Skip to main content

Automotive industry releases vehicle cybersecurity best practices

Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry. The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat de
July 22, 2016 Read time: 2 mins
Members of the US Automotive Information Sharing and Analysis Center (Auto-ISAC) have released an overview of comprehensive Automotive Cybersecurity Best Practices, developed as a proactive measure to further enhance vehicle cybersecurity throughout the industry.     

The Executive Summary has been released publicly on the Auto-ISAC website. The Best Practices provide guidance to assist an organisation's development in seven key topic areas, including governance, risk assessment and management, threat detection and protection incident response, security by design, awareness and training and more.

The Best Practices provide deep technical and organizational breadth to support, develop, and improve defences against potential cybersecurity threats of the motor vehicle network. They are grounded in ISO, NIST and other established cybersecurity frameworks but are tailored to the motor vehicle. Auto-ISAC members have committed to continuously enhancing the Best Practices over time to keep pace with the constantly evolving cyber landscape.

"Automakers are committed to being proactive and will not wait for cyber threats to materialise into safety risks," said Auto-ISAC chairman Tom Stricker of Toyota.

Related Content

  • November 6, 2017
    SwRI investigates cybersecurity weaknesses in transportation management systems
    Southwest Research Institute (SwRI), in San Antonio, has been awarded a $750,000 (£573,000) contract from the Transportation Research Board to help state and local agencies address cyber-attack risks on current transportation systems and those posed by future connected vehicles. Cyber security firm, Praetorian will support SwRI by conducting a security audit of traffic management systems and develop a web-based guide to help transportation agencies learn how to safeguard equipment.
  • January 14, 2020
    DoTs can benefit from high fibre content
    Existing fibre architecture may be one of the most important assets for DoTs going forward: Skyline’s Paul Lennon explains the importance of evaluating ITS network infrastructure maturity
  • February 1, 2012
    Intersection management, cooperative infrastructures - what next?
    What do recent vehicle recalls mean for future cooperative infrastructures? Anthony Smith takes a look. As ITS industry stakeholders converge on Amsterdam for the 2010 Cooperative Mobility Showcase, an unprecedentedly wide range of technologies will be on display demonstrating what might be achievable in the future from innovations based on Vehicle-to-Vehicle (V2V) and Vehicle-to-Infrastructure (V2I) communications.
  • January 10, 2013
    EU research develops method for evaluating critical infrastructure
    The European Commission’s SeRoN research project has drawn to a close, having developed a sophisticated method of identifying and quantifying threats to critical infrastructure. In December 2008 the European Commission published the directive 2008/114/EC on the identification, designation and assessment of the need to improve ‘European critical infrastructure’. In line with the objectives formulated in this directive, the SeRoN (Security of Road Transport Networks) research project was established in Novemb