eLibrary >
PAS 11281:2026 Connected automotive ecosystems - Impact of security on safety - Code of practice >
Expand All
TOC Search:
PAS 11281:2026 Connected automotive ecosystems - Impact of security on safety - Code of practice, 2026
- Contents
- Foreword
- 0 Introduction
- 1 Scope
- 2 Normative references
- 3 Terms, definitions and abbreviated terms
- 3.1 Terms and definitions
- 4 Governance – security policy, organization and culture
- 4.1 Policies and processes
- 4.2 Responsibility and accountability
- 4.3 Risk management
- 4.4 Asset management
- 4.5 Supply chain and other external dependencies
- 4.7 Culture and communication
- 4.8 Protection of information
- 5 Security-aware development process
- 5.1 General
- 5.2 Risk assessment and requirements definition
- 5.3 Design considerations
- 5.4 Demonstration of safety and security
- 5.5 Assurance
- 5.6 Manufacturing
- 5.7 Third-party products and services
- 5.8 Deployment
- 5.9 Operation, maintenance and decommissioning
- 6 Maintaining effective defences
- 6.1 Legacy systems
- 6.2 Protect, detect, respond
- 6.3 Secure operation, maintenance and decommissioning
- 6.4 Resilience
- 6.5 Identity and access control
- 6.6 Product and service updates
- 6.7 Innovation
- 6.8 Discovery of vulnerabilities
- 6.9 Threat monitoring
- 6.10 Continuing risk management
- 7 Incident management
- 7.1 Planning
- 7.2 Detection of security incidents
- 7.3 Assessment
- 7.4 Response
- 7.5 Post-event
- 8 Secure and safe design
- 8.1 General
- 8.2 Secure design principles
- 8.3 Secure system configuration
- 8.4 Behaviour on failure
- 8.5 Defence in depth
- 8.6 Use of cryptography
- 8.7 Protection of software image
- 8.8 Diagnostics and maintenance
- 8.9 Patching and updates
- 8.10 Protection of communications
- 8.11 Protection of configuration data
- 8.12 External services and devices
- 8.13 Physical security
- 8.14 Forensic recording
- 8.15 Secure user interfaces
- 8.16 Development environment
- 8.17 Software distribution
- 9 Contributing to a safe and secure world
- 9.1 Managing risks
- 9.2 Compatibility and interoperability
- 9.3 Information sharing
- 9.4 Collaboration
- 9.5 International issues
- Annex A (informative) Risk assessment
- Annex B (informative) Assurance and safety cases
- Annex C (informative) Secure versus safe coding practices
- Annex D (informative) Approaching safety and security integration
- Annex E (informative) Automotive networks
- Annex F (informative) Security and safety of a composite system
- Bibliography
- Figure A.1 – Schematic showing the relationship between causal factors, hazards and accidents
- Figure A.2 – Extension of Figure A.1 to include security
- Figure B.1 – The CAE Framework
- Figure D.1 – Schematic showing how security and safety interact in different scenarios
- Table 1 – Individual roles
- Table B.1 – Vocabulary changes in the BS ISO 26262 series
- Table B.2 – High-level safety case requirements: changes in text of the BS ISO 26262 series
- Table D.1 – Examples of specific actions relating to the areas covered in this PAS
- Table F.2 – Example impact of security on ASILs
- Table F.1 – Composition questions [Go to Page]