ISO21434 by Example
If you like to know more about ASRG, look at our quick introduction at https://youtu.be/SYbv_B45PCI, visit our webpage at https://www.asrg.io/ or contact us directly (hello@asrg.io).
PRESENTATION:
ISO/SAE 21434 provides a common risk assessment process for car manufacturers. In mid-February, the standard was published as a draft. In this talk, we will introduce it and walk through an example analysis to get familiar with it. Afterwards, we will demonstrate how analyzing threats and assessing risks can profit from using a dedicated tool for that, such as our Yakindu Security Analyst. After the meeting, you will know the ISO 21434 vocabulary and workflow dependencies and have an idea of how to do risk assessment that conforms to the norm.
SPEAKER:
Bastian Kruck
Bastian Kruck studied software engineering in Potsdam. He plays the double bass and likes to create domain-specific tools. At itemis AG, he is a software consultant and a developer of the YAKINDU Security Analyst Tool. The tool assists in performing cybersecurity threat analyses and risk assessments of component-based systems. itemis AG is a consultancy with around 200 employees, serving customers in the automotive domain, as well as insurance, telecom, logistics, railway, and retail. It has offices in Germany, France, Switzerland and Tunisia.
https://www.itemis.com/de/yakindu/security-analyst/
Presenter Slides: https://www.asrg.io/event/iso21434-by-example/