Integrating Assessment Models for ASPICE, Functional Safety, and Cybersecurity

摘要

ISO 26262-2 chapter 6.4.8 demands one or more functional safety audits during the execution of a safety-relevant automotive project. Also, all major original equipment manufacturers (OEMs) are requesting a suitable Automotive SPICE~® level by their suppliers. And in January 2016, the Cybersecurity Guidebook for Cyber-Physical Vehicle Systems was published. To reduce the effort of audit and assessment activities a combination of an ASPICE ISO/ IEC 15504 assessment, a functional safety ISO audit, and a cybersecurity assessment is being elaborated by working parties of automotive suppliers and manufacturers in Europe, as well as in EU projects (Messnarz et al. 2013). This article describes a framework to extend the process assessment model (PAM) based on ISO 15504 (ASPICE) to meet the requirements of ISO 26262 for a functional safety audit and outlines the results of current work where the cybersecurity guidebook SAE J3061 (SAE 2016) will be integrated within 2016.