Press & News
Auto-ISAC Adds Four Additional Cybersecurity Companies Advancing the Cybersecurity of the Connected Vehicle
Washington, DC – April 25, 2019 – The Automotive Information Sharing and Analysis Center (Auto-ISAC) welcomes two new members BlackBerry and Verizon and, two new strategic partners Pen Test Partners and Regulus.
The inclusion of these four companies increases the strength of the Auto-ISAC’s position as the voice of the global auto cybersecurity information sharing community that works to prevent cyber threats to the connected vehicle.
Delphi Technologies and Valeo Join the Auto-ISAC Advancing the Cybersecurity of the Connected Vehicle
The Automotive Information Sharing and Analysis Center (Auto-ISAC) welcomes new members Delphi Technologies and Valeo.
The inclusion of these two companies exemplifies the Auto-ISAC’s continued efforts to promote collaboration between suppliers, commercial vehicle companies and automobile manufacturers around vehicle cybersecurity. The Auto-ISAC was formed by automakers in August 2015 to establish a global information sharing community to promote vehicle cybersecurity.
“Delphi Technologies and Valeo play critical roles in the design and engineering of secure connected vehicles, and we are pleased to have them join us to drive the industry’s proactive work to incorporate strong security measures into every phase of the vehicle lifecycle,” said Jeff Massimilla of General Motors, who serves as the Auto-ISAC’s Chairman.
The Auto-ISAC operates as a central hub to share and analyze intelligence about emerging cybersecurity risks. Its secure intelligence sharing portal allows members to anonymously submit and receive information that helps them more effectively respond to cyber threats.
Jeff Stewart of AT&T and chairman of the organization’s Affiliate Advisory Board, which represents non‑OEM members said, “We all play a key role in the cybersecurity of connected vehicles. Sharing and analyzing cyber risk information benefits everyone and it is important that Delphi Technologies and Valeo contribute to our intelligence gathering actions.”
A key action by the Auto-ISAC is the publishing of the Automotive Cybersecurity Best Practices Executive Summary which provides informational guides that cover organizational and technical aspects of vehicle cybersecurity. Currently, two of the guides are available to the public: incident response, governance and collaboration and engagement with appropriate third parties. Six additional guides being written include: risk management, security by design, threat detection and protection, and training and awareness.
The Auto-ISAC has global representation. Its members represent more than 99 percent of light-duty vehicles on the road in North America. Members also include heavy-duty vehicles, commercial fleets and carriers and suppliers. For more information, please visit www.automotiveisac.com and follow us @autoisac.
# # #
Media inquiries
Delphi Technologies is a technology company focused on providing electric vehicle and internal combustion engine propulsion solutions, in addition to solving emissions and fuel economy challenges for the world’s leading automotive OEM’s. Delphi also provides leading aftermarket service solutions for the replacement market. With Headquarters in London, U.K., Delphi Technologies operates technical centers, manufacturing sites, and customer support services in 24 countries.
Media Contact:
Kristen Kinley
Director, Global Media Relations and Content Development, Marketing and Communications
Valeo is an automotive supplier, partner to all automakers worldwide. As a technology company, Valeo offers innovative products and systems that contribute to the reduction of CO2 emissions and to the development of intuitive driving. In 2017, the Group generated sales of 18.5 billion euros and invested 12% of its original equipment sales in Research and Development. As of September 30, 2018, Valeo had 186 plants, 20 research centers, 36 development centers and 15 distribution platforms, and employed 115,000 people in 33 countries worldwide. Valeo is listed on the Paris stock exchange and is a member of the CAC 40 index. For more information visit www.valeo.com.
Media Contact:
Stephan Koller
Director of Communications, North America
Tel: 248-619-8377
stephan.koller@valeo.com
Women at the Annual Auto-ISAC Cybersecurity Summit
The second annual Auto-ISAC Summit welcomed a maturing global auto cybersecurity industry with 313 attendees representing 132 companies. Interestingly, 14 percent of those participating were women of the automotive cybersecurity industry whose roles include: presidents, vice presidents, analysts, threat intelligence directors, CISOs and director and managers of regulatory affairs.
The two-day member developed program was a comprehensive assessment by members, elected and government officials, industry experts and academia into the key issues impacting the auto cybersecurity sector addressing four quadrants:
Cybersecurity Legislative Policy Landscape: Participants were provided updates about the state of the cybersecurity legislative policy landscape impacting smart, connected and autonomous vehicles, privacy and cybersecurity.
