■ISO21434 road vehicle network security management system certification
Before the introduction of intelligent networking and autonomous driving functions into the automotive field, functional safety has always been the top priority in the field of automotive safety, and functional safety methods and processes are also the main areas of automotive industry standards and development.
With the electrification, intelligence and networking of cars, the emergence of various intelligent networked cars and self-driving cars, car connectivity functions, vehicle maintenance, traffic safety information sharing and so on have become more and more popular. at the same time, it also increases the possibility of hackers attacking the car network, thus bringing risks to the car network security.
ISO21434 is an automotive cybersecurity standard, based on ISO 26262, and includes security management, cybersecurity management, ongoing cybersecurity activities, associated risk assessment methods, and cybersecurity within the development and post-development phases of automotive concept products.
ISO21434 will empower your credibility in the field of automotive safety, making you more worthy of trust and trust.
■ISO21434 Certification Process
Contract Signing Project Communication Preparation Gap Analysis Standard Training Process Planning Process Review Issue Certificate
■Certification Standards
ISO/SAE 21434: 2021 Road vehicles-Cybersecurity engineering road vehicles-Cyber security engineering
■ZOHOCERT
Is a professional service organization that has been deeply involved in the IT information industry for many years.
Has a number of senior academic management experts with more than 20 years of practical experience.
High-quality IT expert team services with a nationalized vision
Developed specifically to ensure road user safety, this International Standard establishes benchmarks for OEMs and suppliers at all levels to ensure efficient and effective management of cybersecurity risks, such as risk levels and corresponding cybersecurity measures based on the ultimate impact on road users.
This standard provides a standardized cybersecurity framework that establishes cybersecurity as an integral engineering element for the entire vehicle life cycle-from the conceptual stage to the end of life of the vehicle, ensuring that cybersecurity is fully considered in the post-development phase (software updates, service and maintenance, incident response, etc.), and requires an effective approach-lessons learned, training, and communication related to automotive cybersecurity.
More specifically, the scope of this standard includes:
● Specific requirements for cybersecurity risk management
● Network security process framework
● A common language that helps manufacturers and organizations communicate about their cybersecurity risks
This standard intentionally does not specify specific network security technologies or solutions, provisions on remediation methods, or network security requirements for telecommunications systems, Internet of Vehicles cloud servers, charging stations, or autonomous vehicles.
the contrary, this standard emphasizes the risk identification method and the complete process of network risk. For example, the standard states that if a compromised back-end server, charging pile or autonomous vehicle causes an immediate risk to road users, it must be monitored, controlled and mitigated.