Tensor Auto has achieved ISO/SAE 21434 certification for its Cybersecurity Management System (CSMS) following an independent audit by Applus+ IDIADA that reported zero findings or non-conformities.
ISO/SAE 21434 defines cybersecurity engineering requirements across the lifecycle of connected vehicles, from initial concept and hardware and software design through production, operation, and decommissioning. The certification also establishes the process foundation for UN R155 type approval in global markets.
Beyond the Tensor Robocar, the company offers a licensable full-stack AI driving platform for automakers and Tier 1 suppliers. The audit covered the cybersecurity processes supporting Tensor’s vehicle architecture, including the following:
Core engineering processes audited
- Lifecycle-wide security engineering: Establishes traceability across each phase of vehicle development, from vehicle-level cybersecurity goals through component requirements and verification testing.
- Threat analysis and risk assessment (TARA): Covers vehicle- and ECU-level threat analysis, including assets, threat scenarios, attack paths, risks, and controls using ISO/SAE 21434 methods.
- Vehicle Security Operations Center (VSOC): Supports intrusion detection, incident escalation, and defined response procedures for deployed vehicles.
- Secure over-the-air updates: Uses Tensor’s OTA platform to manage, deploy, and monitor firmware packages with cryptographic controls.
- Defensive validation: Includes penetration testing, fuzz testing, communication security testing, and static and dynamic code analysis tied to TARA-derived requirements.
- Supply chain cybersecurity governance: Applies cybersecurity requirements to relevant suppliers, including secure development practices, vulnerability management, incident support, evidence delivery, and change control.
- Production and end-of-line verification: Extends cybersecurity requirements into vehicle flashing, provisioning, configuration, functional validation, and end-of-line testing before release.
Tensor’s vehicle architecture uses onboard computing for environmental perception, trajectory planning, and biometric authentication without requiring persistent cloud connectivity. The company’s cybersecurity processes also cover software updates, supplier requirements, vehicle monitoring, and incident response throughout the vehicle lifecycle.
Beyond the Tensor Robocar, the company offers a licensable full-stack AI driving platform for automakers and Tier 1 suppliers. The ISO/SAE 21434 certification applies to the cybersecurity processes supporting the platform’s vehicle architecture, software, onboard computing, OTA updates, and vehicle security operations.
Filed Under: Software, Technology News