Protection at every level
Built-in redundancy and safety checks to ensure driver safety and vehicle functionality at all times.
Sophisticated, multi-layered security using the latest approaches to quickly identify, stop and mitigate the impact of cyber attacks.
Data privacy & security is designed into every solution, from in-vehicle software & firmware to encryption in the cloud.
Operational principles that follow rigorous internal procedures and industry best practices to keep every customer safe & secure.
Functional Safety
ISO 26262 Certified and ASIL-D Rated
The only ISO 26262 certified (by UL) over-the-air software update product with an ASIL-D rating for deploying software and firmware updates to any ECU with safety and confidence.
Vehicle Safe State Checks
Customizable "safe state" checks to ensure road vehicles are in a safe state (not in motion) before and after performing any ECU software updates that could result in a human safety hazard.
Firmware Assurance Checks
Sibros' system ensures only valid versions of OEM signed software or firmware can be installed to mitigate risks of incorrect parameter settings or malware intrusion.
Unprogrammed ECU Checks
Continuous monitoring of ECUs to ensure they are fully and correctly programmed, operating as intended.
Concept Testing
We ensure the functional safety of all new products and concepts with extensive concept testing and analysis prior to customer release.
Cybersecurity
WP.29 R155 & R156 Compliance
Technology features and mechanisms for Cybersecurity Management Systems (CSMS) and Software Update Management Systems (SUMS) to help OEMs achieve R155 and R156 regulatory compliance.
IEEE Uptane Cybersecurity Standard
Our systems employ the compromise-resistant Uptane framework, designed to provide multi-layer cybersecurity and threat protection against bad actors for over-the-air software updates in ground vehicles.
Secure Communication
Utilization of HTTPS/MQTTS to ensure secure and reliable data exchange between vehicles and the cloud.
Multiple Signature Points
Approval and authentication of commands and updates to require signature keys across multiple access points and users to prevent tampering and unauthorized usage.
Unique Version Identifiers
All software versions, update packages, system changes, and associated vehicles utilize unique identifiers for consistency, transparency, verification, and traceability.
Full Cyberattack-Type Protection
Sibros’ multi-layer authentication & security approach protects against a multitude of malicious activities such as eavesdropping, drop-request, slow-retrieval, freeze attacks, rollback attacks, and more.
Data Protection
GDPR Compliance
Compliance with user privacy and data rights as outlined in the EU General Data Protection Regulation (GDPR) and other comparable international data protection standards.
CCPA Compliance
Compliance with customer consent and right-to-use requirements for data collection and storage as outlined in the California Consumer Privacy Act.
ISO 27001
Certified for Information Security Management Systems and best practices that safeguard all forms of information and protect the integrity, confidentiality and availability of data.
TISAX
Compliance with the European automotive standard for a consistent approach to enterprise information security systems.
Operations
SOC 2 Type I
Certified by the American Institute of CPAs (AICPA) Systems and Organization Controls (SOC) for security, availability, processing integrity, confidentiality, privacy of customer information.
SOC 2 Type II
Certification by the American Institute of CPAs (AICPA) Systems and Organization Controls (SOC) for internal controls and efficacy of how we safeguard customer data.
ISO 9001:2015
Certified for Quality Management Systems (QMS) and frameworks to continually improve our products and services we deliver to you.
Incident Response & Risk Management
Our dedicated Risk Committee oversees the detection, assessment, and documentation of potential threats per the guidelines outlined in our Incident Response Policy.
Continual Staff Training
Ongoing communication and training is required across the organization on all new operational procedures, obligatory compliance topics and related best practices.
Secure Onboarding & Offboarding
All employees undergo a thorough vetting process, including multiple interviews, a criminal background check, and introductory training. Upon departure, employee access to company systems, services, and applications is immediately disabled.
