Responsible business
Cybersecurity and AI
Cybersecurity and the use of AI
We take a comprehensive approach to cybersecurity and the responsible use of AI across both our business operations and our vehicles. Our Chief Financial Officer oversees our Cyber Security Strategy, supported by our IT leadership team and dedicated Cyber Security specialists. Our Cyber Security Policy is reinforced through employee guidance and training, and our cyber resilience is regularly tested as part of our business continuity planning.
Cybersecurity Management
We operate a Cyber Security Management System (CSMS) in accordance with UN ECE Regulation 155. The CSMS embeds cybersecurity in the absolute core of the business and provides a structured framework for identifying, managing and mitigating cyber risks across our products and operations. Our CSMS covers:
- Organisational Cyber Security Management
- Project Dependent Cyber Security
- Cyber Security Development
- Cyber Security in Production
- Cyber Security in Operations, Maintenance, Decommissioning and End-Of-Life Support
- Supplier Management
- Continual Cyber Security Activities and Incident Response
Cybersecurity of the vehicle
We maintain an ongoing and dedicated focus on vehicle-level cybersecurity through the type-approval processes for our vehicles. This ensures that each vehicle meets stringent regulatory standards for cyber resilience. To further support this, we continue to routinely carry out vehicle-level penetration testing, ongoing monitoring and in-depth security evaluations across both vehicle hardware and software components. These assessments simulate real-world attack scenarios, helping us to anticipate potential vulnerabilities and attacks to then proactively strengthen our defences. Through this approach, we aim to stay ahead of emerging vehicle threats.