ENX VCS车辆网络安全 Vehicle Cyber Security

ENX VCS车辆网络安全 Vehicle Cyber Security

Red Overlay
ENX VCS
Red Overlay

汽车供应链中的网络安全Cybersecurity in the Automotive Supply Chain

随着汽车行业的快速发展，网络安全已成为供应链管理中的一个重要议题。各国监管机构纷纷意识到加强汽车网络安全的重要性，提升汽车行业在网络安全方面的防御能力，并积极推进相关法规与标准的制定与实施。

With the rapid development of the automotive industry, cybersecurity has become an important issue in supply chain management. Regulators in various countries have realized the importance of strengthening automotive cybersecurity, enhancing the automotive industry's defense capability in cybersecurity, and actively promoting the formulation and implementation of relevant regulations and standards.

什么是ENX VCS? What’s ENX VCS?

VCS是Vehicle Cyber Security（车辆网络安全）的缩写。它是ENX 协会为汽车行业制定的道路车辆网络安全认证标准。

The ENX VCS is the Vehicle Cyber Security which is an auditing standard for road vehicle cyber security established by the ENX Association for the automotive industry.

ENX VCS 审核方案由 ENX 工作组中的汽车行业专家（原始设备制造商、供应商和服务提供商）制定并不断发展。ENX VCS 为汽车供应商根据 ISO/PAS 5112 准则实施网络安全管理体系 (CSMS) 提供标准化证明。这可用于证明公司满足了根据国际标准 ISO/SAE 21434 在供应链中实施 CSMS 的技术要求。

The scheme has been developed and is continuously evolved by experts of the automotive industry (OEMs, Suppliers and service providers) in the ENX working group, which allows automotive suppliers to provide standardized proof of an implemented cybersecurity management system (CSMS) in accordance with the ISO/PAS 5112 guideline. This can be used to prove that companies fulfil the technical requirements for implementing a CSMS in the supply chain in accordance with the international standard ISO/SAE 21434.

建立并通过车辆控制系统的评估，可以更好地促进组织道路车辆的网络安全，以满足联合国发布的联合国 R155 号条例的要求。

Establishing and passing the assessment of VCS can also better promote the cyber security of organizational road vehicles to meet the requirements of UN Regulation R155 issued by the United Nations.

ENX VCS适用于谁？Who is ENX VCS aimed at?

由于自动驾驶、互联互通以及新的出行概念，车辆系统的数字化程度不断提高，这使得汽车行业供应链中车辆的电气和电子（E/E）系统对网络安全的需求日益增加。在深度融合的供应链中进行产品的创建与维护，需要各合作伙伴可持续地落实车辆网络安全（VCS）措施，并且从客户的角度来看，还需要进行恰当的风险管理与治理。

The increasing digitization of vehicle systems due to automated driving, connectivity and new mobility concepts has led to increased demands on cybersecurity in electrical and electronic (E/E) systems for vehicles across the supply chain of the automotive industry. The creation and maintenance of products in deeply integrated supply chains necessitates a sustainable implementation of vehicle cybersecurity (VCS) across the various partners as well as proper risk management and governance from the customer's perspective.

VCS 适用于那些道路车辆电气和电子（E/E）系统（包括其组件和接口）开发、生产或维护的汽车供应商。

The ENX VCS Audit is aimed at automotive suppliers, who are concerned with development or production, or maintenance of electrical and electronic systems for road vehicles.

VCS 审核通过在 ISO/SAE 21434 框架下实施 ISO/PAS 5112，并利用 ENX 协会现有且成熟的审核框架，提供标准化的网络安全管理体系（CSMS）审核。

It offers standardized CSMS (Cybersecurity management system) audits by implementing the ISO/PAS 5112 in the context of the ISO/SAE 21434 and leveraging the existing and established audit framework of ENX Association.

组织为何需要申请ENX VCS标签？Why the organizations should apply for ENX VCS Label?

