Glossary · ISO/SAE 21434

Cybersecurity Interface Agreement (CIA)

Also known as: CIA, Supplier Cybersecurity Agreement

Definition

Cybersecurity Interface Agreement (CIA): ISO/SAE 21434 Clause 7 contract that allocates cybersecurity activities between customer and supplier. A Cybersecurity Interface Agreement names points of contact, allocates each cybersecurity activity via a RASIC matrix, defines information-sharing and audit rights, and specifies incident-response SLAs and end-of-cybersecurity-support.

Where this matters: ISO/SAE 21434 Consulting

Required whenever cybersecurity activities are distributed between OEM and supplier.

Related terms

Cybersecurity Management System (CSMS)
A Cybersecurity Management System (CSMS) is the organisation-wide set of processes that governs vehicle cybersecurity risk across the full lifecycle.
ISO/SAE 21434
International standard for road-vehicle cybersecurity engineering across the lifecycle.

German OEM interface agreements: supplier evidence checklist
ISO 21434 consulting
Cybersecurity Interface Agreements (Clause 7)

Need help applying Cybersecurity Interface Agreement (CIA) on a programme? Use the contact form to reach Agnile’s engineering team.

Cybersecurity Interface Agreement (CIA)

Definition

Cybersecurity Management System (CSMS)

ISO/SAE 21434