Manufacturers and integrators of embedded systems are subject to regulations such as the Cyber Resilience Act, the Medical Device Regulation, and the Machinery Directive. These regulations require that products be developed securely. To ensure they are “secure by design,” a phased security concept is required. This concept is developed based on a “Threat Analysis and Risk Assessment” (TARA). This training course provides the necessary theoretical and practical knowledge for this purpose.

This training course covers content that can be used to meet the requirements of the following standards:

IEC 62443 (Industrial)
ISO 21434 (Automotive)
IEC 81001 (Medical)
TS 50701 (Railway)
IEC 63452 (Railway)

Objectives and Benefits

Understand the purpose and goal of threat analysis and risk assessment.
Learn our methodology for threat analysis and risk assessment.
Work out an initial threat model for your product in the workshop.
Create threat models and carry out risk assessments independently.

Agenda

Project phases of threat analysis and risk assessment
Description of system, usage, and environment
Identification of threats, attacks, and countermeasures
Risk assessment
Own tools & implementation

Target Audience

Project managers, security managers, requirements engineers, aspiring threat modelers, architects, developers, testers

Prerequisites

Basic understanding of cybersecurity
Solid technical knowledge

← All trainings