SAE Update - May 2022 - 10

TECH FOCUS:
CybErSECUriTy
risk management for cyber
physical systems in SAE JA7496 -
Cyber Physical Systems Security
Engineering Plan (CPSSEP)
Cyber physical systems are all around us,
including cars, airplanes, and much of the
critical infrastructure that enables modern
society. This is why the SAE International
G-32 Cyber Physical Systems Security
Committee was formed - to address how
organizations can ensure the secure
design and operation of cyber physical
systems.
Early on, the committee decided that
one of the critical theoretical foundations of
the upcoming SAE JA7496 standard
(scheduled to be published May 2022) is a
risk management approach. The Risk
Management Framework Subcommittee
was formed and led by Howard Miller and
Zachary Collier. Miller, an insurance
professional, had been involved in
insurance for risks related to counterfeit
and hardware failures and was interested
by the unique security challenges involved
in complex cyber physical systems. Collier,
a business professor and consultant, had
been previously involved in the
development of the risk assessment model
for the SAE International AS6171 standard
for counterfeit electronic parts.
Together, the duo assembled an
interdisciplinary team of experts to craft
language around " the what " and " the how "
of risk management. " The what " refers to
the steps of the risk management process
during the systems engineering process, as
established by ISO and NIST. The committee
adopted a scenario-based approach, in
coordination with systems engineering,
software, and hardware experts, to organize
causes of loss and mitigations related to
cyber physical security.
" The how " describing specific risk
AbOUT THE AUTHOrS
This article was written for Update by Howard Miller
(LEFT) and Zachary A. Collier (riGHT). Miller is Senior
Vice President and Director of Tech Secure® Division, at
LbW insurance & Financial Services, inc. Collier is
Assistant Professor of Management at radford
University, and President of Collier research Systems.
10
May 2022
UPDATE
https://www.sae.org/standards/content/as6810/ https://www.sae.org/standards/content/ja7496/
SAE Update - May 2022

Table of Contents for the Digital Edition of SAE Update - May 2022
