Automotive threat analysis and risk assessment method

The Threat Analysis and Risk Assessment (TARA) method is a systematic approach to evaluating and managing risks according to the ISO SAE 21434 standard. It begins with asset identification, impact calculation, threat identification, and ends with risk calculation and communication. TARA also provides measurements of risk tolerance, risk caution, and baseline risk, useful for comparison with prior calculations. Ensuring consistency in TARA language and judgements across evaluations is crucial for a cybersecurity program’s effectiveness.