intacs™ Training for the Automotive SPICE® for Cybersecurity Model
The new Automotive SPICE® for Cybersecurity process assessment model (PAM) provides an extension to Automotive SPICE in six additional processes. This new course is meant to prepare assessors for the assessment of the new processes.
BACK TO AUTOMOTIVE SPICETraining objective
This course introduces the model extension Automotive SPICE® for Cybersecurity and enables the participants, who have to be intacs™ certified assessors, to apply the model extension. The participants will acquire the ability to extend their analysis expertise to cybersecurity and to analyze and assess development processes regarding cybersecurity aspects. The 3-day seminar prepares participants for the exam on the last day of training.
intacs™-certified Competent and Principal Assessors who have acquired expertise on Cybersecurity are qualified to lead an assessment using Automotive SPICE® Cybersecurity after passing the training and exam.
TARGET GROUP AND PREREQUISITES
This training is aimed at intacs™-certified Automotive SPICE® assessors only.
- 3 Days
- from 9 - 17 o'clock
- public | inhouse
- DE | EN
- limited to 12 participants
- intacs™ certification
Whether its certification training you need or an individual workshop, you always benefit from the full advantages of our know-how. We will design the right training to match your needs, for you (individually) as an expert, or as an exclusive in-house course for your company. Our experts offer all courses in German and English.
Smilja Mateja, Training Coordination
Content of the cybersecurity course
The content of this course is based on the syllabus published by intacs™. intacs™ will provide standard training material to the intacs™ training providers and will cover the topics below.
Cybersecurity know-how, including
- Cybersecurity motivation and history
- Cybersecurity goals
- Relevant standards and guidelines
- The concept of assets and asset management
- UNECE requirements
- Risk assessment methods and threat modelling
- Methods for penetration testing
- Security vs. Functional safety
- TARA according to ISO/SAE 21434
Automotive SPICE® for Cybersecurity processes
- Supplier Request and Selection ACQ.2
- Cybersecurity Risk Management MAN.7
- Cybersecurity Requirements Elicitation SEC.1
- Cybersecurity item and TARA
- Cybersecurity Implementation SEC.2
- Risk Treatment Verification SEC.3
- Risk Treatment Validation SEC.4
Hints and comments on existing processes
These hints and comments must be considered when implementing or assessing existing Automotive SPICE 3.1 processes.
- Acquisition processes ACQ.3, ACQ.4, ACQ.14, ACQ.15
- System development processes SYS.1 to SYS.3
- Software development processes SWE.1 to SWE.3
- Software test processes SWE.4 to SWE.6
- System test processes SYS.4 and SYS.5
- Support processes SUP.1 and SUP.8
- Project management process MAN.3
- Risk management process MAN.5
Exercises
Exam preparation
EXAMINATION
On the afternoon of the last day of the course, a representative of the VDA will conduct a multiple-choice online exam.
The exam is held in English. The regular duration of the exam is one hour. Examinees whose native language is not English receive 50% more exam time.
Next training
24 Apr - 26 Apr 2024 Automotive SPICE Cybersecurity
23 Jul - 25 Jul 2024 Automotive SPICE Cybersecurity
23 Sep - 25 Sep 2024 Automotive SPICE Cybersecurity
28 Oct - 30 Oct 2024 Automotive SPICE Cybersecurity
02 Dec - 04 Dec 2024 Automotive SPICE Cybersecurity
Book early to receive an early-bird discount or apply for a group discount on course fees.
Our training offer is aimed at commercially interested parties. For this reason, the prices quoted are purely net, to which must be added, in addition to any examination fees, the value-added tax applicable at the training provider's location.
How do experts assess the status of cybersecurity activities in the automotive industry? In the industry barometer »Automotive Cybersecurity. State of Practice 2020«, experts from E/E development give their assessment of the questions that challenge newcomers to the field of cybersecurity in particular.
In this course we will familiarize you with theoretical and practical knowledge about TARA and risk assessments. After TARA in the concept phase, risk assessments turn into the pivotal point of cybersecurity oriented processes. We therefore recommend that you become accustomed to TARA from the very beginning.
Together with the TUEV Nord certification body we qualify you as a "Cybersecurity Engineer (Automotive)". During the training you will learn how to achieve the required end-to-end security. As a TUEV Nord qualified Cybersecurity Engineer, you will know how ISO/SAE 21434 supports your work and which homologation requirements are imposed by UNECE for your task.
Process & administration
Information on the training programme
Some courses take place several times a year as classroom training sessions. Others are only offered as in-house training.
To make a binding reservation, book directly through the website or send us an order. We will confirm course dates as soon as we have received a minimum number of reservations. You will be sent all required information on course arrangements in advance. Fees include digital course materials, and, if you come to our sites, lunch and refreshments during breaks.
Most of our courses can also be booked as in-house training sessions. Our instructors will be happy to travel directly to your place of work and train your teams on site. We can also mix and match the content of in-house courses and take a particular situation affecting your projects into account. We will be happy to write a concept proposal for your specific training requirements.
All courses outlined in our training programme can be held in German or English. Our training materials are written in English.
You will receive the training documents as a PDF. We recommend that you have your notebook or tablet with you during the course.
Training package: Seminar skills and attractive discounts
- 10% early-bird booking discount if you register six or more weeks before a training session.
- 10% group discount if you register more than one participant from your company for the same course.
Want to save even more? Discounts can be combined for the same course.
These conditions do not apply to VDA examination fees for Automotive SPICE® assessor training sessions or the Scaled Agile, Inc. fee for SAFe training.
We strongly recommend that you have the appropriate ISO standards at hand for and during the exam, and of course during your further work.
For the Cybersecurity Engineer training (TÜV Nord) this concerns ISO/SAE 21434, for the Functional Safety Engineer course (TÜV Rheinland) the safety standard ISO 26262. For Automotive SPICE® training, however, you will receive the model in the form of our original pocket guide.
For legal reasons, we are unfortunately not authorized to provide you with a copy of ISO standards. Please ask your employer if you can obtain the respective standard there.
Conditions of participation
For courses in our seminar rooms, the fees include digital course materials, lunch and refreshments during breaks per person.
Our services will be invoiced before beginning of training course.
Terms of payment: 10 days net. In case of late payment late interest will be charged in accordance with current BGB regulations, in particular §288 BGB (German Civil Code).
This offer is only open to companies or registered tradespersons. All fees are subject to current sales tax and must be paid on receipt of invoice. Early-bird and group discounts will be subtracted as necessary from invoices.
We will confirm receipt of your registration. Registrations can be cancelled without penalty up to 6 weeks before each individual event; after that the following rules apply:
- 6 weeks to 4 weeks before the start of the event = 10%.
- 4 weeks to 7 days before the event = 50%.
- Fees will not be refunded if you cancel a course less than a week before an event.
We will gladly accept a substitute participant at no additional cost.
All courses may be subject to change due to unforeseen circumstances.
We charge the examination fees of third parties (such as VDC QMC and Scaled Agile Inc. as well as TÜV Rheinland and TÜV Nord) on their behalf. Such fees are not eligible for a discount.
Your personal information will be stored by KUGLER MAAG CIE GmbH in order to organise the event. By registering for a course you also agree to us contacting you by fax, email or telephone. If you do not wish to consent to us using your information in this way, please send us a message or get in touch. You have the right to withdraw your consent to this arrangement at any time.
If you take part in an examination with a third-party provider such as the VDA QMC and Scaled Agile Inc. as well as TÜV Rheinland and TÜV Nord, we will pass on the necessary data to the respective provider.
