This standard gives a framework for cybersecurity activities of automotive electronic systems, and suggestions on cybersecurity activities, organization, management and support of automotive electronic systems under this framework. This standard is applicable to guide various organizations in the automotive electronics supply chain such as OEMs, component suppliers, software suppliers, chip suppliers, and various service providers to carry out network security activities, and guide relevant personnel to engage in the development of automotive electronic systems. The basic network security requirements are met in the process of design, development, production, operation and service.
GB/T 38628-2020 Referenced Document
GB/T 20984 Information security technology—Risk assessment method for information security*, 2022-04-15 Update
GB/T 29246 Information security technology—Information security management systems—Overview and vocabulary*, 2023-12-28 Update
GB/T 30279 Information security technology—Guidelines for categorization and classification of cybersecurity vulnerability*, 2020-11-19 Update
GB/T 31167 Information Security Technology Cloud Computing Service Security Guidelines*, 2023-05-23 Update
GB/T 31168 Information Security Technology Cloud Computing Service Security Capability Requirements*, 2023-05-23 Update
GB/T 31509 Information security technology.Guide of implementation for information security risk assessment
GB/T 38628-2020 history
2020GB/T 38628-2020 Information security technology—Cybersecurity guide for automotive electronics systems