Security Threat Analysis Support Services
IS&S - Cybersecurity Engineering Support -
*Note: This service is provided exclusively within Japan. We do not conduct business or provide support overseas.
We review the threat analysis processes you have established and implemented from the perspective of ISO 21434 to identify compliant areas and required improvements, and propose clear directions for enhancement.
- Target Industry : Automotive / FA / Robotics / Construction Machinery / Marine / Agricultural Machinery, etc.
- Target Department : Embedded Software Development
Problem
Are you facing any of these current issues and challenges in addressing cybersecurity?
- With advances in telecommunications and IT, vehicles now communicate externally, giving rise to expectations for transformation into safer and more convenient mobility, making it necessary to equip vehicles with technologies to counter cybersecurity attacks
- Among processes, technologies, and organizational structures, technology (threat analysis and vulnerability analysis) is led by the IT industry; while cybersecurity development leverages these valuable insights, progress is slow due to a lack of automotive embedded development expertise
- The need for cybersecurity compliance is growing not only in the automotive industry, but also in sectors such as factory automation (FA), robotics, construction machinery, marine, and agricultural equipment
- Threat analysis is performed by referencing methodologies from the technologically advanced IT industry, but it remains uncertain whether it is being conducted adequately
- Threat analysis was attempted, but how to execute it following the process specified in ISO 21434 remains unclear
Solution
We offer security threat analysis support services to help you properly conduct cybersecurity threat analysis.
Threat Analysis Process Inspection Service
This service evaluates the threat analysis processes you have established and implemented from the perspective of ISO 21434, identifying areas that meet requirements versus those needing improvement, and proposing directions for enhancement.
By providing an objective view of the current status of your threat analysis process alongside clear improvement policies, this enables you to execute appropriate enhancements effectively.
Deliverables of the Threat Analysis Process Inspection Service
-
Threat Analysis Process Inspection Execution Plan
• Purpose and objectives
• Target of inspection
• Inspection criteria
• Inspection items and schedule -
Threat Analysis Process Inspection Result Report
• Purpose and objectives
• Target of inspection
• Inspection criteria
• Inspection results
• Cause analysis of areas requiring improvement
• Improvement policies
Implementation Items for the Threat Analysis Process Inspection Service
-
1. Inspection Plan Development
We confirm client requirements and formulate an execution plan for the threat analysis process inspection.
-
2. Kickoff Meeting
We share the threat analysis process inspection plan with the client.
-
3. Execution of Threat Analysis Process Inspection
We review the threat analysis process and deliverables from completed development projects, evaluating them against the established inspection criteria.
We also conduct interviews with personnel responsible for driving the threat analysis process and leaders of completed projects. -
4. Organization and Analysis of Inspection Results
We organize the inspection results, analyze the causes of identified issues, and compile them into an inspection result report.
-
5. Inspection Results Presentation
We report the threat analysis process inspection results to the client and share the proposed direction for future enhancements.
Threat Analysis Process Improvement Service
In this service, we listen to the challenges in your current threat analysis process, consider improvement measures, and work together with you to drive enhancements.
By providing an objective perspective that clarifies the current status of your threat analysis process along with clear improvement policies, this enables you to execute appropriate enhancements.
Deliverables of the Threat Analysis Process Improvement Service
-
Threat Analysis Process Improvement Plan
• Purpose and objectives
• Target of improvement
• Improvement approach and measures
• Improvement implementation items and schedule -
Threat Analysis Process Improvement Activity Result Report
• Purpose and objectives
• Target of improvement
• Improvement approach and measures
• Improvement implementation items and schedule (Planned vs. Actual)
• Improvement results
• Future outlook
Implementation Items for the Threat Analysis Process Improvement Service
-
1. Improvement Plan Development
We confirm client requirements and formulate a plan for threat analysis process improvement activities.
-
2. Kickoff Meeting
We share the threat analysis process improvement plan with the client.
-
3. Execution of Improvement Activities
In accordance with the improvement plan, we define the enhanced process, conduct process trials, measure effectiveness, and roll it out to operational teams.
-
4. Improvement Activity Results Presentation
We report the results of the threat analysis process improvement to the client and share key considerations and precautions for the future.
Co-creating unprecedented evolution through unstoppable technology.
Please feel free to contact us for details on our products and services or to request materials.