Risk assessment along the supply chain From OEM to Tier 1 to Tier 2 - how does it all fit together

Thomas Liedtke
Senior Cyber Security Manager
Magility Cyber Security GmbH
In a typical situation, a supplier (Tier-1, Tier-2, …) is asked to perform “own” TARAs on their level. In the end, the results have to be consistent with the vehicle TARA. Cybersecurity requirements coming from customers have to be evaluated against Cybersecurity Requirements derived from supplier TARA. Approaches of the structural view will be presented.