Cybersecurity for safety components

Why are safety components of various industry sectors becoming increasingly vulnerable to cyber-attacks?

Automation is now becoming commonplace in today’s world, affecting various sectors like transportation and industrial manufacturing. In modern vehicles, many electronics are embedded, and the vehicles become much like computers on wheels consisting of various interfaces ranging from Wi-Fi to cellular. This increasing interconnectivity makes vehicles vulnerable to cybersecurity attacks, which are a threat to both the life of the driver and road users as well as the continuity of the automotive/supplier business.

Additionally, in the industrial automation environment the convergence between information technology (IT) and operational technology (OT) networks and systems is increasing. This also provides a bigger opportunity for cyber-attacks and new kind of vulnerabilities to arise. Industrial IT security and automotive cyber security, then, must become a priority.

Why is cybersecurity for safety components so important?

Recent cyber-attacks targeting the industrial world have shown how important it is to ensure cybersecurity regardless of the industry sector. This becomes even more important regarding safety components to ensure the smooth functioning of devices. With increasing connectivity, all connected industrial applications can be affected by security threats that compromise the entire plant.

It is therefore important to ensure the cybersecurity and safety of your devices and vehicles. This has several benefits, including:

Minimising risk to your products by enhancing their cybersecurity resilience.
Increasing your competitive edge by achieving a certification (such as automotive security certification) which demonstrates your business' cybersecurity capabilities.
Growing your customer trust by working with a neutral third-party service provider like TÜV SÜD and achieving a certification with the TÜV SÜD Mark.
Enhancing your knowledge of functional safety and cybersecurity, including learning how to make use of the synergies of safety and cybersecurity related product development.
Understanding the regulatory needs and the benefits of combined assessment and certification.

TÜV SÜD is your global expert for safety and security

By working with us as your end-to-end expert partner you can achieve various synergies by gaining combined services along the process chain. Working together with a global network of laboratories, you benefit from our expertise surrounding industrial IT security, automotive cybersecurity, and general industry-wide safety and security best practice.

Our experts understand your safety processes. This means we’re able to define the right measures and guide you through the various steps to ensure cybersecurity is integrated into your processes. Additionally, we offer combined safety and cybersecurity assessments.

We analyse the security of your specific component and assess and document identified vulnerabilities. This enables us to support you in understanding any critical gaps.

Together with our clients, we define appropriate protective measures and recognise residual risks based on our well-established methods. As one of the first service providers in the field of cybersecurity for safety components, TÜV SÜD offers various services from the assessment of IT security management systems and risk analysis to whole process analysis and technical checks of IT components and systems.

Our cybersecurity services for safety components

At TÜV SÜD, we offer a variety of cybersecurity and safety services for various industries like the automotive and automation industries. Our services include:

Assessment and Testing
Workshops
Certification

Our cybersecurity services for safety components are mainly based on the ISO/SAE 21434 standards. When it comes to automotive cybersecurity, they include process and product certifications which are relevant to the whole automotive supply chain and can also be used for type approval according to UNECE WP 29 R155.

We offer the following cybersecurity services for safety components:

Assessment and Certification

ISO/SAE 21434 assessment

The ISO/SAE 21434 system conformity assessment helps companies determine if their organisational and engineering processes for cybersecurity are compliant with ISO/SAE 21434. This is the relevant norm for automotive cybersecurity engineering and can be used as compliance evidence.

Combined cybersecurity and safety conformity assessment

Performing a combined conformity assessment according to functional safety standards like IEC 61508 or ISO 13849 and industrial IT security according to IEC 62443
TÜV SÜD mark product certification
TÜV SÜD mark process certification
The assessment addresses safety and security equipment relevant for manufacturers and integrators

IEC 62443 certification

TÜV SÜD Mark and IECEE CB-scheme certifications
For product suppliers, TÜV SÜD provides certification services based on

o IEC 62443-4-1 secure product development lifecycle
o IEC 62443-4-1 and -4-2 for product components
o IEC 62443-4-1 and -3-3 for (control) systems

Corresponding certifications are available to system integrators based on

o IEC 62443-2-4 security programme for service providers
o IEC 62443-2-4 and -3-3 architecture/blueprint

Workshops, training and pre-assessment services

Cybersecurity and functional safety workshops

Our cybersecurity workshops address various target groups with different levels of knowledge, ranging from:

Those new to the topic of cybersecurity and functional safety who need a simple introduction
Those requiring a basic understanding of cybersecurity and functional safety
Those who have a basic understanding of cybersecurity and functional safety and need more advanced knowledge
Those who are already experienced in cybersecurity and need to extend their expertise in functional safety
Those already experienced in functional safety who need to extend their expertise in cybersecurity