CANedge cybersecurity PDF docs (R155) Need documentation on the CANedge cybersecurity functionality e.g. for R155?
UNECE R155 applies to vehicle manufacturers (OEMs) seeking type approval of various vehicle types. This requires OEMs to prove that vehicles have adequate cybersecurity protections, including via a certified cybersecurity management system (CSMS).
In practice, OEMs typically implement the requirements of R155 using ISO/SAE 21434, the international standard for road-vehicle cybersecurity engineering. ISO 21434 defines the processes and work products needed to support R155 compliance, including TARA (Threat Analysis and Risk Assessment), vulnerability management, cybersecurity concept development and related documentation.
If a CANedge device is integrated as a permanent part of a vehicle intended for type approval, the OEM may need to include structured documentation that e.g. maps the device against the mitigation measures in R155 Annex 5. These requirements do not apply when the device is used solely for ad-hoc engineering analysis, development testing, or non-permanent telematics installations.
To help ease the OEM integration of the CANedge for such use cases, we now provide structured documentation for this purpose, including below:
- CANedge R155 - Alignment Summary
- CANedge TARA (Threat Analysis and Risk Assessment)
- CANedge Vulnerability Management
You can contact us to get a copy of these documents, e.g. by replying to this mail.
To learn more, see our CANedge cybersecurity article below: |