Vulnerability Management and Incident Response: This section illustrated how Auto-ISAC members share vulnerabilities and respond to an incident while maintaining anonymity and collaborating across the industry.
Cyber Culture and Building an Organization: Attendees heard how to best build and staff a cyber organization and how to fill the pipeline and how academia and companies are working together to develop the future workforce for the industry. A program currently operating, The Global Future Workforce Program, demonstrated using students, ranging from high school, college and professional apprentices, how the industry is developing the next generation of cybersecurity specialists who will fill critical positions within the global auto industry.
Threat Intelligence: This section focused on the in-depth analysis of potential computer and network security threats to an organization. It was discussed that the goal is anticipating and defending against attacks rather than just reacting and that it is essential for professionals working to minimize threats to collaborate with each other and the broader industry to build resiliency across the global automotive industry.
As a compliment to the program content above, there were numerous keynote speakers from government and industry including:
Senator Gary Peters (MI)
Congresswoman Debbie Dingell (MI 12th)
Derek Kan, DOT
Heidi King, NHTSA
Bill Evanina, National Counterintelligence and Security Center
Kathleen Nuccetelli, Office of Infrastructure Protection, DHS
Amy Chu, Harman
Ang Cui, Red Balloon Security
Jeff Shiner, Micron Technology
Ami Dotan, Karamba Security
Karl Heimer, Founder CyberAuto Challenge
Mike McConnell, Former Director of NSA, DNI and Booz Allen Hamilton Sr. Executive Advisor
David Nicol, DHS Critical Infrastructure Institute, University of Illinois
Sandip Ranjhan, Harman
Timo van Roermund, NXP
Shigeru Uehara, Toyota, Chairman Japan Auto-ISAC
The Auto-ISAC Summit is an annual event open to its members, partners and stakeholders of the auto cybersecurity industry.
The Auto-ISAC was established in 2015, when Global Automakers, Auto Alliance and 14 automakers joined forces to build this global community to foster collaboration that creates a safe, efficient, secure and resilient connected vehicle ecosystem.
Automotive Industry and Students Tackle Cyber Threats Together: Developing a Future Workforce
Detroit, MI, September 25, 2018 – Students are learning from industry leaders how to thwart security threats for automobiles, while at the same time the industry is grooming its future workforce.
At this year’s Auto-ISAC Annual Summit in Detroit (September 25-26), The Global Future Workforce Program was held to demonstrate the development of the next generation of cybersecurity specialists who will fill critical positions within the global auto industry.
An overwhelming number of companies were excited to offer internships and opportunity discussions with students who participated. One such discussion resulted in an actual job offer for a high school student by a notable cyber defense firm.
Vicky Rad of the Michigan Automotive and Defense Cyber Awareness Team (MADCAT) said, “The ability to train and exercise alongside a company representative is extremely valuable and confirms to me that this is the career direction for them to pursue.”
Faye Francy, executive director of the Auto-ISAC, noted, “One of the key issues addressed during the Summit was how to build a cybersecurity team and develop a future workforce including programs, like The Global Future Workforce Program, ranging from high school, college and professional apprenticeship programs.”
The strategic alliance of companies powering The Global Future Workforce Program includes The NEXT Education, GRIMM, GRIDSMART Technologies, Inc., Michigan Automotive and Defense Cyber Assurance Team (MADCAT), and NXP.
Elaina Farnsworth, CEO, The NEXT Education, the company who develops and manages the Global Future Workforce Program, stated, “We are empowered and committed to reaching as many students as possible.” She continued, “In addition, we applaud our corporate partners for their vision to support this program.”
Participants in the program were immersed in a live environment with demonstrations of in-vehicle and infrastructure cyber testing, illustration of career pathways and review of certification-based training. NXP Semiconductors demonstrated cybersecurity projects with students from the University of Michigan Dearborn and the University of Tulsa. GRIMM demonstrated their training and advanced capabilities in automotive cyber and penetration testing. The NEXT Education highlighted innovative certification programs and student work in self-driving vehicle programs. GRIDSMART Technologies, Inc. showcased infrastructure security and Intelligent Transportation Systems. Finally, MADCAT recruited K-12 student work from strategic career pathways for automotive/defense cybersecurity professionals.
