Research on the Construction of Vehicle Cybersecurity Management System for the United Nations Regulations

With the rapid advancement of information technology in the vehicle industry and the drastic changes in the internal and external environment, the situation of the Intelligent and Connected Vehicles (ICV) cybersecurity is becoming increasingly severe. Cybersecurity Management System (CSMS) is the systematic risk-based and engineering approach to protect vehicle cybersecurity. How to establish an effective CSMS has increasingly become a topic of concern to vehicle company managers. The establishment of CSMS plays an important role in improving the security management level of enterprises. In countries such as Germany, Russia, Saudi Arabia, Thailand, etc., CSMS is the mandatory cybersecurity requirement for vehicles. This paper summarizes what vehicle CSMS is, analyzes the significance of establishing vehicle CSMS, put forward the framework of CSMS, sorts out the general process of vehicle CSMS, come up with the 4 -level Files Pyramid Model, and provides a method about the construction of CSMS based on ISO / SAE 21434.