ISO/IEC WD 5888

Information security, cybersecurity and privacy protection — Security requirements and evaluation activities for connected vehicle devices

Scope

This standard provides security requirements and evaluation activities for connected vehicle devices following ISO/IEC 15408 framework. The framework also defines procedure to develop accurate security requirements and objective evaluation activities.
Connected vehicle devices in this standard are those components equipped in a vehicle and may have well-known vulnerabilities listed in WP.29 R155, especially ones that are remotely accessible and cause severe damage if successfully exploited.
Any parties, such as developers, information security service provider and ISO/IEC 15408 evaluation laboratories can test and evaluate the security functionalities of those devices based on security requirements and evaluation activities in this standard.