Auto-ISAC was formed in July 2015 in a collective effort by the auto industry to establish a secure platform for sharing, tracking and analyzing intelligence about cyber threats and potential vulnerabilities. Auto-ISAC operates as a central hub that allows members to anonymously submit and receive information to help them more effectively counter cyber threats in real-time.
Currently, Auto-ISAC members account for more than 99 percent of light-duty vehicles on the road in North America. The Auto-ISAC members have developed a set of Best Practices Guidelines to address this evolving landscape and rising threat quickly. Auto-ISAC routinely conducts tabletop exercises to ensure that it is addressing what could be and how to mitigate this happening or at the very least, the impact of a hack. Through sharing, learning, and exercising best practices the industry can address the threat and continue to build resilience.
# # #
Six Companies Join the Auto-ISAC - Three Members and Three Strategic Partners
Washington, DC-July 13, 2018 – The Automotive Information Sharing and Analysis Center (Auto-ISAC) welcomes as new members Mitsubishi Electric, PACCAR and Volvo Group North America; and, new strategic partners the American Trucking Associations, Ernst and Young LLP and Red Balloon Security.
The inclusion of these organizations exemplifies the Auto-ISAC’s continued efforts to promote collaboration between Tier 1 suppliers, industry strategic partners and automobile manufacturers around vehicle cybersecurity. The Auto-ISAC was formed by automakers in August 2015 to establish a global information sharing community to promote vehicle cybersecurity.
“Mitsubishi Electric, PACCAR and Volvo Group North America all play critical roles in the design and engineering of secure connected vehicles, and we look forward to working with them,” said Jeff Massimilla of General Motors, who serves as the Auto-ISAC’s Chairman. “The addition of the American Trucking Associations, Ernst and Young and Red Balloon Security as strategic partners adds to the hard-working team of members and partners who are focused on driving the industry’s proactive efforts to incorporate strong security measures into every phase of the vehicle lifecycle.”
Jeff Stewart of AT&T and chairman of the organization’s Affiliate Advisory Board, which represents non‑OEM members said, “We all play a key role in the cybersecurity of connected vehicles. Sharing and analyzing cyber risk information benefits everyone and the Auto-ISAC provides a secure platform for all of us to do just that.”
The Auto-ISAC operates as a central hub to share and analyze intelligence about emerging cybersecurity risks. Its secure intelligence sharing portal allows members to anonymously submit and receive information that helps them more effectively respond to cyber threats.
A key action by the Auto-ISAC is the publishing of the Automotive Cybersecurity Best Practices Executive Summary which provides informational guides that cover organizational and technical aspects of vehicle cybersecurity. Two of the guides are available to the public: incident response and collaboration and engagement with appropriate third parties. Six additional guides being written include: governance, risk management, security by design, threat detection and protection, and training and awareness.
The Auto-ISAC is holding its 2nd annual Cybersecurity Summit: In the Fast Lane, scheduled for September 25-26 in Detroit, MI. The issue of cybersecurity is in the news daily and on everyone’s mind. Governments, businesses, and everyday Americans seem constantly under siege from international and domestic attackers. The Auto-ISAC spent the last year’s Summit beginning to address these nefarious and asymmetric threats to the automotive industry. With the exciting new innovations and technologies for automotive and autonomous vehicles, the industry has a call to action to shift gears and get In the Fast Lane.
The Summit will focus on taking cybersecurity and information sharing to the next level. Guided talks, panels and keynotes will share up-to-date knowledge and best practices and provide educational and networking opportunities for the connected vehicle industry.
Auto-ISAC members represent more than 99 percent of light-duty vehicles on the road in North America. Members also include heavy-duty vehicles, commercial fleets and carriers and suppliers. It has global representation from companies in Europe and Asia. For more information, please visit www.automotiveisac.com and follow us @autoisac. # # #
Media inquiries
MEMBERS
Mitsubishi Electric With nearly 100 years of experience in providing reliable, high-quality products, Mitsubishi Electric Corporation is a recognized world leader in the manufacture, marketing and sales of electrical and electronic equipment used in automotive equipment(electrification systems, car multimedia, ADAS, vehicle total management products, etc.), information processing and communications, space development and satellite communications, consumer electronics, industrial technology, energy, transportation and building equipment. Embracing the spirit of its corporate statement, Changes for the Better, and its environmental statement, Eco Changes, Mitsubishi Electric endeavors to be a global, leading green company, enriching society with technology. For more information visit: www.MitsubishiElectric.com
Contact:
Public Relations Division, Mitsubishi Electric Corporation
Address: 2-7-3, Marunouchi Chiyoda-ku, Tokyo 100-8310, Japan
Email: prd.gnews@nk.MitsubishiElectric.co.jp
http://www.mitsubishielectric.com/bu/automotive/
PACCAR is a global technology leader in the design, manufacture and customer support of premium light-, medium- and heavy-duty trucks under the Kenworth, Peterbilt and DAF nameplates. PACCAR also designs and manufactures advanced diesel engines, provides financial services, information technology, and distributes truck parts related to its principal business.
