{"id":"https://openalex.org/W4415398272","doi":"https://doi.org/10.1109/etfa65518.2025.11205792","title":"Cross-Divisional Cybersecurity Risk Management in Automotive: Requirements and Current Practices","display_name":"Cross-Divisional Cybersecurity Risk Management in Automotive: Requirements and Current Practices","publication_year":2025,"publication_date":"2025-09-09","ids":{"openalex":"https://openalex.org/W4415398272","doi":"https://doi.org/10.1109/etfa65518.2025.11205792"},"language":"en","primary_location":{"id":"doi:10.1109/etfa65518.2025.11205792","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205792","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015055839","display_name":"Patrick Wagner","orcid":"https://orcid.org/0000-0001-8105-653X"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Patrick Wagner","raw_affiliation_strings":["Technical University of Munich,TUM School of Computation, Information and Technology,Department of Computer Engineering,Garching,Germany"],"affiliations":[{"raw_affiliation_string":"Technical University of Munich,TUM School of Computation, Information and Technology,Department of Computer Engineering,Garching,Germany","institution_ids":["https://openalex.org/I62916508"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5015055839"],"corresponding_institution_ids":["https://openalex.org/I62916508"],"apc_list":null,"apc_paid":null,"fwci":1.3089,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.84125486,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9643999934196472,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.942799985408783,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/automotive-industry","display_name":"Automotive industry","score":0.6718999743461609},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.597000002861023},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.44769999384880066},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.3734999895095825},{"id":"https://openalex.org/keywords/it-risk-management","display_name":"IT risk management","score":0.3443000018596649},{"id":"https://openalex.org/keywords/incident-management","display_name":"Incident management","score":0.3424000144004822}],"concepts":[{"id":"https://openalex.org/C526921623","wikidata":"https://www.wikidata.org/wiki/Q190117","display_name":"Automotive industry","level":2,"score":0.6718999743461609},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.6678000092506409},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6640999913215637},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.597000002861023},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.48910000920295715},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.44769999384880066},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3921000063419342},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3734999895095825},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.35280001163482666},{"id":"https://openalex.org/C95609273","wikidata":"https://www.wikidata.org/wiki/Q5975208","display_name":"IT risk management","level":3,"score":0.3443000018596649},{"id":"https://openalex.org/C2780952636","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident management","level":2,"score":0.3424000144004822},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.335099995136261},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3273000121116638},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.26350000500679016},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2614000141620636},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.25529998540878296}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/etfa65518.2025.11205792","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205792","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"},{"id":"pmh:oai:publica.fraunhofer.de:publica/497845","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/497845","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Collaboration":[0],"across":[1,164],"multiple":[2],"divisions":[3],"in":[4,80],"the":[5,25,30,123,126,146],"automotive":[6,88,165],"industry,":[7],"including":[8],"vehicle":[9],"engineering,":[10],"production,":[11],"and":[12,29,63,93,109,140,149,162],"backend":[13],"services,":[14],"complicates":[15],"cybersecurity":[16,97,175],"risk":[17,65,98,104,134],"management.":[18,99],"While":[19],"standards":[20,147],"such":[21,131],"as":[22,132],"ISO/SAE":[23],"21434,":[24],"ISO/IEC":[26],"27000":[27],"family,":[28],"IEC":[31],"62443":[32],"series":[33],"each":[34],"offer":[35,45],"domain-specific":[36],"guidance,":[37],"a":[38,46,118,155],"focused":[39],"review":[40],"shows":[41],"they":[42,52],"do":[43],"not":[44],"fully":[47],"integrated,":[48],"cross-divisional":[49,96],"framework.":[50],"Rather,":[51],"present":[53],"scattered":[54],"guidance":[55],"on":[56,144],"topics":[57],"like":[58],"communication":[59,111],"channels,":[60],"external":[61],"dependencies,":[62],"aligned":[64],"criteria,":[66],"leaving":[67],"it":[68],"to":[69,71],"organizations":[70],"unify":[72],"these":[73,114],"elements.To":[74],"explore":[75],"how":[76],"this":[77,152],"gap":[78],"manifests":[79],"practice,":[81],"semi-structured":[82],"interviews":[83],"were":[84],"conducted":[85],"with":[86],"six":[87],"manufacturers,":[89],"capturing":[90],"real-world":[91],"challenges":[92],"strategies":[94],"for":[95],"The":[100],"findings":[101],"reveal":[102],"disparate":[103],"assessment":[105],"methods,":[106],"inconsistent":[107],"terminology,":[108],"fragmented":[110],"channels":[112],"among":[113],"divisions,":[115,166],"which":[116],"hinder":[117],"holistic":[119],"security":[120],"posture.":[121,176],"Conversely,":[122],"results":[124],"highlight":[125],"benefits":[127],"of":[128],"coordinated":[129],"strategies,":[130],"enhanced":[133],"transparency,":[135],"more":[136,173],"efficient":[137],"resource":[138],"allocation,":[139],"stronger":[141],"regulatory":[142],"compliance.Based":[143],"both":[145],"analysis":[148],"interview":[150],"outcomes,":[151],"paper":[153],"advocates":[154],"cohesive":[156],"framework":[157],"that":[158],"harmonizes":[159],"processes,":[160],"tools,":[161],"language":[163],"ultimately":[167],"guiding":[168],"manufacturers":[169],"toward":[170],"an":[171],"overarching,":[172],"robust":[174]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-03-28T08:17:26.163206","created_date":"2025-10-22T00:00:00"}