The document discusses autonomous vehicle (AV) cybersecurity standards and compliance. It notes that AVs are expected to be common within the auto industry by 2025 and potential costs from cyber hacks could be $24 billion. The two main compliance standards are ISO 21434 and UNECE WP.29, which govern vehicle cybersecurity. Key aspects of achieving compliance outlined in the document include having a cybersecurity strategy and process, considering security in vehicle design, conducting threat analysis and risk assessments, having an incident response plan, and maintaining security throughout the product development lifecycle.

1. The Race to Autonomous
Compliance
May 25, 2022

2. Stutay Monga
Director
Schellman & Company

3. Autonomous Vehicles Are Here To Stay
20M
10Y
$24B
∞
Autonomous
Vehicles (AVs) on
the road by 2025
AVs will be a common, if
not preferred, option
within the auto industry
Potential Cost to
the Auto Industry
from Cyber Hacks
Techniques and
ways to hack AVs

4. Security Standards for AVs
ISO 21434 UNECE WP.29
Road Vehicles – Cybersecurity Vehicle Cybersecurity
The path to compliance and thereby speed to market requires:
Strategy: Are automotive organizations making cybersecurity one of their primary objectives?
Process: What is the process to become ISO 21434 compliant and the use of the Cybersecurity Assurance
Level (CAL)?
Design: What are the components of an autonomous vehicle that will benefit from enhanced security?
Today, AV Cybersecurity compliance is primarily governed by these two standards:

5. ISO 21434: Top Management
The most critical component to Cybersecurity Management System (CSMS)
compliance is Top Management.
Governance
Components of
CSMS

6. ISO 21434: Threat Analysis & Risk Assessment
Threat Scenarios
Frequency of Assessment: Continuous Monitoring or
Periodic Assessments
Risk Mitigation and Treatment Scenarios
Risk Identification and Impact Ratings
Vulnerabilities & Attack Paths

7. ISO 21434: Cybersecurity Incident Response
Major Components of the Incident Response Process
Communication Plan &
Roles and Responsibilities
Measurement Metrics
Identification and Remedial
Actions
Key Decision Makers and
Closure Criteria

8. ISO 21434: Product Development
Maintaining a high level of security throughout the entire product development
process is paramount.
Product
Development
Lifecycle: V-Model
Workflow
Design and
Testing
Component Level
Requirements
Key
Components of
Product
Development
Process
Evaluating Post
Deployment/
After Market
Performance

9. In order to keep pace with the evolution
in the AV industry, its imperative that
organizations begin to look at
compliance in conjunction with vehicle
design and development.

10. Thank You
www.schellman.com
info@schellman.com
1.866.254.0000
Int’l +1.813.288.8833