Microchip is certified to the ISO/SAE 21434 engineering standard for Road Vehicle Cybersecurity by UL Solutions

     As the automotive industry increasingly relies on wireless and in-vehicle connectivity for everything from infotainment systems to engine systems, so does the need for robust cybersecurity measures. The emergence of the ISO/SAE 21434 standard sets requirements for a road vehicle cybersecurity risk management process. These cybersecurity requirements help regulate the entire product life cycle of automotive products, from concept to design, production, maintenance and decommissioning. In line with these standards, Microchip Technology's enterprise processes related to specific automotive work products were recently audited by a third-party organization, UL Solutions, and certified to ISO/SAE 21434.

     The ISO/SAE 21434 standard was developed by the International Organization for Standardization (ISO) in collaboration with the Society of Automobile Engineers (SAE) to help organizations define cybersecurity policies and manage risks. The standard is a demanding specification containing 45 safety categories (called work products), each of which specifies a unique set of requirements covering all aspects of designing electrical and electronic systems for road vehicles, from integrated circuits and software to firmware and libraries.

     The ISO/SAE 21434 standard also confirms that an enterprise cybersecurity management system is certified. This proves that cybersecurity is a priority for businesses, from executive leadership to all organizational structures, including design, test, product, application, marketing, quality, validation and validation teams. Stakeholders involved in the product lifecycle must complete cybersecurity training and meet specified eligibility requirements. When a device is integrated into an automotive cybersecurity related platform, the threat analysis and Risk assessment (TARA) methodology is also incorporated into multiple phases of the product lifecycle.

     Matthias Kaestner, Microchip's vice president of Automotive, said: "Security is a core pillar of Microchip, and the ISO/SAE 21434 certification is a testament to our commitment to high standards in automotive cybersecurity. "Our customers can trust Microchip as a trusted security advisor with the appropriate expertise to guide the entire process of automotive cybersecurity design."

     While the onus is on each original equipment manufacturer to demonstrate vehicle-level compliance, ISO/SAE 21434 encourages all companies in the production ecosystem to play an active role in helping manage cybersecurity threats. Electronic control units using Microchip's security products are designed within an ISO/SAE 21434 certified process framework, eliminating the need for customers to review thousands of pages of process documents to determine compliance. This eases the burden on Tier 1 suppliers and Oems to prove their own security compliance.