
Automotive Cybersecurity
Providing 360° cybersecurity services for vehicles in line with industry standards and regulations

Automotive Cybersecurity
Providing 360° cybersecurity services for vehicles in line with industry standards and regulations
Automotive Cybersecurity
The connectivity of current and future vehicles can pose a potential threat. Cyber hackers could use them to manipulate vehicles and endanger the safety of road users. Therefore, vehicles need to be protected from cyberattacks.
New vehicle approval regulations such as UNECE R155 for cybersecurity and R156 for software updates and related new standards must be complied with during vehicle development, production, and operational phase. Essentially, it is about systematically identifying and managing - i.e. reducing - cyber risks. To do this, process management systems must be implemented in the organization, as well as corresponding technologies in the vehicle.
To help our customers meet these new challenges, DEKRA offers a portfolio of cybersecurity and software upload services. The spectrum includes training, evaluation expertise, organisational auditing, product assessment and corresponding certifications.
- 30+ years of industry knowledge
- DEKRA quality in vehicle testing and homologation
- Network of DEKRA experts worldwide
- Audit and certification expertise
In recent years, the ISO has published standards for automotive cybersecurity engineering (ISO/SAE 21434) and automotive software upload (ISO 24089) to provide common understanding and aspects of automotive cyber security in terms of processes, requirements and guidelines.
- Vehicle manufacturers
- Suppliers of software-based components/systems
- Engineering service providers
- Software- and ICT-infrastructure service providers
- Note: For software upload, compliance to ISO 24089 is a main requirement along the complete vehicle development and lifecycle supply chain.
Requirements for Vehicle Manufacturers and Suppliers

The OEM is responsible
The whole cyber security process is in the hands of the manufacturer and must be maintained throughout the entire vehicle’s lifecycle.

Indirect obligations of suppliers
Requirements for risks, mitigations, testing and support will be cascaded down to the supply chain.

Testing critical components
Security testing of critical components is vital for ensuring the overall security of the vehicle system.

The R155 specifies the organizational cybersecurity activities (the CSMS) of an OEM as well as a CS-type approval. A certified CSMS is a precondition for a type approval in which the CS protection of a vehicle E/E architecture is verified.
The R156 specifies the organizational software upload activities (the SUMS) of an OEM as well as a SU-type approval. A certified SUMS is a precondition for a type approval in which the SU capabilities of a vehicle E/E architecture are verified.
DEKRA’s automotive cybersecurity services ensure that your automotive systems are protected from cyber threats. Our services include:
ISO/SAE 21434 and ISO 24089
DEKRA offers evaluation expertise and compliance audits to help you ensuring compliance with
ISO/SAE 21434 and ISO 24089 standards. Additionally, DEKRA conducts project/product cybersecurity assessments according to ISO/SAE 21434.
ISO/SAE 21434 and ISO 24089 standards. Additionally, DEKRA conducts project/product cybersecurity assessments according to ISO/SAE 21434.
UNECE R155/R156
Cybersecurity V&V
Trainings
You have to look at cybersecurity comprehensively - especially in the automotive industry.
Thomas Thurner, Head of Automotive Cybersecurity Services
Stay ahead of the curve and protect your automotive systems from cybersecurity threats with our specialized services.