  • ENX VCS 提供标准化机制，以证明组织符合网络安全标准 ISO/SAE 21434。
  • ENX VCS offers a standardized mechanism for demonstrating compliance with cybersecurity standard ISO/SAE 21434.
  • 它减少了与冗余审核和各种专有认证计划相关的成本和工作量。
  • It reduces costs and efforts associated with redundant audits and various proprietary certification schemes.
  • 其目的在于让原始设备制造商（OEMs）无需再去创建和维护一份可接受保证事项的清单。
  • It aims to relieve OEMs from the need to create and maintain a list of acceptable assurances.
  • ENX 通过管理包括BSI在内的经批准的审核服务提供商库和监督审核质量来提供管理。
  • ENX provides governance through managing an approved pool of audit providers and monitoring audit quality.

与TISAX有什么关系？What's the relation with TISAX?

获得 VCS 标签的过程与获得 TISAX标签过程相同，同样VCS 的审核结果上传至 ENX平台供授权的相关方进行信息查询和交换。

The process of receiving VCS Label is the same as receiving TISAX Label, and the VCS audit results are uploaded to the ENX Portal for information query and exchange with other participants.

参与 ENX VCS 审核的前提条件是拥有注册的 TISAX 范围或有效的 TISAX 标签。如果您的组织没有 TISAX，请先注册 TISAX。

The prerequisite for participating in ENX VCS audits is having a registered TISAX scope or valid TISAX labels. If your organization does not have TISAX, please register for TISAX first, which BSI could also provide the service in China.

目前，BSI 是极少数几家有能力提供 IATF 16949、ENX TISAX 和 ENX VCS 认证的标准机构，以赋能汽车行业高质量发展。

At present, BSI is very few Standard body with ability to provide IATF 16949, ENX TISAX and ENX VCS certification to empower the Auto industry.

关于ENX协会 About ENX Association

ENX协会成立于2000年，是一个由汽车制造商、供应商和四个国家汽车协会组成的联盟。它旨在实现和简化工业增值网络中安全可信的数据交换。ENX 是与 VCS 相关的评估和交流的法律实体和组织者。所有评估结果都将放在 ENX 平台上。ENX 维护审核提供商标准和评估要求（TISAX ACAR）。它负责批准审核提供商，监控实施质量和评估结果。

Founded in 2000, ENX Association is an organization consisting of automobile manufacturers, suppliers and four national automotive associations. The aim is to enable and simplify secure and trustworthy collaboration over industrial value-added networks. ENX is the legal entity and organizer for evaluation and communication related to VCS. All evaluation results will be placed on the ENX platform. ENX maintains the audit provider criteria and assessment requirements (TISAX ACAR). It approves audit providers and monitors the quality of implementation as well as the assessment results.

为何选择BSI？Why choose BSI for ENX VCS?

  • 自 2002 年以来，我们一直是IATF认可的认证机构。
  • Since 2002, we've been a recognized certification body of the International Automotive Task Force.
  • 我们是 TISAX® 的认可审核提供商.
  • We are an approved audit provider for TISAX®.
  • 我们的专家帮助制定创新汽车技术的政策和国际标准。
  • Our experts help shape policy and international standards for innovative automotive technologies.
  • 我们对供应链的各个环节进行质量、可持续性和汽车网络安全审核。
  • We audit all levels of the supply chain for quality, sustainability, and automotive cybersecurity.
  • 我们为赛车队和联合会提供支持，帮助他们实现重要的可持续发展目标。
  • We support motorsports teams and federations to help achieve vital sustainability goals.

如果您有兴趣成为 ENX VCS 标签在中国的试点项目，请咨询我们。Click to inquire us if any interest to be the pilot of ENX VCS Label in China.

点击问询

联系我们

如果您需要任何帮助，请立即联系我们

电话：400 005 0046 

邮箱：infochina@bsigroup.com