows on Apple Podcasts: AI & ML Safety | Fault Tree Analysis | FS Assessment | Safety Analysis | IEC 61508 | IEC 62443 | ISO 10218 | ISO 12100 | ISO 13849 | ISO 26262 | ISO/PAS 8800 | ISO 26262-11 | V-Model | UL 4600.