Residual Risk Evaluation – Necessary Iteration

Posted: September 5, 2024

In this article

Jiannan Wang

The cybersecurity standard ISO/SAE 21434 illustrates the development workflow in the Automotive concept phase. Cybersecurity requirements are derived from goals based on the mitigations of TARA (Threat Analysis and Risk Assessment) processes. It does however not refer to how to evaluate the effectiveness and adequacy of the successful implementation of those requirements. To handle such cases, re-evaluation of risks with consideration of implemented requirements becomes a necessity.

SystemWeaver’s cybersecurity module provides not only the initial evaluation of risks but also a second evaluation after the definition of cybersecurity requirements. This offers a way for residual risk evaluation in the early concept phase, as a confirmation of the adequacy of deployed controls, rather than pushing it to verification and validation.

 

You may also be interested in

  • Abstract technology

    White Paper: Before you choose a model, engineer the context

    Download this White Paper as a PDF EXECUTIVE SUMMARY I. The Decisive AI Question Is Not Which Model In systems engineering, the decisive question is not which AI model to use. It is what the model will be allowed to read, retrieve and reason over. AI value flows through the layer that [...]

  • Press Release: SystemWeaver Partners with IAV

    SystemWeaver Partners with IAV to Address the Structural Root Cause of Engineering Complexity SystemWeaver are announcing a partnership with IAV, one of the automotive industry's leading engineering service providers. Together, the two companies address complexity at its structural root: the lack of consistency across domains, organizations, and product lifecycles, rather than treating its symptoms. [...]

  • Futurist warp speed highway

    White Paper: SDV Applications for Automotive ECUs

    Download this White Paper as a PDF Achieving Cybersecurity and Functional Safety Compliance Through a Holistic Software Product Lifecycle Management Abstract—Software defined vehicles (SDVs) represent a paradigm shift in the development of automotive systems as functional innovation shifts from hardware domain to software. As original equipment manufacturers (OEMs) assume an increasing role in [...]