Skip to main content

Automotive industry releases vehicle cybersecurity best practices

Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry. The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat de
July 22, 2016 Read time: 2 mins
Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry.     

The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat detection and protection incident response, security by design, awareness and training and more.

The Best Practices provide deep technical and organizational breadth to support, develop, and improve defences against potential cybersecurity threats of the motor vehicle network. They are grounded in ISO, NIST and other established cybersecurity frameworks but are tailored to the motor vehicle. Auto-ISAC members have committed to continuously enhancing the Best Practices over time to keep pace with the constantly evolving cyber landscape.

"Automakers are committed to being proactive and will not wait for cyber threats to materialise into safety risks," said Auto-ISAC chairman Tom Stricker of Toyota.

Related Content

  • Bespoke ITS is helping to reduced collisions on America’s rural roads
    October 22, 2014
    David Crawford cherrypicks conference and award highlights Almost 30% of all US citizens live in rural areas or very small communities, and 34 of the 50 states exceed this level in their own populations, with the proportions rising as high as 85%. And although rural routes carry only 35% of all traffic, the accidents that occur on them account for some 54% of all US road traffic accident deaths.
  • Transition to keyless automotive access systems fuels growth opportunities
    December 20, 2016
    The rising popularity of mobility services such as car sharing, rental and leasing is stoking significant interest in keyless access systems, according to Frost & Sullivan research. Following the saturation of radio frequency technology, Bluetooth low energy (BLE), biometrics and near-field communication (NFC) are poised to emerge as the next wave of wireless technologies in the automotive industry. This evolution from legacy vehicle access system to advanced access systems opens the market to specialist co
  • Monitoring, detection and control systems inside tunnels can do much to improve traveller safety
    August 6, 2013
    ITS technology can do a great deal to improve tunnel safety, as Colin Sowman discovers. It was back in April 2004 that the European Parliament adopted the EU Directive which lays down the Minimum Safety Requirements for Tunnels in the Trans-European Road Network (2004/54/EC). This was the first unitary legislation setting minimum safety standards for European road tunnels and was designed to harmonise the management of tunnel safety at a national level. Operators of existing tunnels have until 30 April 201
  • Navigating a path towards greater safety
    May 31, 2013
    Eric Sampson takes a look at why the European Union’s eCall system is taking rather longer to arrive than it should. There’s an old story about the person who asked an Irishman for directions and after much thought he responded: “If you’re going there from here it would be better to start from somewhere else.” This came to mind when I was recently reflecting on eCall and wondering when it will come - some stakeholders say the answer is never. So despite years of workshops and discussions, eCall is still not