Cybersecurity work products for automotive suppliers
A document kit for Tier 1 and Tier 2 suppliers who must answer OEM cybersecurity requirements framed around ISO/SAE 21434.
Templates and a filled example. You work in your own files; the kit does not replace your judgement or an assessment.
15 modules · SK-01 to SK-15- Structured around the work products suppliers are typically asked for in OEM cybersecurity requests.
- Comes with a fully filled fictional example: the Ardel TCU-40 telematics control unit.
- No certification promise: the kit organises evidence, your organisation owns the conclusions.
What the kit is for
- Responding to cybersecurity sections of OEM requests and supplier questionnaires.
- Keeping item definition, risk work and supplier evidence in one consistent set of files.
- Seeing how a completed set looks, using a fictional telematics control unit.
Fifteen modules, SK-01 to SK-15
From supplier scope and customer requests to component TARA, verification and release.
SK-01
Role and applicability
Define the supplier role and scope.
SK-02
Organisational cybersecurity evidence
Collect evidence of roles, processes and responsibilities.
SK-03
Supplier capability response
Answer customer questions about cybersecurity capabilities.
SK-04
Cybersecurity interface agreement
Agree who does what and which evidence is exchanged.
SK-05
Cybersecurity plan
Plan activities, owners and milestones.
SK-06
Component definition
Record boundaries, interfaces and assumptions.
See it filled in
The Ardel TCU-40 example shows every module completed for one fictional product.
Ardel and the Ardel TCU-40 telematics control unit are fictional.
Open the worked example