We help people and organizations to make the right decisions in complex software projects – before uncertainty turns into risk or even problems:
- Foresight instead of rework
- Engineering instead of theory
- People instead of checklists or standards
Systems and Software Quality
With over 20 years of experience in automotive systems and software engineering, quality management and engineering we aim to support our clients in achieving their quality targets.
Good quality management starts with people and not with theory or checklists.
Our experience and qualifications:
- Principal Automotive SPICE assessor
- ECQA certified Automotive Quality Manager
Functional Safety
Software and functional safety are a special topic as much of the safety engineering is still performed on system level and not specifically for software.
However, software is becoming more complex and we think there is a growing need for safety engineering specifically on the software level.
With over 15 years of experience in the application and auditing of standards such as ISO 26262 or IEC 61508 we can support you in engineering practical solutions and not simply the application of the standards.
Our experience and qualitications:
- Development and application of processes, methods and tools for systems ranging from ASIL-A to ASIL-D
(Operating systems, hypervisors, basic and application software) - ECQA certified Functional Safety Manager
Cybersecurity
Protecting the system from humans is a growing in importance.
Cybersecurity is a cross-cutting topic ranging from the organization, the supply chain, the individual project to practical security engineering, verification and validation.
Automotive organizations need to apply a cyber security management system (CSMS), often founded in the UNECE No 155 standard with audits performed using the ISO/PAS 5112 standard.
Projects need to perform cybersecurity engineering with norms such as ISO/SAE 21434 in the automotive domain or IEC 62443 in other domains.
Products that are intended for the European market need to comply with the Cyber Resilience Act (CRA) and may need to comply with the Network and Information Security (NIS-2) or the Radio Equipment Directive (RED).
Our experiences and qualifications:
- Successful introduction of cybersecurity management systems in multiple organizations.
- Development of processes, methods and tools for cybersecurity management and engineering. From cryptographic algorithms, operating systems to complete control units.
- Automotive SPICE security extension.
- EuroSPI certified Automotive Cybersecurity Manager.
Software Compliance
Software compliance is growing in importance as more software is used in projects and the supply chains are getting wider and deeper.
This affects organizations, people management, individual projects for the engineering phase as well as during operations.
Effective handling of Software Bill of Materials (SBoM), software license handling and organizational setup can be supported by standards such as the ISO/IEC 5230 from the OpenChain project. For open-source security the ISO/IEC 18974 is often used as basis.
Our experiences and qualifications:
- Successful introduction of OpenChain in organizations
- Connecting cybersecurity incident handling with open-source supply chains
- Monitoring large projects for license issues of cybersecurity incidents
