G+D ensures cyber security in the automotive industry

In the automotive sector, security has always been of paramount importance. In an era of increasing digitization and networks, the topic of cybersecurity of vehicles is also playing an ever-greater role. For this reason, the ISO/SAE 21434 standard "Road Vehicles - Cybersecurity Engineering" has applied to automotive manufacturers and their suppliers since 2021. It contains security criteria and measures for cybersecurity risk management. This includes product development and production, but also the operation, maintenance and decommissioning of electrical and electronic systems in vehicles.

The standard complements ISO 27001 and has been adapted and extended for the specific requirements of the automotive industry to demonstrate compliance with United Nations Regulation No. 155 which deals with vehicle cybersecurity. In addition, automotive manufacturers must also comply with the United Nations Economic Commission for Europe (UNECE) Regulation WP.29/R155. It requires cybersecurity protection in accordance with ISO/SAE 21434 for new type approvals of vehicles for road use since July 2022.

G+D has now successfully completed the ISO/SAE 21434 certification process for embedded (eUICC) products. The audit was carried out in March and the company has received the certificate in June 2023. G+D also complies with other standards relevant to the automotive sector, such as IATF 16949 for quality management and the AEC-Q 100 qualification standard.

United Nations Regulation No. 155, together with ISO 27001 and the ISO/SAE-21434 certification allows G+D to offer compliant solutions for a wide range of uses in the automotive sector: from permanently installed eSIMs in vehicles to remote SIM provisioning and eSIM management.

"Security is always a top priority for G+D. All solutions, services and technologies are optimized for fulfilling the highest security requirements. By complying with the ISO/SAE 21434 standard, we are now once again putting an exclamation mark on this. After all, we are one of the first companies to receive certification for cybersecurity in road vehicles," explains Jan Eichholz, Head of Security in the Connectivity and IoT Business at G+D.

About Giesecke+Devrient

Giesecke+Devrient (G+D) is a global security technology group headquartered in Munich. As a trusted partner to customers with the highest demands, G+D secures the essential values of the world with its solutions. The company develops technology with passion and precision in four major playing fields: payment, connectivity, identities and digital infrastructures.

G+D was founded in 1852. In the fiscal year 2022, the company generated with more than 12,600 employees a turnover of 2.53 billion euros. G+D is represented by 103 subsidiaries and joint ventures in 33 countries. Further information: www.gi-de.com.