CyberSecurity

ISO/SAE 21434:2021 is an international standard for managing cybersecurity risks in road vehicle electrical and electronic systems, including their components and interfaces. Jointly developed by ISO and SAE International, it establishes a structured approach to cybersecurity throughout concept, development, production, operation, maintenance, and decommissioning. As vehicles become more connected and software-dependent, the standard helps manufacturers and suppliers integrate cybersecurity into engineering processes and maintain protection against evolving threats. 

ISO 24089:2023 establishes requirements and recommendations for managing vehicle software updates at both organizational and project levels. It covers vehicles, electronic control units (ECUs), supporting infrastructure, and the assembly and deployment of software update packages after initial development. By defining shared processes and responsibilities, it helps manufacturers and suppliers coordinate updates as vehicle software evolves.

ISO 24089 complements ISO/SAE 21434, which addresses cybersecurity risk management throughout the vehicle lifecycle. Used together, they help organizations integrate cybersecurity considerations into software update engineering, supporting the delivery of updates that address vulnerabilities while managing risks associated with the update process itself.

These standards should be considered alongside UN R155, which addresses vehicle cybersecurity and Cyber Security Management Systems (CSMS), and UN R156, which addresses software updates and Software Update Management Systems (SUMS). Together, these regulations connect organizational processes with vehicle-level requirements for cybersecurity and controlled software updates.