Threat Analysis and Risk Assessment Tool

The ISO/SAE 21434 standard and the WP.29 regulation require OEMs and automotive suppliers to analyze threats and risks throughout a vehicle’s lifecycle to determine the extent to which a road user/driver can be impacted by a threat scenario. This process of threat analysis and risk assessment is called “TARA” and is demanded by the WP.29 and described in detail in the ISO/SAE 21434 standard in Sections 8.3-8.9.


This Upstream Threat Analysis and Risk Assessment tool will help guide you throughout the 7 steps of risk assessment and based on your responses, offer a clear understanding and scoring of your cybersecurity risks. The final risk score is calculated automatically based on your answers and the calculation matrices described on Annex J of the ISO/SAE 21434 standard. Use this tool to:


    • Learn the 7 steps of TARA based on ISO/SAE 21434
    • Perform a step-by-step TARA on your assets
    • Automatically calculate the impact, feasibility, and total cybersecurity risk
    • Generate a PDF report to document the process and analysis

Request Access