Adelard was invited to present at the QA&TEST International Conference on Safety and Security held in Madrid on 27-28 March 2019. The conference focused on how to approach, in an integrated way, safety and security aspects of increasingly complex safety critical systems.
Dr Robert Stroud presented a talk on Security-Informed Risk Assessment for Safety-Critical Systems. He discussed some general approaches towards security-informed risk assessment and some of the challenges for security-informed safety, before describing the approach we have developed at Adelard for performing security-informed risk assessment for safety-critical systems. He also presented the rail code of practice for security-informed safety that Adelard have developed on behalf of government and the rail industry, and a related standard, PAS 11281:2018, that deals with the impact of security on safety in the connected automotive ecosystem. The talk was illustrated with examples based on Adelard’s experience of assessing the security of railway systems and extracts from the code of practice.