Automotive SPICE
Automotive SPICE (Software Process Improvement and Capability dEtermination) is a process improvement framework for software development in the automotive industry. It provides a systematic approach for evaluating and improving software development processes, ensuring high quality, reliable and safe software systems for automotive applications. Automotive SPICE is based on ISO/IEC 15504 international standards and is widely adopted by automotive manufacturers and suppliers.
State of the Art
ASPICE CAPABILITY LEVELS
Automotive SPICE defines six capability levels that represent the maturity of an organization's software development processes. These six levels are as follows:
Each of these six capability levels represents a higher degree of maturity in an organization's software development processes, with Level 0 being the least mature and Level 5 being the most mature. An organization can use the ASPICE reference model to evaluate its software development processes and identify areas for improvement to achieve a higher capability level.
RATING SCALE OF PROCESS ATTRIBUTES
Automotive SPICE defines a set of process attributes that organizations can use to assess the quality and maturity of their software development processes.
Each process attribute is assessed on a four-point rating scale, which is as follows:​
​
-
Not achieved: The organization's processes do not meet the requirements of the capability level.
-
Partially achieved: Some aspects of the organization's processes meet the requirements of the capability level
-
Largely achieved: Processes meet the majority of the requirements of the capability level, but some areas require improvement.
-
Fully Achieved: Processes meet all the requirements of the capability level, with only minor areas of improvement.
-
Optimizing: organization is continuously improving it's processes to achieve even higher levels of performance
To determine the rating for each process attribute, evidence is collected against the practice indicators. These indicators describe the specific practices and activities that are necessary to fulfill the process attribute. The evidence collected is then used to assess the level of fulfillment of the process attribute and assign a rating on the four-point scale.
ASPICE for Cybersecurity
ASPICE for Cybersecurity is an assessment model to identify and manage cybersecurity risks of the processes in the vehicle manufacturing industry. It defines supplementary processes for incorporating cybersecurity into Automotive SPICE's established scope.
The corresponding engineering processes which directly contribute to the product are described in the chrt below.
Apart from this, cyberesecurity requirements should be considered during supplier selection (ACQ.2) and risk management (MAN.7).
-
Comprehensive and transparent roadmap towards Automotive SPICE® certification.
-
​Employee Training.​
-
Audit of the current Automotive SPICE® implementation and definition of corrective measures.
Automotive SPICE®
Consulting
-
Automotive SPICE for cybersecurity introduction.
-
Automotive SPICE for Cybersecurity training.
-
Audit of the current status of implementation and definition of corrective actions.
Automotive SPICE for Cybersecurity
-
Reduction of development cost by
implementing synergies in ASPICE and ISO 26262 development, including re-use of artifacts.
-
Parallel implementation of ISO 26262 and Automotive SPICE.