These cybersecurity requirements help regulate automotive products throughout their entire lifecycle, from concept and design to production, maintenance, and retirement. To comply with these standards, Microchip Technology's corporate processes related to certain automotive products were recently audited by UL Solutions, which certified their compliance with ISO/SAE 21434.
The ISO/SAE 21434 standard, developed by the International Organization for Standardization (ISO) in conjunction with the Society of Automobile Engineers (SAE) International, was designed to help companies define cybersecurity policies and manage risk. It is a demanding specification with 45 security categories, known as work products, each of which establishes a unique set of requirements covering all aspects of the design of electrical and electronic systems for vehicles, from integrated circuits and software to firmware and libraries.
The ISO/SAE 21434 designation also confirms that a certified corporate cybersecurity management system has been implemented. This verifies that cybersecurity is a top priority for the company, from the management team down to all departments, including design, testing, product, applications, marketing, quality, verification, and validation teams. All stakeholders throughout the product lifecycle are required to receive cybersecurity training and comply with established requirements. A Threat Analysis and Risk Assessment (TARA) methodology is also incorporated at various stages of the product lifecycle when devices are to be integrated into automotive cybersecurity platforms.
“Security is a fundamental pillar at Microchip, and the ISO/SAE 21434 certification demonstrates our commitment to maintaining high levels of automotive security,” said Matthias Kaestner, corporate vice president of Microchip’s automotive business unit. “Our customers can trust Microchip to be a security advisor with the expertise to guide them through their automotive cybersecurity design process.”
While each manufacturer is responsible for demonstrating compliance with the standard at the vehicle level, ISO/SAE 21434 encourages all companies in the production ecosystem to play a role in proactively managing cybersecurity threats. Customers using electronic control units that incorporate Microchip security products designed within the ISO/SAE 21434 certified process environment can be relieved of the arduous task of reviewing thousands of pages of process documentation to determine compliance. This reduces the workload on suppliers and manufacturers to demonstrate that they have a robust security foundation.
