By continuing to use this site you agree to the use of cookies: Accept Cookies. For more information and to find out how to change this click here.
Bitte aktivieren Sie das Setzen von Cookies für diese Website.

Vector Consulting support your challenges for cyber security

Cyber-Security

Your Situation

Do you need to harden your systems against attacks from inside or outside? Do you want to implement the state of practice methods and tools for integrated cyber-security? Are standards such as ISO 27001 (IT Security), SAE J3061 (automotive security) or ISO 15408 (common criteria for cyber-security) relevant in your environment? Cyber-security is of a growing concern across industries. Security is absolutely mission-critical in most environments, because systems are increasingly open for external penetration and because attackers are eager to hack. Even worse security directly impacts functionality, user experience and safety, and thus has become subject to product liability. For instance, functional safety is not feasible without a concise approach to cover cyber-security. Based on the specific challenges of security, companies must ensure effective protection against manipulations of electronic systems. Key points in the development of protected systems are the proper identification of security requirements, the systematic realization of security functions, and a security validation to demonstrate that security requirements have been met.

Our Solution

Based on years of experience with automotive Cyber-Security and Safety advises Vector Consulting Services with:

  • Vector SecurityCheck with risk analysis (TARA), trade-off assessment, prioritized proposals and initial methodical instructions
  • Interim Safety and Security Manager
  • Creating safety analyzes and concepts develop, specify and check security requirements based on threat scenarios and Automotive Common Criteria
  • Sustainable implementation of ISO 27001, SAE J3061 and ISO 15408
  • Methodology and tool support for security-oriented tests and Resilience
  • Process assessments for your suppliers with focus on safety and security
  • Awareness training on cyber security for managers and developers
  • Training and coaching of managers and developers to the effective implementation of cyber security

Your Benefits

Our expertise in practically working with many companies worldwide enables uniform and effective implementation of cyber security. By embedding professional cyber-security methodology into the lifecycle, we ensure building the necessary competences and facilitate efficient yet thorough implementation.

Vector Consulting Services ist bevorzugter Dienstleister vieler Unternehmen zum Thema funktionale Sicherheit

Reference Project

Situation: A leading automotive OEM introduced software updates "over the air" (OTA). He had a lot of experiences with secure systems, but deliberately sought in this situation external support to implement thorough state-of-the-practice methods. With our risk based security methodology and broad global experiences in developing and maintaining safe systems Vector was the first choice.

Solution: Vector was asked to evaluate and optimize cyber-security. First we did some workshops with the employees. This built the necessary initial security competences. At the same time we made the Vector SecurityCheck as an initial baseline. In addition we were able to evaluate the existing architecture and methodology. On this basis we initiated a comprehensive threat assessment (TARA: Threat and Risk Analysis). From the TARA results we derived security goals, which were then evaluated. It soon became clear that some mechanisms, such as secure boot, though necessary and effective, would take more time and effort than initially foreseen. With our risk oriented approach used we brought all necessary steps in a comprehensible framework. This framework was then implemented in the coming months - finally also adressinmg secure boot.

Result: The risk oriented security methodology of Vector addressed the necessary threats with reasonable effort. At the same time we built a cyber-security competence and culture in the company, which covered all relevant stakeholders in their respective roles.

Your contact for further information:

Ph: +49-711-80670-1520 or consulting-info@vector.com