Turn SDV Compliance into Your Competitive Edge

TARA — Threat Analysis and Risk Assessment — is a structured methodology required by ISO/SAE 21434 for identifying and evaluating cybersecurity threats in vehicle systems. It is mandatory for type approval under UNECE WP.29 R155, which is active in the EU, Japan, South Korea, and other major markets. Without a documented TARA process, vehicles cannot achieve regulatory approval for market entry.

AI-powered TARA uses fine-tuned language models to generate threat scenarios across system architectures — covering attack vectors a human team might miss. The key to compliance accuracy is human-in-the-loop validation: every AI-generated scenario is reviewed by automotive cybersecurity SMEs before it enters documentation. This combination delivers 90% faster delivery without sacrificing the rigour that auditors and regulators require.

TARA (Threat Analysis and Risk Assessment) addresses cybersecurity threats under ISO/SAE 21434. HARA (Hazard Analysis and Risk Assessment) addresses functional safety hazards under ISO 26262. In Software-Defined Vehicles, these disciplines must be integrated — cyber attacks can directly cause safety hazards, such as adversarial manipulation of ADAS sensor data leading to loss of vehicle control.

A CSMS for WP.29 R155 compliance must cover: cybersecurity policies and processes, risk management across the vehicle lifecycle, TARA documentation, supply chain security controls, incident response procedures, and evidence of continuous monitoring post-production. Type authorities assess CSMS evidence during the approval process before issuing a Certificate of Compliance. In India, ARAI and ICAT serve as type approval authorities under AIS-189.