Anuja Sonalker, STEER Tech
Automotive product cybersecurity assurance is increasingly expected across the supply chain, yet prevailing approaches often rely on exhaustive process compliance and many work products that are costly and difficult for both suppliers and customers to manage. While ISO/SAE 21434 defines required activities and artifacts, it does not prescribe how to construct a convincing and efficient cybersecurity assurance argument. This paper presents a practical approach to cybersecurity assurance cases based on eliminative argumentation and a constructive assurance case method. By employing structured arguments grounded in explicit assumptions, evidence, and logical inference, suppliers can produce assurance cases that are credible and efficient.
