QuestionQ6
Security Testing Standards and Best PracticesElectricCars is a multinational automotive manufacturer that specializes in the design and production of electric vehicles. The company must comply with three manufacturing-process standards: ISO/SAE 21434 for automotive cybersecurity engineering, GDPR (General Data Protection Regulation), and UN Regulation No. 155 (Uniform provisions concerning the approval of vehicles regarding cyber security and cyber security management system).
Compliance with these regulations requires:
- secure storage and communication of data within vehicles and between vehicles and backend systems;
- emergency procedures for cybersecurity breaches affecting production, vehicles in operation, or customer data; and
- transparent incident-reporting mechanisms for regulators and customers.
Which of the following is a security test resulting from the compliance requirement?
- A Simulate a data breach and test the notification process to members of the development team, ensuring clear communication and legal compliance
- B Conduct performance testing on production systems to test response protocols, including isolating infected systems, notifying stakeholders, and restoring operations
- C Trying to gam unauthorized access to offices or secure areas of automotive dealerships, where sensitive customer or vehicle data might be stored
- D Regularly test the integrity and reliability of backup systems for critical data, including production logs, customer information, and vehicle firmware versions
Community Discussion