EuroSPI - ASA Certified Cybersecurity Engineer-Expert Level - 5 Days Training Course

Sep 24, 2026

Uploaded by Adam

5-day training course for EuroSPI that introduces SAE J3061 and ISO 21434 through real, automotive cybersecurity classified project examples. The course applies a “Learning by Doing” approach to threat and vulnerability analysis across system, software, and hardware levels, including mapping threat analysis techniques to the V-model. It provides case studies, templates, and an improved toolset for TARA analysis (e.g., ISO 21434 Appendix F–H, HEAVENS, SAHARA) and includes verification, testing, and certification preparation.

LanguageEnglish

CategoryExam

FormatPDF

Pages6

Reading Time15 min

AccessFree to download

Goal

Course Content

Course Structure (5 Days)

Day 1: Cybersecurity System Analysis and TARA

Day 2: Cybersecurity System & Software Analysis

Day 3: Cybersecurity Software Analysis

Day 4: Cybersecurity Software Analysis

Day 5: Cybersecurity Testing & Validation

Training Materials

Target Group and Pre

EuroSPI / ASA Certified Cybersecurity Engineer-Expert Level Goal In this 5 days training course the attendees get introduced to SAE J3061 and ISO 21434 based on examples from real cybersecurity classified projects in Automotive. They will participate actively in case studies and elaborate an cybersecurity case based on your own products. The approach of„Learning by Doing“ is used to elaborate different forms of threat and vulnerability analysis at system, software and hardware level. See the assignment of threat analysis techniques to theV model. Also, the training material demonstrates the threat analysis of a steering system in a car and in exercises the attendees can take their own system and apply the practices and the shown best practice example on their own system in the course. The course offers: • Examples and templates for the threat and vulnerability analysis • A refined tool for TARA analysis (different methods possible, including ISO 21434 Appendix F-H, HEAVENS, SAHARA, etc.) Content The course is based on a joined development with leading Tier 1 companies in the Soqrates group ( [https://soqrates.eurospi.net](https://soqrates.eurospi.net)) such as ZF Friedrichshafen AG, Continental Automotive AG, BOSCH Engineering, MAGNA, Elektrobit, Hella KG, etc. The course is based on a skills set developed ion the EU Blueprint project DRIVES which led to the foundation of the ASA (Automotive Skills Alliance) . EuroSPI is a member of ASA and certifies these courses. ASA members include ACEA, CLEPA, ETREMA, and many more European automotive associations. See ASA Learning Platform ([skills-framework.eu](skills-framework.eu)) Page 1 of 6 The course focuses on the following skills elements of that cybersecurity engineer skills set: Unit 3 – Element 1: System Threat Analysis and Cybersecurity Goals Unit 3 – Element 2: System Design and Vulnerability Analysis Unit 3 – Element 3: Software Design and Vulnerability Analysis Unit 3 – Element 4: Software Detailed Design and Cybersecurity Unit 3 – Element 5: Hardware Design and Vulnerability Analysis Unit 4 – Element 1: Cybersecurity verification at SW level Unit 4 – Element 2: Cybersecurity verification at HW level Unit 4 – Element 3: Cybersecurity verification at SW level The course is structured in 5 days as follows. Schedule Day 1: Cybersecurity System Analysis and TARA | Time | Activity | | --- | --- | 08.00-08.30 08.00 – 09.00 09.00 – 10.00 10.15 – 12.45 12.45 – 13.30 13.30 – 16.00 Introduction to Safety Manager Strategy Level, Safety Engineer, and Safety Project Manager Qualification U3 Engineering Aspects in Cybersecurity (1 hour presentation) U3.E1/2 System Threat Analysis and Cybersecurity Goals (1 hours presentation) Exercise 1 Asset Analysis (0,5 hours example shown, 1 hours exercise, 1 hour discussion) Lunch Break Exercise 2 TARA Analysis (0,5 hours example/ slides shown, 1 hours exercise, 1 hour discussion) Page 2 of 6 Day 2: Cybersecurity System & Software Analysis | Time | Activity | | --- | --- | 08.00 – 10.30 10.45 – 12.30 12.30 – 13.30 13.30 – 16.00 Exercise 3 Deriving System Requirements from TARA (0,5 hours example /slides shown, 1 hours exercise, 1 hour discussion) U3.E3 Cybersecurity SW Design and Vulnerability Analysis (1,5 hours presentation) Lunch Break Exercise 4 Analysing SW Architecture and Threat Modelling at SW level (0,5 hours example /slides shown, 1 hours exercise, 1 hour discussion) Day 3: Cybersecurity Software Analysis | Time | Activity | | --- | --- | 08.00 – 09.00 09.15 -11.45 11.45 – 12.45 12.45 – 13.30 13.30 – 16.00 U3.E3 Cybersecurity SW Design and Vulnerability Analysis Continued (1 hours presentation) Exercise 4 Analysing SW Threat Models and Deriving Actions and Requirements at SW level (0,5 hours example /slides shown, 1 hours exercise, 1 hour discussion) U3.E3 Cybersecurity SW Design and Vulnerability Analysis & Counter Actions (1 hours pre

FAQs

What standards does the course cover?

The training introduces SAE J3061 and ISO 21434, using examples from real automotive cybersecurity projects.

How does the course teach threat and vulnerability analysis?

It uses a “Learning by Doing” approach with active case studies and exercises to perform threat and vulnerability analysis at system, software, and hardware levels.

What tools and materials are provided for TARA analysis?

Attendees receive examples and templates for threat and vulnerability analysis, plus a refined tool for TARA analysis supporting different methods, including ISO 21434 Appendix F–H, HEAVENS, and SAHARA.

Sep 24, 2026

Uploaded by Adam