The ISO/SAE 21434 standard and the WP.29 regulation require OEMs and automotive suppliers to analyze threats and risks throughout a vehicle’s lifecycle to determine the extent to which a road user/driver can be impacted by a threat scenario. This process of threat analysis and risk assessment is called “TARA” and is demanded by the WP.29 and described in detail in the ISO/SAE 21434 standard in Sections 8.3-8.9.
This Upstream Threat Analysis and Risk Assessment tool will help guide you throughout the 7 steps of risk assessment and based on your responses, offer a clear understanding and scoring of your cybersecurity risks. The final risk score is calculated automatically based on your answers and the calculation matrices described on Annex J of the ISO/SAE 21434 standard. Use this tool to: