ISO 24089:2023/Amd 1:2024

Overview

ISO 24089:2023/Amd 1:2024 is the latest amendment to the international standard ISO 24089:2023, which focuses on software update engineering for road vehicles. Published by the International Organization for Standardization (ISO), this amendment introduces updates reflecting current best practices in maintaining and securely distributing software updates within the automotive industry. The standard is developed and maintained by ISO Technical Committee ISO/TC 22, Subcommittee SC 32, specializing in electrical and electronic components and general system aspects for road vehicles.

The amendment aims to enhance clarity and precision in software update processes, emphasizing the integrity and security of software and metadata during distribution. This is critical for automotive manufacturers, suppliers, and service providers to ensure interoperability, system robustness, and compliance with evolving regulatory and technological requirements.

Key Topics

• Definition of Tools for Software Updates
  The amendment integrates a new definition for "tool" (Clause 3.1.27), designating devices that enable software update operations. Examples include laptops or vehicle diagnostic devices used in workshops, highlighting the practical means by which software updates are deployed to vehicles.

• Integrity Preservation in Software Distribution
  Enhanced requirements specify that organizations must establish, implement, and maintain robust processes to preserve the integrity of software along with metadata and software update packages during distribution (Clause 5.3.4.1).
  The amendment updates the language to clearly separate the need to protect software and metadata, or update packages, enhancing understanding and improving implementation practices.

• Process Implementation and Maintenance
  Emphasis is placed on the organization's responsibility to maintain consistent and secure update processes, ensuring that software changes do not introduce vulnerabilities or compatibility issues in vehicle systems.

Applications

ISO 24089:2023/Amd 1:2024 serves as a vital reference for professionals involved in automotive software lifecycle management, including:

• Automotive Manufacturers and OEMs
  To develop robust software update infrastructures that support ongoing vehicle maintenance, feature enhancements, and security patches.

• Vehicle Diagnostics and Workshop Tools
  Guiding the design and certification of diagnostic and update tools to comply with defined interoperability and security standards.

• Supplier Quality and Compliance Teams
  Ensuring third-party vendors follow standardized procedures for software delivery and update package management.

• Cybersecurity and Software Engineering Teams
  Implementing secure update mechanisms that maintain the integrity of vehicle software against corruption or unauthorized modifications during distribution.

• Regulatory Bodies and Certification Authorities
  Using the standard as a benchmark to assess compliance with international best practices in automotive software update engineering.

Related Standards

ISO 24089:2023/Amd 1:2024 complements and interacts with several international standards relevant to the automotive and software industries:

• ISO/IEC 27001 – Information security management systems, essential for securing software update processes.

• ISO 26262 – Functional safety of road vehicles, providing frameworks to ensure safety during software modifications and updates.

• ISO/IEC Directives, Part 1 & 2 – Guiding the editorial and development procedures for ISO standards, ensuring consistency and quality.

• ISO 14229 – Diagnostic communication protocols for vehicles, relevant to tools and systems performing software updates.

By aligning with these standards, ISO 24089:2023/Amd 1:2024 helps organizations in the automotive sector manage software update engineering with a focus on integrity, security, and interoperability.

Keywords: ISO 24089 amendment, automotive software update engineering, road vehicle software integrity, software distribution processes, software update tools, vehicle diagnostics, ISO/TC 22, automotive software security, software update standards, vehicle software lifecycle management.