Whitepapers
Cyber security
Cyber Risk Assessment for Beginners
From risk definition to a living TARA: a 7-part guide to systematic cyber risk assessment, with direct mappings to CRA, ISO/SAE 21434, and IEC 62443.
Download WhitepaperDirk Leopold
Head of Compliance Intelligence · itemis AG
Responsible for
Dirk Leopold bridges complex engineering requirements and cybersecurity standards in the automotive and IoT domains. As a driving force behind itemis SECURE, he has deep expertise in Threat Analysis and Risk Assessment (TARA) and “Security by Design” methodologies. As a speaker, he focuses on how standards like ISO/SAE 21434 and the Cyber Resilience Act (CRA) impact the future of connected products. He is co-founder and president of CRAIG, an online community supporting the introduction of the CRA across Europe.
Aktuelles
Format
Blog
Cyber resilience act
Living TARA: Why the Cyber Resilience Act Changes Your Engineering Process, Not Your Documentation
The CRA doesn't ask for a one-time risk analysis — it demands a permanently demonstrable security engineering process. How a Living TARA and the Security Digital Thread keep your risk picture continuously current and audit-ready.
Read Article
Dirk Leopold
6 min read
Blog
Cyber resilience act
CRA Reporting Obligations: Anatomy of a Notification, from Hour 0 to the Final Report
CRA Article 14 reporting obligations take effect on 11 September 2026. This article walks through the complete notification process chronologically — from the initial assessment to the final report — and identifies the points where reporting processes break down in practice.
Read Article
Dirk Leopold
12 min read
Blog
Cyber resilience act
The 7-Step Guide to the EU Cyber Resilience Act (CRA)
Will your product still be legally sellable in Europe after December 2027? This guide shows manufacturers how to approach CRA compliance in 7 structured steps and secure EU market access.
Read Article
Dirk Leopold
5 min read
Webinar
Cyber security
itemis SECURE Goes Cloud
itemis SECURE is now available on the web — collaborate on cybersecurity projects simultaneously from any device, just like Google Docs.
Watch Webinar
Webinar
Cyber security
Towards an Integrated Product Security Management for Software-Defined Vehicles
With software-defined vehicles, the start of production is no longer the end of development — a holistic approach to security is now essential.
Watch Webinar
Dirk Leopold
Webinar
Cyber security
ISO/SAE 21434: What Motorcycle and ATV Companies Need to Know
UN Regulation No. 155 hits motorcycles on July 1st 2029 — discover how to prepare your organization for the homologation challenge and emerging cyber threats.
Watch Webinar
Dirk Leopold
Webinar
Cyber security
Beyond 2024: Pioneering Risk Management in Vehicle Cybersecurity
Understand the present challenges in risk management for OEMs and suppliers and learn how best-of-breed toolchains and knowledge graphs deliver real value.
Watch Webinar
Dirk Leopold
Webinar
Cyber security
SECURE & INCYDE - Charging Up Cybersecurity
How threat analyses (TARAs) and secure data exchange protect the EV ecosystem — from charging infrastructure to the vehicle itself.
Watch Webinar
Dirk Leopold
Webinar
Cyber security
Summer 2024 Is Coming: Efficiently Managing the Coming TARA Wave
Learn how to efficiently manage the TARA process, keep your TARAs up-to-date, and apply the 20-50-90 Rule to significantly reduce cybersecurity spend.
Watch Webinar
Dirk Leopold
Blog
Model driven software development
An Introduction to Modeling and Language Engineering – Part 2
Part 2 explores domain-specific languages, language workbenches such as Xtext and MPS, and the role of the language engineer in modern software development.
Read Article
Dirk Leopold
9 min read
Blog
Model driven software development
An Introduction to Modeling and Language Engineering – Part 1
What are models, abstractions, and meta models? Using LEGO® as an analogy, this article introduces the foundations of modeling and language engineering.
Read Article
Dirk Leopold
6 min read
Webinar
Cyber security
Cybersecurity and Risk Management: Best Practices for CFOs and Auditors
For CFOs and auditors, a new family of threats and controls is emerging: cybersecurity controls and audit reports for their companies' connected products.
Watch Webinar
Dirk Leopold
Webinar
Requirements traceability
Lifecycle Management Challenges under ISO/SAE 21434
ISO/SAE 21434 and UN Regulation 155 require cybersecurity across the full vehicle lifespan — from development through maintenance to decommissioning. Learn the most important lifecycle aspects and best practices.
Watch Webinar
Webinar
Cyber security
TARA Deep Dive: Lifecycle Management Challenges from UN R155 and ISO/SAE 21434
UN Regulation 155 and ISO/SAE 21434 require the entire automotive industry to ensure security over the entire lifespan of the vehicle.
Watch Webinar
Webinar
Cyber security
ISO/SAE 21434 and UN R155: Lifecycle Management Challenges
UN Regulation 155 and ISO/SAE 21434 require the entire automotive industry to ensure security over the entire vehicle lifespan — from development through maintenance to decommissioning.
Watch Webinar
Dirk Leopold
Blog
Cyber security
Security by Design in the Automotive Development Process
In the automotive domain, security is becoming more and more important – especially for the new generations of connected, (semi-)autonomous vehicles. Learn how to develop a secure system design and which additional security challenges may arise.
Read Article
Dirk Leopold
9 min read
Blog
Cyber security
Why security is one of the biggest engineering challenges ahead
In times of Spectre and Meltdown it's totally clear that security is a big engineering challenge. Learn more about safety and security in this post.
Read Article
Dirk Leopold
8 min read
Blog
Cyber security
Secure is Secure?! Automotive Security in the Age of Connected Vehicles
The increased share of software solutions places high demands on Automotive Security. But what changes are coming for the industry and manufacturers?
Read Article
Dirk Leopold
5 min read