ISO/SAE 21434:2021 由 ISO 與 SAE 於 2021 年 8 月聯合發布，定義道路車輛電子電氣（E/E）系統在概念、開發、生產、營運、維護到除役的全生命週期網路安全工程要求。它與法規的關係是本標準商業重要性的核心：UN R155 要求車廠建立車輛網路安全管理系統（CSMS）並對供應鏈課責，歐盟自 2022 年 7 月起適用於新車型、2024 年 7 月起適用於所有新生產車輛——不符合即無法取得型式認證，等同禁售。21434 雖非法律本身，卻是業界公認對應 R155 的工程標準：車廠以它審查供應商的資安開發能力（TARA 威脅分析與風險評估、資安概念、開發與驗證、事件回應），一二階供應商沒有對應制度，就進不了開發案。
與 UN R155／TISAX 的分工
UN R155 是法規（管車廠的 CSMS 與型式認證）、TISAX 是資訊安全評鑑（管您公司的資訊保護能力）、ISO/SAE 21434 是工程流程標準（管產品怎麼被安全地開發出來）。三者經常被混為一談，實務上是三條並行的供應商要求：TISAX 過了不代表 21434 能力具備，反之亦然。
導入核心：TARA 與資安開發流程
21434 的技術心臟是 TARA（Threat Analysis and Risk Assessment）：資產識別、威脅情境、攻擊可行性與衝擊評估、風險處置決策，並由此導出資安目標與需求，貫穿 V 模型開發與驗證。對已有 ASPICE 或 ISO 26262 流程的組織，21434 可掛載於既有開發框架，增量導入成本可控。
與功能安全（ISO 26262）的互補
26262 處理「故障導致的危害」，21434 處理「攻擊導致的危害」——駭客注入煞車訊號與硬體故障造成的後果同樣致命，但成因與對策完全不同。兩標準共用 V 模型且明確互相引用，整合導入（資安分析結果回饋安全危害分析）是現行最佳實務。
Who This Is For
- 被車廠要求展示資安開發能力的一二階供應商
- 車用電子控制器（ECU）、感測器與域控制器開發商
- 車用軟體與 OTA 相關方案商
- 正切入車用市場、需要建立資安工程流程的科技業者
Related Deep Insights
In-depth analysis by Winners consultants, 6,000+ words per article
The Autonomous Driving Trust Case: A Complete Safety Argument Framework Beyond ISO/SAE 21434 Compliance
A 2023 Norwegian study found trust and safety are statistically unrelated, revealing that an ISO/SAE 21434 cybersecurity case alone cannot build public trust in autonomous driving. The research proposes a supplementary 'Trust Case' framework to present AI transparency and organizational accountability in layperson's terms. Taiwanese suppliers must build a complete, customer-facing safety argument beyond TISAX certification and UNECE WP.29 compliance to address this critical gap.
autoTeam Structure Insights from ISO/SAE 21434 Development: The Organizational Key to Automotive Cybersecurity Compliance in Taiwan
Using the ISO/SAE 21434 development process as a case study, Zhang Hengwei's research reveals that team structure is the most critical IPO factor affecting international standard quality. For Taiwan's automotive suppliers, this means the success of TISAX certification and ISO/SAE 21434 implementation hinges on establishing a cross-functional cybersecurity governance team.
autoOptimizing Early-Stage Automotive Cybersecurity Process Design: A Practical Analysis of ISO/SAE 21434 and TISAX Compliance
Research by Christine Jakobs (2023) reveals systemic gaps in the early design phase of the automotive cybersecurity V-Model, leading to an incomplete ISO/SAE 21434 compliance evidence chain. The study proposes a function-oriented risk analysis method to identify threats before system architecture is finalized. This approach is crucial for Taiwanese suppliers preparing for TISAX certification and complying with UNECE WP.29 UN-R155 regulations, offering a practical framework to strengthen early-stage security practices and ensure robust compliance.
