The fundamental principles of automotive cyber security. Specification

Scope

What is PAS 1885 – Fundamental principles of automotive cyber security about?

PAS 1885 is the international standard on road vehicles that discusses automotive cyber security across the lifetime.

PAS 1885 sets out the fundamental principles for the provision and maintenance of cyber security in relation to reducing threat and harm to products, services and systems within increasingly connected and collaborative intelligent transport eco-systems.

The concept of an automotive ecosystem encompasses:

• The vehicles
• Related infrastructure, including road-side and remote systems that provide services to the vehicles, their operators, occupants and cargo
• The human elements, including vehicle owners and/ or operators, designers, manufacturers and service providers.

NOTE: PAS 1885 is applicable to the security and functional safety aspects of the entire automotive development and use life cycle, including specification, design, implementation, integration, verification, validation, configuration, production, operation, servicing and decommissioning.

Who is PAS 1885 – Fundamental principles of automotive cyber security for?

PAS 1885 on automotive cyber security is relevant to:

• Vehicle manufacturers
• Tier-1 and Tier-2 supply chain suppliers
• Authorized service centres
• Aftermarket suppliers
• Road/highways authorities
• Service providers to both the vehicle and its occupants and/or cargo

Why should you use PAS 1885 – Fundamental principles of automotive cyber security?

As the level of connectivity of vehicles increases, cyber security is becoming an increasing concern and recent innovations have made vehicle-related systems more vulnerable to cyber security incidents.

PAS 1885 demonstrate an understanding of the security context and the range of potential security issues that are applicable to business, assets, personnel and the environments and ecosystems in which the products, systems and/or services are or may be used.

PAS 1885 determine the organization’s security context for board-level management to establish document and maintain a record of the organization’s scope.

PAS 1885 helps you in assessing and managing security risk management that takes into account the organization’s risk appetite.

Security management over vehicle systems lifecycles is specified in PAS 1885.

PAS 1885 navigates you through the requirements on the software development and maintenance of documented policies, processes and procedures to manage the software lifecycle.

Overall, PAS 1885 helps you to maintain awareness and sustain cyber security across the lifetime of vehicles and related infrastructure. As a result, you will have a deeper understanding of the vehicle lifespan and ecosystem, as well as how to improve and manage vehicle security and the security of connected intelligent transportation systems (ITS). © BSI 2022 All rights reserved

External Links