Skip to main content

Automotive industry releases vehicle cybersecurity best practices

Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry. The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat de
July 22, 2016 Read time: 2 mins
Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry.     

The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat detection and protection incident response, security by design, awareness and training and more.

The Best Practices provide deep technical and organizational breadth to support, develop, and improve defences against potential cybersecurity threats of the motor vehicle network. They are grounded in ISO, NIST and other established cybersecurity frameworks but are tailored to the motor vehicle. Auto-ISAC members have committed to continuously enhancing the Best Practices over time to keep pace with the constantly evolving cyber landscape.

"Automakers are committed to being proactive and will not wait for cyber threats to materialise into safety risks," said Auto-ISAC chairman Tom Stricker of Toyota.

Related Content

  • June 18, 2024
    Crossing the line: managing traffic across jurisdictions
    The US will eventually have a fully-digitised transportation network, with traffic management devices talking to each other across massive distances. It’s really a question of pain points on the road to full deployment, explains Mark Talbot of Q-Free
  • July 17, 2012
    Connected vehicles, connected systems equals next generation ITS
    Iteris has been awarded a new contract to lead a team working to update and support the United States’ National ITS Architecture. Pete Goldin reports on this latest initiative to help all US agencies’ development and application of ITS systems The United States Department of Transportation has a set of standards safeguarded for ITS for the US, with a vision for the future of transportation technology called the National ITS Architecture. This may sound like a secret plan kept in a vault somewhere, but the
  • August 8, 2018
    Regulation time-lag will hit driverless technology hard says leading consultancy BDO
    The legislation surrounding driverless cars is lagging so far behind the technology involved that the industry is unlikely to see a regulatory framework in place any time soon says leading international business, finance and taxation consultancy BDO. And IEEE, "the world’s largest technical professional organisation dedicated to advancing technology for the benefit of humanity" can only see problems ahead as the politicians fall further and further behind. BDO has been looking at a report from www.Spectr
  • May 10, 2019
    SafeRide: it’s time to act on cyberattacks
    Cyber threats are increasing rapidly and conventional security measures are unable to keep up. Ben Spencer talks to SafeRide’s Gil Reiter about what OEMs can do now As more vehicles become connected, so the potential threats to their security increase. Gil Reiter, vice president of product management for security firm SafeRide, says the biggest ‘attack surface’ for connected cars is their internet connectivity - and the in-vehicle applications that use the internet connection. “The most vulnerable co