autoProposing HEAVENS 2.0: An Automotive Risk Assessment Model – Winners Consulting Services Insights
Winners Consulting Services Co., Ltd. highlights HEAVENS 2.0 as the vehicle risk assessment model that most closely aligns with ISO/SAE 21434 requirements. The research team systematically identified 17 model updates—12 to address compliance gaps and 5 to remediate weaknesses—fully aligning the original HEAVENS framework with mandatory UN R155 regulations. This provides a clear gap analysis checklist for Taiwanese automotive suppliers navigating TISAX certification and ISO/SAE 21434 implementation.
autoAMCSF: New Cloud Compliance Requirements for ISO 21434 and TISAX
Geol Kang's 2025 Automotive Multi-Cloud Security Framework (AMCSF) reveals that in the era of Software-Defined Vehicles, the primary attack surface has shifted from the vehicle to the cloud backend. The five-layer defense architecture integrates the ISO/SAE 21434 lifecycle and emphasizes the necessity of CSPM tools. Taiwanese OEMs and Tier-1/Tier-2 suppliers must incorporate cloud security into their TISAX assessment preparations to meet these evolving compliance demands and secure their position in the supply chain.
autoISO/SAE 21434 Gap Analysis: Systematically Strengthening TARA Management and Incident Handling
A 2023 arXiv paper reveals systemic gaps in ISO/SAE 21434 concerning cross-supply chain TARA management and vulnerability incident handling, proposing 13 new terms and 4 new process steps. Taiwanese automotive suppliers, during TISAX certification and UNECE WP.29 compliance, should prioritize strengthening post-production incident response and TARA lifecycle management. Winners Consulting Services offers a 90-day implementation plan to address these critical areas and ensure robust compliance.
autoQuantifying Systemic Cybersecurity Impacts of Connected Vehicles: A Key Extension for ISO 21434 TARA
The current ISO/SAE 21434 TARA framework, limited to a single-vehicle boundary, fails to quantify the cascading impacts of connected vehicles on the entire traffic system. A new study simulates three attack scenarios, introducing for the first time systemic operational and safety impact vectors to provide an objective basis for TARA impact ratings. Taiwanese automotive suppliers pursuing TISAX certification and UNECE WP.29 compliance must incorporate this systemic risk perspective into their threat analysis to meet evolving OEM requirements and enhance the defensibility of their cybersecurity management systems.
autoAn Adaptable Security-by-Design Approach — Winners Consulting Services Insights
Winners Consulting Services Co., Ltd. highlights a 2025 study by UK scholar Jeremy Bryans et al., which is the first to systematically apply the Security-by-Design concept from ISO/SAE 21434 to the entire lifecycle of vehicle OTA updates. The research integrates Threat Analysis and Risk Assessment (TARA) with UNECE WP.29 mitigation requirements, offering a practical framework for Taiwanese automotive suppliers navigating TISAX certification and ISO/SAE 21434 compliance.
FAQ
ISO/SAE 21434 是強制的嗎？
標準本身非法定強制，但 UN R155 自 2024 年 7 月起適用於歐盟所有新生產車輛，車廠的 CSMS 義務透過合約沿供應鏈傳遞——對要進入車用供應鏈的廠商，21434 是事實上的入場要求。
已有 TISAX，還需要 21434 嗎？
需要。TISAX 評的是公司資訊安全保護能力（資料、原型、場域），21434 規範的是產品資安工程流程（TARA、資安需求、開發驗證、事件回應）。車廠盡調通常兩者都查。
21434 需要驗證取證嗎？
標準本身無官方認證制度，市場實務是由驗證機構提供流程符合性評估或人員資格認證，更關鍵的是通過車廠的開發案稽核。輔導目標是讓制度經得起車廠audit，而非只拿一紙證書。
和 ISO 26262 可以一起導入嗎？
建議一起。兩者共用 V 模型與管理架構，TARA 與 HARA 方法論同構，整合導入可共用文件骨架並處理資安×功安的交互影響，總成本低於分開導入。