DOT issues cybersecurity guidance

The US Department of Transportation’s (DOT) National Highway Traffic Safety Administration (NHTSA) has issued guidance to improve vehicle cybersecurity.

The guidance offers best practices to help protect against breaches and other security failures that put motor vehicle safety at risk, according to US Transportation Secretary Anthony Foxx.

The suggested solutions are designed to be safe actions, even when an attack is successful, including protection of critical vehicle controls and personal consumer data. The NHTSA says auto companies should consider the full life-cycle of their vehicles and be ready to rapidly respond and recover from cybersecurity incidents.

The NHTSA encourages the industry to self-audit and consider vulnerabilities and exploits that may impact their entire supply chain. The safety agency also noted that training to educate the entire automotive workforce on new cybersecurity practices is needed.