Skip to main content

Automotive industry releases vehicle cybersecurity best practices

Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry. The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat de
July 22, 2016 Read time: 2 mins
Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry.     

The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat detection and protection incident response, security by design, awareness and training and more.

The Best Practices provide deep technical and organizational breadth to support, develop, and improve defences against potential cybersecurity threats of the motor vehicle network. They are grounded in ISO, NIST and other established cybersecurity frameworks but are tailored to the motor vehicle. Auto-ISAC members have committed to continuously enhancing the Best Practices over time to keep pace with the constantly evolving cyber landscape.

"Automakers are committed to being proactive and will not wait for cyber threats to materialise into safety risks," said Auto-ISAC chairman Tom Stricker of Toyota.

Related Content

  • January 21, 2016
    Vehicle cybersecurity guidebook published
    SAE International has published its guidebook on vehicle cybersecurity, SAE J3061: Cybersecurity Guidebook for Cyber-Physical Vehicle Standards, which establishes a set of high-level guiding principles for cybersecurity as it relates to cyber-physical vehicle systems. The guidebook includes: Definition of a complete lifecycle process framework that can be tailored and utilised within each organisation’s development processes to incorporate cybersecurity into cyber-physical vehicle systems from concept ph
  • May 14, 2018
    The rise of V2X: it’s time for ITS to put up the shields in cyberspace
    Traffic management has largely been shielded from the sort of malicious hacking that is commonplace in other industries – but with billions of connected devices in the world it won’t stay that way, warn internet experts Keith Golden and Brandon Johnson. Traditionally isolated from networks and the internet over most of its history, the traffic management industry has largely been shielded from malicious hacking and system intrusion that have become commonplace in other industries. However, as the rate of
  • November 28, 2016
    UK must prepare for increased transport cyber-security threat, says TSC
    The UK Transport sector needs to increase its focus on cyber-security in the face of rapidly emerging technological developments, according to Transport Systems Catapult (TSC). In a new report, supported by IBM, the Institute of Engineering Technology (IET), the Intelligent Mobility Partnership (IMPART) and the Digital Catapult, the TSC cites numerous trends in the realms of technology, cyber security, mobility, and society are all converging to make it a much more complex environment in which to deliver
  • May 12, 2022
    How can your business plan for the worst?
    Covid and extreme weather events have recently shown that disruption to our lives and daily routines can come suddenly, and on a staggering scale. Roger Leyland of ISN Solutions outlines what can be done to ensure continuity for agencies and businesses