Guidance published on cyber security for connected and automated vehicles

Sunday, 6 August 2017 11:35

The Department for Transport and Centre for the Protection of National Infrastructure have published an overview of the principles for obtaining good cyber security within the automotive sector. Documents The key principles of vehicle cyber security for connected and automated vehicles HTML The key...Request free trial

The Department for Transport and Centre for the Protection of National Infrastructure have published an overview of the principles for obtaining good cyber security within the automotive sector.

Documents

The key principles of vehicle cyber security for connected and automated vehicles HTML

The key principles of vehicle cyber security for connected and automated vehicles PDF, 2.63MB, 20 pages

Quick start guide to vehicle cyber security PDF, 601KB, 18 pages

Details

As vehicles continue to become smarter, it’s crucial that we take the correct steps to make them cyber secure.

The 8 principles in this guidance set out how the automotive sector can make sure cyber security is properly considered at every level, from designers and engineers, through to suppliers and senior level executives.

The quick start guide to vehicle cyber security lists the 8 principles:

organisational security is owned, governed and promoted at board level
security risks are assessed and managed appropriately and proportionately, including those specific to the supply chain
organisations need product aftercare and incident response to ensure systems are secure over their lifetime
all organisations, including sub-contractors, suppliers and potential 3rd parties, work together to enhance the security of the system
systems are designed using a defence-in-depth approach
the security of all software is managed throughout its lifetime
the storage and transmission of data is secure and can be controlled
the system is designed to be resilient to attacks and respond appropriately when its defences or sensors fail