ISO/SAE 21434 Certification

We audit, test, assess and certify cybersecurity management systems and products.
New system architectures, software-defined vehicles and other innovations are posing major challenges for the automotive sector. Developments such as autonomous driving and increasing connectivity improve motor vehicle security, but also impose new risks.
The ISO/SAE 21434 standard defines guidelines for the cybersecurity of motor vehicles over their entire life cycle. Released in August 2021, the standard provides a unified and binding set of rules for identifying and successfully minimizing security risks in vehicles and their components.
The benefits of an ISO/SAE 21434 certification of your cybersecurity management system (CSMS) and your products:
Who is affected by ISO/SAE 21434?
_core_1_x.jpg)
- Vehicle manufacturers (outside the scope of UN-R 155)
- Tier 1 and Tier 2 suppliers
- Engineering service providers
- Software and ICT infrastructure service providers
Create the foundation for automotive cybersecurity.
By implementing the ISO/SAE 21434 standard, you can make a significant contribution to the security of connected vehicles. In addition, the international harmonization of cybersecurity standards creates global guidelines that enable companies to strengthen their industry-wide collaboration.
From the concept phase and development over production to maintenance and decommissioning: The ISO/SAE 21434 contains value chain practices over the entire automotive life cycle, which are translated into local law by the EU and signatory states of the ECE.
The standard closely aligns with the UNECE Regulation No. 155 (UN-R 155) for cybersecurity management systems (CSMS), which, starting in July 2024, will stipulate two requirements: a proof of conformity for the CSMS and the homologation of a product's cybersecurity.
Risk management in the focus of the automotive industry.
The measures in ISO/SAE 21434 aim to identify risks arising from increasing connectivity and complexity, assess potential damage and threats, and implement the right measures to minimize risk. At the core of the assessment stands whether the measures derived from the risk analysis have been efficiently implemented in a tested product.
We will join you in every phase of the product life cycle: We determine whether your processes are suitable for achieving your objectives and whether they have been correctly implemented. You minimize the risk of cyber-attacks and their consequences, which can range from the loss of highly sensitive personal data to life-threatening situations for drivers and passengers.
Our assessment includes aspects such as:
- Secure software development
- Protection of personal data
- Integrity of the vehicle system network
- Protection against unauthorized access
- Secure communication between vehicle and external systems
Why TÜV Rheinland?

Because you have the benefit of our many years of industry experience, high quality standards and professional objectivity. Our certifications fulfill highest international requirements, offer your products a major competitive advantage and enable you to enter global markets.
Contact
