TARA in Practice

Improve risk assessment skills or learn how to perform an initial Threat Analyses and Risk Assessment (TARA) with this one-day training.

The Threat Analyses and Risk Assessment (TARA) is the centerpiece of automotive cybersecurity. This one-day training guides learners through performing an initial TARA and can also help improve existing risk assessment capabilities. Risk assessment concepts defined by the ISO/SAE 21434 international standard, Clause 15, are introduced alongside a practice-oriented seven-step approach to completing an assessment.

In the automotive industry, this ISO standard requires companies that develop electronic systems to perform TARA multiple times in their entire vehicle or product lifecycle. According to ISO/SAE 21434, Clause 15, each risk assessment is done in seven consecutive steps. Performing TARA regularly and in a controlled manner makes it a pivotal part of cybersecurity-oriented processes.

Contents

• Motivation, Terms and Definitions
• Overview on Clause 15: Cybersecurity Risk Assessment Method
• 7 steps provided by the ISO/SAE 21434
  • Detailed Walkthrough
  • Starting with clause 9: item definition
  • Overview of the detailed Excel-based TARA template provided in this training
  • Performing a TARA step by step
  • Derive Cybersecurity Goals
  • Derive Cybersecurity Requirements and their allocation to get the cybersecurity concept
• Identification of additional external sources and methods outside the standard
• Overview of additional sources of information, including ENISA, UNECE, and MS STRIDE
• Summary and Wrap-up

Target audience

• Cybersecurity managers/engineers
• Functional safety managers/engineers
• Software/hardware/system engineers
• Software/hardware/system architects
• Project leaders
• Quality managers

Prerequisites

Knowledge of systems engineering in electronic development, or Automotive SPICE^® or ISO 26262/Functional Safety. A general understanding of cybersecurity in automotive electronics is also advisable. 

Further information

For online trainings, all materials are offered digitally. For in-person trainings, all materials are offered digitally and may be supplemented with hard copies. Copies of any relevant standards must be provided by the learner.