ISO/SAE 21434:2021(E)#
The standard ISO/SAE 21434:2021(E) has several clauses. All work products and requirements are defined as references below, if those are relevant for the S-CORE project.
Irrelevant clauses for S-CORE process requirements and work products compliance are:
“Clause 1-4:” - as it contains no requirements and work products
“Clause 7: Distributed cybersecurity activities” - as the project is organized as open source project
“Clause 9: Concept” - as this is in responsibility of system integrator
“Clause 11: Cybersecurity validation” - as this is in responsibility of system integrator
“Clause 12: Production” - as this is in responsibility of system integrator
“Clause 14: End of cybersecurity support and decommissioning” - as this is in responsibility of system integrator
“Annex A-H:” - as it contains no requirements and work products
Relevant clauses are:
Tailoring documentation is planned in eclipse-score/score#696
Clause 5: Organizational cybersecurity management#
- Requirements
- org_management_5421status: validorg_management_5422status: validorg_management_5423status: validorg_management_5441status: validorg_management_5442status: validorg_management_5443status: validorg_management_5451status: validorg_management_5452status: validorg_management_5461status: valid
- Work products
- org_management_551status: validorg_management_552status: validorg_management_553status: validorg_management_554status: validorg_management_555status: valid
Clause 6: Project dependent cybersecurity management#
- Requirements
- prj_management_6411status: validprj_management_6421status: validprj_management_6422status: validprj_management_6423status: validprj_management_6424status: validprj_management_6425status: validprj_management_6426status: validprj_management_6427status: validprj_management_6428status: validprj_management_6429status: validprj_management_64210status: validprj_management_64211status: validprj_management_6431status: validprj_management_6432status: validprj_management_6441status: validprj_management_6442status: validprj_management_6443status: validprj_management_6451status: validprj_management_6452status: validprj_management_6453status: validprj_management_6461status: validprj_management_6462status: validprj_management_6471status: validprj_management_6491status: validprj_management_6492status: valid
- Work products
- prj_management_651status: validprj_management_652status: validprj_management_653status: validprj_management_654status: valid
Clause 8: Continual cybersecurity activities#
- Requirements
- continual_8321status: validcontinual_8322status: validcontinual_8323status: validcontinual_8421status: validcontinual_8521status: validcontinual_8522status: validcontinual_8621status: validcontinual_8622status: valid
- Work products
- continual_8331status: validcontinual_8332status: validcontinual_8333status: validcontinual_8431status: validcontinual_8531status: validcontinual_8631status: valid
Clause 10: Product development#
- Requirements
- development_10411status: validdevelopment_10412status: validdevelopment_10413status: validdevelopment_10414status: validdevelopment_10415status: validdevelopment_10416status: validdevelopment_10417status: validdevelopment_10418status: validdevelopment_10421status: validdevelopment_10422status: validdevelopment_10423status: validdevelopment_10424status: validdevelopment_10425status: valid
- Work products
- development_1051status: validdevelopment_1052status: validdevelopment_1053status: validdevelopment_1054status: validdevelopment_1055status: validdevelopment_1056status: validdevelopment_1057status: valid
Clause 13: Operations and maintenance#
- Requirements
- maintenance_13321status: validmaintenance_13322status: validmaintenance_13421status: valid
- Work products
- maintenance_13331status: valid
Clause 15: Threat analysis and risk assessment methods#
Requirements
assessment_15621status: validassessment_15622status: validassessment_15721status: validassessment_15722status: validassessment_15723status: validassessment_15724status: validassessment_15725status: validassessment_15821status: validassessment_15822status: validassessment_15921status: valid- Work products
- assessment_15331status: validassessment_15332status: validassessment_15431status: validassessment_15531status: validassessment_15631status: validassessment_15731status: validassessment_15831status: validassessment_15931status: valid
Note
Titles of the ISO/SAE 21434:2021(E) standard clauses are from official ISO website (search for “21434”).
Sub-Clause numbers from the official standard document are used for Ids creation for better reference.
All work products of the relevant clauses are included in the list to enable the documentation of the project wide tailoring, but the related requirements are not included as these are not needed to be covered.