Session 1 | Manual Sandler | Implementing CySec in automotive development projects right 7 Manageme

Automotive Cybersecurity Challenge

Manuel Sandler of CyRAS Consulting presents seven management and engineering prerequisites for implementing cybersecurity in automotive development. Despite clearer regulations—UN R155 and ISO 21434—many OEM and supplier projects still struggle with practical execution.

IT Security vs. Cybersecurity

The first prerequisite defines distinctions and synergies between traditional IT security and automotive cyber security. Connected vehicles span telematics, infotainment, and safety-critical components; organizations must locate competence centers and clarify interfaces rather than merging or separating teams blindly.

Shared Processes and Talent Gaps

Sandler argues automotive security should reuse established IT disciplines where possible—incident management, software update processes, and quality gates—while recognizing vehicle-specific attack surfaces. A critical industry shortage of experienced automotive security engineers compounds the problem.

Weakest-Link Quality

Cybersecurity cannot be a standalone bolt-on; development quality issues become security issues. Sandler warns the chain is only as strong as its weakest link, citing frequent project findings where inadequate software analysis undermines security requirements across multidisciplinary automotive programs.