SAE JA 7496:2022-06-01

Manage risk and ensure security of a cyber-physical system (CPS) throughout its life cycle by utilizing systems engineering principles;

Assess the impact of cyber-physical systems security (CPSS) objectives and requirements;

Assess the security risks to CPS technical effectiveness and functions, and address weaknesses and vulnerabilities;

Address various domains of consideration (see 3.1) that take into account operating conditions of the system, command and control, configuration management (refer to SAE EIA649), etc., that could negatively impact CPSS or CPS-designed purpose;

Perform design validation and verification to assess security and risk of the CPS.