PAS 1885:2018

This standard PAS 1885:2018 The fundamental principles of automotive cyber security. Specification is classified in these ICS categories:

• 35.030 IT Security

This PAS sets out the fundamental principles for the provision and maintenance of cyber security in relation to reducing threat and harm to products, services and systems within increasingly connected and collaborative intelligent transport eco-systems. The concept of an automotive ecosystem encompasses:

• the vehicles;

• related infrastructure, including road-side and remote systems that provide services to the vehicles, their operators, occupants and cargo; and

• the human elements, including vehicle owners and/ or operators, designers, manufacturers and service providers.

This PAS is applicable to the security and functional safety aspects of the entire automotive development and use life cycle, including specification, design, implementation, integration, verification, validation, configuration, production, operation, servicing and decommissioning. A lifecycle approach is required to address the risks arising from the constantly changing threat landscape, so as to protect vehicles and vehicle-related systems once they have been delivered to the market.

This PAS is intended for use by vehicle manufacturers, Tier-1 and Tier-2 supply chain suppliers, authorized service centres, aftermarket suppliers, road/highways authorities and service providers both to the vehicle and to its occupants and/or cargo. It can also be informative for other stakeholders of the automotive supply chain and the operators of automotive vehicles.

It is recognized that at the date of issue of this PAS:

1. there is a large fleet of vehicles in use;

2. these vehicles will have varying degrees of connectivity and automation; and

3. the degree to which security has been considered as part of the design and manufacture will vary depending on the age, nature and complexity of the vehicle.

The PAS is intended to apply to new or modified products, systems and services and its adoption does not require vehicle manufacturers, suppliers or service providers to apply its provisions retroactively.