6 weeks
of hands-on training
€1,499
special offer
June 23, 2025
next cohort start date
Remote
learn from anywhere
Curriculum
The Automotive Cybersecurity in Practice learning program takes six weeks to complete. It consists of six modules, each with approximately eight hours of intensive, hands-on training based on a continuous example that is used throughout the course.
Modules
- Module 1: Getting started/introduction to automotive cybersecurity
The module starts with an instructor-led session. The goal is to establish small virtual learning groups through team building. We introduce the curriculum and learning platform and answer learners’ questions. We provide an overview of automotive cybersecurity, and we explain an example item, such as the electrical steering column lock (ESCL), which runs throughout the learning program.
- Module 2: Cybersecurity management
The module examines automotive cybersecurity standards and regulations in different regions. We explain the management of cybersecurity at the organizational and project level according to ISO/SAE 21434. Furthermore, we show why and how cybersecurity is a shared responsibility between customer and supplier.
- Module 3: Threat analysis and risk assessment
The module covers the heart of ISO/SAE 21434: threat analysis and risk assessment (TARA). The learner is guided through the process from asset identification to risk assessment and treatment. Helpful taxonomies such as the European Union Agency for Cybersecurity (ENISA) asset and threat taxonomies and threat modeling methods such as STRIDE are introduced. The module includes an instructor-led session.
- Module 4: Cybersecure product development
The module provides the learner with an overview of cybersecure product development, starting with the cybersecurity concept and the elicitation of cybersecurity goals and requirements. The focus is on design and coding principles and related guidelines such as NIST SP 800-160 Vol.1, Motor Industry Software Reliability Association (MISRA), and CertC. The module concludes with a look at automotive verification and validation, including penetration testing and fuzz testing.
- Module 5: Technical aspects of cybersecurity
The module examines the more technical side of cybersecurity, including cryptography, hardware security and secure operating systems, as well as how to maintain the security of automotive systems through software updates. The module also covers intrusion detection and intrusion prevention. An instructor-led session is included.
- Module 6: Cybersecurity beyond the project
This module concludes the curriculum with a look at cybersecurity beyond the project scope. We cover continual cybersecurity activities, including field monitoring, along with vulnerability management and incident response. Finally, we review the requirements and good practices regarding the end of cybersecurity support and decommissioning.
Learning objectives
The Automotive Cybersecurity in Practice learning program offers learners an overview of automotive cybersecurity and ISO/SAE 21434:2021 and highlights:
- Typical work products, such as item definition, cybersecurity plan, cybersecurity concept, and threat analysis and risk assessment (TARA).
- Approaches to cybersecure product development, including trusted design and implementation principles such as NIST SP 800-160 Vol.1, secure coding such as MISRA and CertC, and the technical aspects of cybersecurity.
- Automotive cybersecurity verification and validation, including pen testing, fuzz testing and application of Auto-ISAC's Automotive Threat Matrix (ATM).
- Automotive cybersecurity in the post-development phases (production, operations and maintenance, and decommissioning).
Learning approach
In small, virtual groups, learners engage with each other in a community-based setting, called Campus, to maximize knowledge retention.
At Campus, curricula address a variety of learning styles by:
- Providing content from module handouts to work product templates and videos.
- Enhancing your learning experience with guiding questions.
- Challenging you with weekly group assignments.
- Testing your knowledge at the end of each module.
In addition, your learning group will check the second group's results while a third group checks yours. Group results must be uploaded to our Campus learning platform by Thursday evening. You will then receive feedback from your peers.
Sample module schedule
- View a sample module schedule
- Monday: Self-study of given material, i.e., video, papers, book chapters and relevant standards/regulations — 1 hour
- Tuesday: Online group meeting to discuss technical lead questions and the weekly group assignment — 1 hour
- Wednesday: Offline individual work to solve the committed part of the group assignment — 2 hours
- Thursday: Online group meeting to discuss, combine individual results and upload the group assignment to the Campus learning platform — 2.5 hours
- Friday: Online group meeting to review other team’s group assignment results; take individual weekly exam — 1.5 hours
Suitable for
The Automotive Cybersecurity in Practice curriculum is designed for a wide audience interested in retraining or upskilling, including:
- Cybersecurity managers and engineers (in training)
- System/hardware/software architects, engineers and testers
- Quality assurance managers, engineers and auditors
- Leaders and members of engineering process group
- Configuration managers
- Project managers
Placement test
- Take the placement test
- Do you work in electronics development in the automotive sector?
- Do you have practical experience in at least one of the following areas?
- Software development or engineering
- Electronics hardware development
- Electronics testing
- Process development in electronics development
- Management in electronics development
- Quality assurance or assessment in engineering departments
- Are you currently working or will you soon be working on projects involving cybersecurity according to ISO/SAE 21434?
- Do you speak English fluently enough to actively participate in a technical discussion?
- Can you make group learning a priority for eight hours a week for six weeks in a row without being the one setting the schedule?
If you answered yes to all these questions, you are in a position to benefit from attending this learning program.
If you answered no to any of these questions, please contact campus@ul.com to see if there are other options for your specific training needs.
Letter of Qualification
To successfully complete the Automotive Cybersecurity in Practice learning program and receive a Letter of Qualification, learners must:
- Actively participate in the group work, including submitting the group assignments on time.
- Pass the knowledge check (multiple choice test) at the end of each module.
The Letter of Qualification, recognized in the automotive industry, demonstrates that the learner has acquired the relevant knowledge and skills in automotive cybersecurity.
- When does the next cohort start?
The next cohort will begin on June 23, 2025
- How do I enroll in the learning program?
To enroll, please click the Registration button. You will be taken to the registration page, where you will find the terms and conditions and be able to book your place in the learning program by selecting the See Dates button and following the registration process.
- How are the learners divided into learning groups?
At Campus, learners from different companies learn from and with each other. To facilitate self-organization, we group learners by time zone, self-assessed technical understanding and preferred language (all content and group work deliverables are in English).
- Is the price lower if I enroll as a group?
The price for this learning program has been reduced to a one-time price of EUR 1,499 per person, with group discounts available. Participation in subsequent cohorts will be charged at the original price, which is based on group size and is at least 25% or EUR 500 higher.
- Does the learning program require on-site attendance?
No. Participation in learning programs is remote only at Campus.
- What happens if I miss a module?
We understand that these things happen. However, to receive a Letter of Qualification, you must actively and independently complete the missed content. Furthermore, you must review the missed group assignment, including group deliverables and the feedback from your peer group.
- Do I have to share any confidential information with my learning group?
No. All learners are required to adhere to their company's policies regarding the sharing of confidential information. We do our part by providing templates and the like so that proprietary work products do not have to be used.
- When will additional curricula be available?
We are currently working on additional learning programs for Campus. For more information about new learning programs and cohort start dates, visit UL.com/Campus.