Building Living TARA for supplier risk and SDV compliance
In the software-defined vehicle era, Threat Analysis and Risk Assessment (TARA) cannot stop at design time.
In this session, experts from VicOne and Saphira AI explain how OEMs and Tier 1s can connect vulnerability intelligence to Living TARA workflows, linking supplier risk to affected assets, attack paths, mitigations, and audit-ready compliance evidence across the vehicle lifecycle without repeated rework.
What you’ll learn:
- Why traditional TARA workflows can fall behind after SOP as supplier components, CVEs, and SDV architectures continue to change
- How Living TARA keeps threat assumptions, affected assets, attack paths, mitigations, and compliance evidence connected
- How to map new supplier vulnerabilities and runtime exposure back to the right TARA updates without starting from scratch
- How to reduce rework across safety, cybersecurity, compliance, and engineering teams by working from a shared risk model
- How to connect design-time TARA with runtime vulnerability monitoring to support faster, evidence-based response across the vehicle lifecycle