@inproceedings{64f6fcee418b4e4e90f6fd45cfeccfb1,
title = "The Cybersecurity Extension for ASPICE - A View from ASPICE Assessors",
abstract = "ASPICE has been introduced to development of embedded systems at automotive suppliers to assess the capability of processes. ASPICE covers processes for software, system, quality assurance, configuration management, problem resolution, change management, project management and supplier monitoring. It defines a scheme for determining the capability of the process based on the underlying PAM. HW Spice is also taken into consideration, because it is also necessary for Cybersecurity, but not mechanical Spice. Based on ASPICE VDA defined processes for Cybersecurity Engineering, Cybersecurity Risk Management and Supplier Request and Selection. This means additional effort for the assessors and also the engineering team when the ASPICE assessment is extended by processes of Cybersecurity to satisfy the requirements of standard ISO/SAE 21434. This paper investigates for the method of mapping the base practices (BP) of cybersecurity process defined by VDA to BP of ASPICE process(es) to reduce the time of an assessment by merging the Base Practices of Processes from Cybersecurity with the Base Practices of Processes from ASPICE.",
keywords = "ASPICE, Assessment, Cybersecurity",
author = "Christian Schlager and Georg Macher",
note = "Publisher Copyright: {\textcopyright} 2021, Springer Nature Switzerland AG.; 28th European Conference on Systems, Software and Services Process Improvement : EuroSPI 2021 ; Conference date: 01-09-2021 Through 03-09-2021",
year = "2021",
doi = "10.1007/978-3-030-85521-5_27",
language = "English",
isbn = "9783030855208",
series = "Communications in Computer and Information Science",
publisher = "Springer Science and Business Media Deutschland GmbH",
pages = "409--422",
editor = "Murat Yilmaz and Paul Clarke and Richard Messnarz and Michael Reiner",
booktitle = "Systems, Software and Services Process Improvement - 28th European Conference, EuroSPI 2021, Proceedings",
address = "Germany",
}