The Volvo Group is one of the world’s leading manufacturers of trucks, buses, construction equipment and marine and industrial engines. The Group also provides complete solutions for financing and service. The Volvo Group, which employs nearly 100,000 people, has production facilities in 18 countries and sells its products in more than 190 markets. In 2017, the Volvo Group’s sales amounted to about $39 billion. The Volvo Group is a publicly-held company headquartered in Gothenburg, Sweden. Volvo shares are listed on Nasdaq Stockholm. For more information, please visit www.volvogroup.com.
For further information, please contact John Mies, Volvo Group North America, phone 336-543-9094, email john.mies@volvo.com.
STRATEGIC PARTNERS
American Trucking Associations is a united federation of motor carriers, state trucking associations and national trucking conferences that serves to promote and protect the interests of the trucking industry. With safety being ATA’s first priority, identifying emerging cyber threats and guarding against malicious cyber criminals are of vital importance to its membership.
In February 2018, American Trucking Associations initiated Fleet CyWatch – a member-led benefit program for fleets to report cybercrimes, receive analytic support and incorporate latest developments on cybersecurity industry issues, alerts, best practices and national security awareness. Fleet CyWatch assists members in reporting information about trucking-related internet crimes and cyberattacks and serves as an information clearinghouse to notify fleets about threats that could impact their operations. The program also coordinates with NGOs and federal officials to provide motor carriers with information and recommendations in the areas of cybersecurity awareness, prevention and mitigation.
Contact:
Jeremy Kirkpatrick
703-838-1873
Ernst and Young LLP
About EY’s Global Automotive & Transporation Sector
Our purpose: In the Automotive & Transportation Sector, we’re doing our part to enhance human mobility. We’re helping to get people and products where they need to go — better, faster and smarter — in a rapidly changing environment.
Our differentiators: Through our global sector network, we connect more than 13,000 professionals with deep industry and technical experience. They understand what the trends of the future mean for organizations now, and they have a strong point of view on the emerging issues across automotive and transportation.
Our results: We work with our clients to deliver innovative — yet pragmatic — solutions to address their imperatives and deliver tangible business value around the disruptive trends and transformational challenges shaping tomorrow’s industry, today.
Our position in the market
We have more than 13,000 professionals serving automotive and transportation companies across the globe, and they have carefully cultivated thousands of relationships throughout the sector. This gives us an extraordinary network of resources to share with you. Putting you in touch with the right people is just one of the ways we help you to move ahead.
www.ey.com/automotive
www.ey.com/futureofmobility
Contact:
Vicki Kamenova
Principal
Vicki.Kamenova@ey.com
+1 248 434 7389
Sean Wessman
Principal
Sean.Wessman@ey.com
+1 248 635 8613
Red Balloon Security (www.redballoonsecurity.com) is a leading security provider and research firm for embedded devices across all industries. The company’s cybersecurity solution for the automotive industry, Symbiote for Automotive Defense, protects electronic control units (ECUs) from malware, ransomware, malicious firmware modification and zero-day attacks. It is effective for any automotive ECU or gateway, regardless of manufacturer or vehicle type. Red Balloon Security’s pioneering R&D is led by a team of world-class academic researchers and developers who have published seminal research papers in the fields of embedded security and intrusion detection, led US Department of Defense funded research activities, ethically disclosed vulnerabilities within hundreds of millions of ubiquitous embedded devices and worked as embedded security researchers within various intelligence agencies.
Name: Chris Bodine
Title: Strategist
Address New York, NY
Phone 917-259-1057
Email chris.bodine@redballoonsecurity.com