Standards · Automotive and connected vehicles

ISO/SAE 21434:2021 Road vehicles – Cybersecurity engineering

PublishedPaid · 31 August 2021

Standards are protected by copyright and almost always sold: here you find metadata, an original summary and a link to the official catalogue page where they can be consulted or bought. The text is not reproduced.

Summary

The standard sets requirements for managing the cyber risk of road vehicle electrical and electronic systems across their whole lifecycle: concept, development, production, operation, maintenance and decommissioning. It introduces threat analysis and risk assessment (TARA), cybersecurity goals and requirements, post-sale vulnerability and incident management, and rules for sharing activities between manufacturers and suppliers. It does not prescribe specific technologies. It is the technical reference for the cybersecurity management system required by UN Regulation No. 155 for vehicle type approval.

Reference

ISO/SAE 21434:2021

Official title

Road vehicles – Cybersecurity engineering

Body

ISO / SAE – Technical committee: ISO/TC 22/SC 32

Type

Standard

Status

Published

Published

31 August 2021

Edition

1

Access to the text

Paid

Sectors

• Automotive and connected vehicles
• IoT and connected products

Notes

Supersedes SAE J3061:2016. On 2 October 2026, at the end of the systematic review, it was decided to revise the standard and the second edition was registered as a new project (ISO/SAE AWI 21434), with no publication date set yet. Until then the 2021 edition remains current.

Last verified

29 October 2026 (verified via web)

Metadata and summary: CC BY 4.0 · JSON

Report an error in this record (opens in a new tab)