Overview
This one-day advanced training and workshop presents the knowledge and practical strategies needed to perform and maintain a Threat Analysis and Risk Assessment (TARA) according to ISO/SAE 21434:2021. After introducing the foundational concepts, the course explores advanced strategies and best practices for developing and maintaining TARA documentation.
Following a hands-on workshop format, participants use an Advanced Driver Assistance System (ADAS) electronic control unit (ECU) example to conduct a TARA with support from the instructor. Each participant receives a TARA template and tool structured to support analysis aligned with ISO/SAE 21434 and UNECE R155.
The training is delivered by SRES automotive cybersecurity and functional safety experts with extensive experience supporting OEMs, suppliers, and semiconductor companies.
Intended Audience
This advanced course is intended for professionals responsible for conducting, supporting, or evaluating automotive cybersecurity risk assessments. It is particularly relevant for:
- Systems, hardware, and software engineers responsible for automotive cybersecurity
- Cybersecurity engineers conducting or reviewing TARAs
- Engineering managers and technical leads overseeing automotive cybersecurity activities
- Professionals responsible for cybersecurity asset identification, attack-feasibility analysis, or risk treatment
- OEM, supplier, and semiconductor company personnel working with ISO/SAE 21434 and UNECE R155
Objectives
By the end of this course, participants will be able to:
- Explain the purpose of a TARA within automotive cybersecurity engineering
- Define the item under analysis and identify relevant cybersecurity assets
- Use a structured TARA template to document the analysis
- Evaluate attack feasibility using appropriate calculation methods
- Assess cybersecurity risks and identify appropriate risk-treatment decisions
- Develop cybersecurity goals and claims from TARA results
- Conduct a TARA exercise using an ADAS ECU example and the provided TARA tool
Agenda
Below you will find an outline of the training course schedule.
- Overview of TARA: What a TARA is and why it is needed
- Asset Identification: Defining the item and identifying cybersecurity assets
- TARA Template: How to perform and document the analysis
- Attack-Feasibility Calculations: How attack feasibility is calculated
- Risk Assessment: How cybersecurity risks are evaluated and treated
- Cybersecurity Goals and Claims: How TARA outputs are used
- TARA Exercise: Conducting a TARA using an ADAS ECU example and the provided TARA tool

