Consumer buy-in to the idea of autonomous vehicles remains tentative, and one or more high profile failures could set back the development of the industry significantly.
Industry needs to adapt by introducing greater standardisation to its approach to security, for example by developing a model for end-to-end security testing of components from multiple suppliers. A clearer approach is also needed around software patches to deal with any emerging vulnerabilities, not least to address questions of liability for applying updates and the period in which the manufacturer is obliged to supply patches – how should the typical lifespan of a vehicle be determined?
From an international regulatory perspective, in June 2020 the World Forum for Harmonization of Vehicle Regulations – a working group of the United Nations Economic Commission for Europe – passed two new regulations on cybersecurity and software updates. These establish clear performance and audit requirements for car manufacturers in various disciplines including managing vehicle cyber risks and providing a new basis for safe and secure software updates. In the EU, the cybersecurity regulation will be mandatory for all new vehicle types from July 2022, while the general adherence to UN regulations in the global automotive sector means that the widespread adoption of these regulations across the world is expected.
Finally, decisions taken by policymakers in relation to security of telecoms infrastructure will have a significant bearing on the deployment of infrastructure. The UK government estimates that its decision to ban the purchase of Huawei equipment after 31 December 2020 will delay 5G rollout in the UK by two to three years.
Collaboration is vital
Rolling out new CASE infrastructure will require collaboration across a diverse supply chain that includes traditional infrastructure providers, and technology providers and data analytic specialists. With the importance of technology and adaptability in these projects, there is a need to re-consider where the technology companies and experts sit in the supply chain for testing, procuring, designing, building and operating transport infrastructure assets. They are unlikely to remain as sub-contractors at the base of a layered supply chain, but look to move away from the vertical supply chain model entirely and engage from the outset of the procurement process as partners under a collaboration model.