Published: 12 August 2022
Summary
Continuous integration/continuous deployment of code has become key to enabling effective life cycle management of software-defined cars. This research discusses Step 1 of how CIOs achieve this — by creating an SBOM to provide insight into the software and firmware used across vehicle models.
Included in Full Research
Overview
Key Findings
Automakers lack visibility into the software deployed on their vehicles, particularly where the vehicle uses electronic control units (ECUs) with embedded software.
The cybersecurity regulation R155 will launch some of the processes that will help make sense of the software and firmware supply chain. However, the current scope of the regulation focuses on vehicles receiving type approval after July 2022 in the European Union (EU).
Recommendations
CIOs working to optimize and modernize their IT systems to manage the software and firmware deployed on vehicles through their life cycle must:
Clients can log in to view the entire
document.