{"id":77671,"date":"2024-07-09T03:00:50","date_gmt":"2024-07-09T10:00:50","guid":{"rendered":"https:\/\/www.jamasoftware.com\/?p=77671"},"modified":"2024-07-03T12:47:08","modified_gmt":"2024-07-03T19:47:08","slug":"how-to-manage-cybersecurity-in-jama-connect-for-automotive-and-semiconductor-industries","status":"publish","type":"post","link":"https:\/\/www.jamasoftware.com\/legacy\/blog\/how-to-manage-cybersecurity-in-jama-connect-for-automotive-and-semiconductor-industries\/","title":{"rendered":"How to Manage Cybersecurity in Jama Connect\u00ae for Automotive and Semiconductor Industries"},"content":{"rendered":"
\"\"

In this blog post, we summarize our Whitepaper titled “How to Manage Cybersecurity in Jama Connect\u00ae<\/sup> for Automotive and Semiconductor Industries” – Written by Kevin Dibble and Jama Software. Click HERE<\/a> to read the full thing.<\/p><\/div>\n

\n

How to Manage Cybersecurity in Jama Connect\u00ae<\/sup> for Automotive and Semiconductor Industries<\/h2>\n

Learn how automotive and semiconductor teams use requirements management tools to support meeting ISO\/SAE 21434 while increasing visibility, collaboration, and review-cycle efficiency.<\/strong><\/p>\n

Security threats such as malware, ransomware, and data breaches impact many industries, but with expanded connectivity in the automotive and semiconductor sectors, increased urgency exists to safeguard against fast evolving risks.<\/p>\n

Research shows that 91% of vehicles<\/a> are connected, and that number is expected to rise to 96% by 2030. With more automobiles and semiconductor devices being connected, attack surfaces (cybersecurity vulnerabilities) are expanding quickly, and the ISO\/SAE 21434 standard aims to understand and safeguard against potential threats.<\/p>\n

However, managing a cybersecurity case within the standard requires many steps, and cross-team visibility and collaboration are often challenging. As a result, some teams are turning to requirements management tools to help improve visibility and increase transparency in review cycles.<\/p>\n

If you haven\u2019t used a formal requirements management tool before, understanding the benefits, advantages, and how it works helps determine if it\u2019s right for your team.<\/p>\n

\n

RELATED: <\/strong>A Guide to Road Vehicle Cybersecurity According to ISO 21434<\/a><\/span><\/span><\/h4>\n
\n

Why manage a cybersecurity case in a requirements management tool?<\/h3>\n

A cybersecurity case is a structured argument supported by the evidence of work products to detail why risks found within the Threat Analysis and Risk Assessment (TARA) are reasonable.<\/p>\n

Creating a cybersecurity case for ISO\/SAE 21434 is a complex process with many moving parts. Using a requirements management tool has many benefits, including improved traceability, easier collaboration, and improved functionality for reviews.<\/p>\n

Here are several ways a tool can help.<\/p>\n

1. Improved collaboration between OEMs and tier 1 and 2 suppliers.<\/strong> A requirements management tool, such as Jama Connect\u00ae<\/sup>, supports requirements interchange format (ReqIF), which can be used for bidirectional communication of requirements, item definitions, and more. Using the tool, you can support improved collaboration workflows.<\/p>\n

2. Provides \u201ctrace as you go\u201d visibility.<\/strong> You don\u2019t want traceability to be an afterthought handled by your requirements engineer at the end of the project, especially when that project is complex. A purpose-built requirements management tool, like Jama Connect, allows you to create requirements tracing to parent requirements, design blocks for requirements allocation, and more. It supports a trace-as-you-go methodology.<\/p>\n

\"\"<\/p>\n

3. Access impact analysis to handle midstream project changes more effectively.<\/strong> Jama Connect provides access to an impact analysis, a powerful capability supporting the trace-as-you-go approach. Running an impact analysis as project changes happen midstream allows for greater understanding and visibility.<\/p>\n

4. Automatically generate test coverage reports.<\/strong> With Jama Connect, you can allocate requirements to design blocks or interconnect the requirements management system to design tools. Using tools like Design Architect provides powerful analytics and test coverage reports that are automatically generated.<\/p>\n

5. Connect tools and avoid disjointed tooling challenges.<\/strong> Disconnected tools are often a source of visibility issues. Jama Connect links disparate tools and offers a \u201ctoolchain view\u201d for more seamless tool functioning and visibility, like with the Design Architect example above.<\/p>\n

6. View exactly where you\u2019re at in a project in real-time.<\/strong> As you move through the management of a case, it\u2019s important to see where you are in the process so you can stay on track. Jama Connect can provide analytics that clearly indicate where you\u2019re at in a project, including allocated requirements, tests that have been covered, and more.<\/p>\n

\n

RELATED: <\/strong>Traceable Agile\u2122 \u2013 Speed AND Quality Are Possible for Software Factories in Safety-critical Industries<\/a><\/span><\/span><\/h4>\n
\n

How does a requirements management tool fit with the ISO\/SAE 21434 standard?<\/h3>\n

Traceability, collaboration, and improved review processes are all benefits of a purpose-built requirements management tool, but to understand how it works, it helps to have an example. In the details below, we\u2019ve used the Jama Connect platform<\/a> as an example to see how it works \u2013 from product-dependent cybersecurity management to threat analysis and risk assessment methods.<\/p>\n

ISO\/SAE 21434 is organized by clauses and subclauses, broken out below.<\/p>\n

\"\"<\/p>\n

The right requirements management tool will enable your teams to optimize the development process in many of the above areas. Specifically, here\u2019s a breakdown of how the Jama Connect platform supports each of them, as indicated by the box\u2019s color.<\/p>\n

Green.<\/strong> These areas are fully supported and recommended to be implemented in Jama Connect. For example, when viewing section 9 in the chart above under the \u201cConcept\u201d heading, Jama Connect supports the item definition, cybersecurity goals, and cybersecurity concept.<\/p>\n

Yellow.<\/strong> These are optional and can be implemented in Jama Connect. For example, you\u2019ll see subclauses 5.4.3 \u201cInformation sharing\u201d and 5.4.4. \u201cManagement systems\u201d fall into this category.<\/p>\n

Yellow-green.<\/strong> These are partially supported in the tool. In other words, Jama Connect can support some of the requirements but not all of them. As an example, 10.4.1 \u201cDesign\u201d and 10.4.2 \u201cIntegration and verification\u201d are included in this category.<\/p>\n

Red boxes.<\/strong> These are not recommended for support in Jama Connect and are usually handled with an in-house tool instead\u2014in that some are processes that expand throughout the organization, and some are activities or work products suited for alternative best-of-breed tools. The progression of these work products can, however, be brought back to Jama Connect to reflect status through the Cybersecurity case. An example is the areas under the \u201cpost-development phases, including 12 \u201cProduction\u201d and 13 \u201cOperations and maintenance.\u201d<\/p>\n

One of Jama Connect\u2019s most powerful capabilities is supporting the green and yellow categories through document building<\/em> and generation<\/em>. The tool supports the process of building and reviewing documentation with real-time collaboration as well as creating documentation with a single click and no post-processing.<\/p>\n

\n

TO DOWNLOAD THIS WHITEPAPER IN ITS ENTIRETY, VISIT:
\n<\/strong>How to Manage Cybersecurity in Jama Connect\u00ae<\/sup> for Automotive and Semiconductor Industries<\/a><\/span><\/span><\/h4>\n
\n