Automotive Cybersecurity Training (ACT)

Cybersecurity is an essential component of automotive safety due to increased connectivity of automobiles. The automotive industry faces growing challenges in managing cybersecurity threats and enhancing cybersecurity resiliency to ensure automotive safety. Addressing these challenges requires specialized skills and training that are different from traditional enterprise/information systems-focused cybersecurity educational programs.

The Auto-ISAC recognized the need for a common automotive cybersecurity educational program. The Automotive Cybersecurity Training (ACT) Program was established because there was no comprehensive curriculum addressing cybersecurity in the automotive segment. NHTSA’s “Cybersecurity Best Practices for the Safety of Modern Vehicles”, September 2022, identified workforce development and continuous education as crucial steps to improve automotive cybersecurity.

The goal of the ACT program is to close the educational gap by:

  • Defining a comprehensive training program for vehicle cybersecurity to improve safety & security.

  • Bridging the skill gap between cybersecurity enterprise and vehicle embedded systems training.

  • Providing guidance to academia to align with government/industry priorities in automotive cybersecurity.

Design and Development of the ACT Program

  • The Automotive Cybersecurity Training (ACT) Team conducted research on existing vehicle cybersecurity training and education from across the globe. 

  • This information was reviewed within the Auto-ISAC membership.  The members are providing feedback on the curriculum and course array for the ACT Program to ensure it is in line with their needs and the overall transportation industry. 

  • An Auto-ISAC Tiger Team was established and is meeting regularly to support the development and oversight of the curriculum, courseware, and select trainers. 

  • The Auto-ISAC Tiger Team helped select the trainees to load level both experienced and novice cybersecurity employees that attended the pilot program to ensure that the courses met the current needs of the industry.

  • The surveys from the Alpha and Beta pilot will be used to determine any course corrections for the training and will be continued to ensure that the ACT will remain current in the changing landscape of cybersecurity.