This standard specifies engineering requirements for managing cybersecurity risks related to the concept, product development, manufacturing, operation, maintenance, and decommissioning of electrical and electronic (E/E) systems within road vehicles, including their components and interfaces.

It defines a framework that includes cybersecurity processes requirements and provides a common language for communication and cybersecurity risk management.

This standard applies to E/E systems of road vehicles, including their components and interfaces, that are part of series production. The development or modification of these systems should begin after the publication of this document.

This standard does not prescribe specific technologies or solutions related to cybersecurity.