Course on planning, conducting and reporting a threat analysis and risk assessment under ISO/SAE 21434: damage scenarios and impact ratings, attack paths and feasibility, risk values, CAL evaluation and risk treatment.
Provides the knowledge and skills to plan, conduct and report all TARA activities for a vehicle system or sub-system under ISO/SAE 21434. It relates the standard and SAE J3016 to TARA and sets cybersecurity risk management in the context of ISO 31000. Participants work through threat analysis and damage scenarios, impact ratings, attack surfaces and attack paths, attack feasibility ratings and the attack potential method, risk value evaluation and cybersecurity assurance level (CAL) evaluation, then risk mitigation and treatment through management and technical cybersecurity controls, other risk assessment methods and a plan to implement TARA. Presentations are combined with in-class group exercises.
Facilitator not identified in public sources checked.
ISO/SAE 21434 and TARA · ISO 31000 and its cybersecurity activities · Risk assessment methods in ISO/SAE 21434
Threat analysis and damage scenarios · Impact rating · Attack surfaces, attack paths and feasibility rating · Attack potential, risk value and CAL evaluation
Risk mitigation and treatment · Management and technical cybersecurity controls · Other risk assessment methods · Plan to implement TARA
Design accelerated tests to estimate how products perform over their service lives.
Three-day blended short course on the systems engineering and safety assurance of autonomous systems that use AI, from hazards and machine learning assurance to human-autonomy teaming and the autonomous systems safety case.
Two-day hands-on course on system and design FMEA using the AIAG-VDA seven-step approach, from boundary and P diagrams to risk analysis, optimisation and design verification planning (DVP&R), with an optional certification exam.