Risk management for your supplier ecosystem

UN regulation 155: cybersecurity and cybersecurity management system

The vehicle manufacturer shall

• be required to demonstrate how their cybersecurity management system will manage dependencies that may exist with contracted suppliers, service providers or manufacturer’s sub-organizations in regards of the requirements of paragraph 7.2.2.2. [7.2.2.5.].

• identify and manage, for the vehicle type being approved, supplier-related risks. [7.3.2.].

ISO/SAE 21434: road vehicles – cybersecurity engineering

[…] the capability of the considered supplier, to develop and, if applicable, perform post-development activities according to this document shall be evaluated. [RQ-15-01].

Automotive-specific regulations make it critical for OEMs and suppliers to set up adequate cybersecurity management systems with greatest efficiency. Our ESCRYPT Product security organization framework PROOF helps you cover cybersecurity development in five domains: governance, risk management, concept & development, production & operation, and ecosystem. Your advantage: a structured, traceable approach to achieving cybersecurity in accordance with the legal and standard requirements.

Take your supplier risk management to the next level and realize smart cybersecurity with the ESCRYPT PROOF maturity framework – now also available on the Alyne GRC platform. This integration enables a digitalized supplier risk management including efficient audit, evaluation, and benchmarking. Take advantage of higher maturity levels and continuously guide your supply chain to your organization’s target maturity. Close the plan-do-check-act loop with follow-up delta audits and hints for continuous improvement.