Glossary · ISO/SAE 21434
Also known as: ISO 21434, ISO/SAE 21434:2021
ISO/SAE 21434: International standard for road-vehicle cybersecurity engineering across the lifecycle. ISO/SAE 21434:2021 — "Road vehicles — Cybersecurity engineering" — defines the process and work-product structure for managing cybersecurity risk through concept, development, production, operation, maintenance, and decommissioning.
Where this matters: ISO/SAE 21434 Consulting
It introduces the Cybersecurity Management System (CSMS), distributed cybersecurity activities, the TARA methodology, cybersecurity goals/concepts/cases, and the post-development continual activities such as vulnerability handling.
Why it matters
ISO/SAE 21434 is the practical engineering reference assessment bodies expect in CSMS audits and type-approval submissions for UN R155 markets. Programmes that align early avoid late-stage evidence reconstruction.
Related terms
A Cybersecurity Management System (CSMS) is the organisation-wide set of processes that governs vehicle cybersecurity risk across the full lifecycle.
Threat Analysis and Risk Assessment — the structured cybersecurity risk method of ISO/SAE 21434.
Structured argument with evidence that an item's cybersecurity goals are met.
ISO/SAE 21434 Clause 7 contract that allocates cybersecurity activities between customer and supplier.
UN Regulation No. 155 makes a certified Cybersecurity Management System and vehicle-type cybersecurity evidence a precondition for vehicle type approval.
Need help applying ISO/SAE 21434 on a programme? Use the contact form to reach Agnile’s engineering team.