As the automotive industry advances deeper into intelligence and connectivity, cybersecurity has emerged as a core pain point constraining high-quality industry development. Regulation R155 of the United Nations Economic Commission for Europe (UNECE R155) explicitly mandates that the vehicle manufacturer identify and manage cybersecurity risks in the supply chain – a requirement driving the industry to strengthen safety control throughout the development process from the source.

Against this backdrop, the Automotive SPICE^® Process Reference and Assessment Model for Cybersecurity Engineering (Version 2.0), authored by VDA Working Group 13, has been officially released on March 28, 2025. It provides an authoritative guideline for the standardised assessment of cybersecurity development processes in the automotive industry. Today, the Chinese version of this PAM has also been formally launched.

This PAM supplements the Automotive SPICE^® 4.0 for enabling the evaluation of cybersecurity-relevant development processes. A prerequisite for performing an assessment using the Automotive SPICE^® for Cybersecurity Engineering PAM is the existence of an Automotive SPICE assessment result for the recommended VDA scope. Otherwise, an assessment using both the Automotive SPICE^® for Cybersecurity Engineering PAM and Automotive SPICE^® PAM for the recommended VDA scope processes has to be performed.

How to Access

Log in to our official website (https://vdachina.com.cn), navigate to "VDA Standards" → "Free Download" to access the PDF version or click to download directly.