{
  "id": "workflow:vehicle-cybersecurity-assessment",
  "_kind": "Workflow",
  "_file": "workflows/workflows/workflows-automotive.yaml",
  "_cluster": "workflows",
  "attributes": {
    "displayName": "Vehicle Cybersecurity Assessment",
    "workflowKind": "governance",
    "triggerType": "scheduled",
    "typicalCadence": "per-release",
    "complexity": "cross-team",
    "description": "Assesses vehicle cybersecurity posture per UN R155/ISO 21434 --\nperforming threat analysis and risk assessment (TARA) on vehicle\narchitectures, penetration testing CAN bus and Ethernet backbone,\nevaluating OTA update channel integrity, auditing diagnostic port\naccess controls, and validating intrusion detection system\neffectiveness. Produces the cybersecurity case for type approval.\nExcludes vulnerability remediation.\n"
  },
  "outgoingEdges": [
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "role:security-reviewer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "role:principal-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "role:staff-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "skill-area:threat-modeling",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "skill-area:network-security",
      "kind": "requires_skill_area",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "domain:automotive-engineering",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "domain:electrical-engineering",
      "kind": "applies_to_domain",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "responsibility:threat-modeling",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "responsibility:security-review",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "org-unit:security-team",
      "kind": "performed_by_org_unit",
      "attributes": {}
    },
    {
      "from": "workflow:vehicle-cybersecurity-assessment",
      "to": "org-unit:engineering",
      "kind": "performed_by_org_unit",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "domain:electric-vehicles",
      "to": "workflow:vehicle-cybersecurity-assessment",
      "kind": "uses_workflow"
    }
  ]
}