Stellantis Partners with GlobalPlatform to Strengthen Automotive Cybersecurity Standards

Stellantis, the multinational automotive giant behind brands including Alfa Romeo, Chrysler, FIAT, Jeep, Vauxhall, and Peugeot, has become the latest major manufacturer to join GlobalPlatform's collaborative cybersecurity initiative.

The partnership aims to accelerate industry-wide standardisation for software-defined vehicles (SDVs) as the automotive sector grapples with an escalating cybersecurity crisis.

The collaboration sees Bill Mazzara, Stellantis' North American Regulatory Lead and Technical Fellow for Product Cybersecurity, taking on the role of co-chair for GlobalPlatform's Automotive Task Force. This strategic appointment underscores the company's commitment to addressing the complex security challenges facing modern vehicles.

Industry-Wide Collaboration Takes Shape

Stellantis joins an expanding consortium of automotive manufacturers, cybersecurity specialists, silicon suppliers, and academic institutions working through GlobalPlatform. Recent additions to the Automotive Task Force include notable names such as AIST, Cariad (Volkswagen Group's software division), Dekra, ETAS, Linaro, Rambus, Renesas, Uni-sentry, and Woven by Toyota.

The task force has achieved a significant breakthrough by fully aligning GlobalPlatform specifications with the updated SAE J3101 Hardware Protected Security Environment automotive cybersecurity standard. This alignment creates a streamlined pathway for GlobalPlatform-compliant suppliers to demonstrate automatic compliance with J3101 requirements, providing manufacturers with greater confidence in their component security.

The development facilitates smoother integration with established automotive frameworks including AutoSAR and the Car Connectivity Consortium, potentially reducing complexity across the supply chain.

Addressing an Escalating Crisis

The urgency behind these collaborative efforts becomes clear when examining the automotive industry's cybersecurity landscape. Industry data reveals that over 500 automotive cyber vulnerabilities were identified in 2024 alone—a dramatic increase from merely six vulnerabilities recorded a decade earlier. The financial impact has been equally striking, with estimated costs from SDV cyberattacks reaching £18 billion in 2024, up from just £800 million in 2022.

"GlobalPlatform's Automotive Task Force is helping the industry converge on a platform of secure, scalable foundations for software-defined vehicles," explained Mazzara. "Our engagement focuses on harmonising security standards and fostering cross-industry collaboration to meet evolving regulatory and operational requirements whilst ultimately meeting our customers' expectations."

Building on Established Foundations

GlobalPlatform estimates that approximately 200 million Secure Elements and over 100 million Trusted Execution Environments have already been deployed across vehicles globally, establishing crucial groundwork for secure SDV development. As the industry progresses towards advanced SDV technologies—including secure boot processes, vehicle identity verification, attestation systems, and micro TEEs—continued collaboration remains essential.

Muttalip Akin, Stellantis' Senior Vice President for Electrical, Electronic & Hardware Engineering, emphasised the company's dedication to "advancing standardised, secure technologies that can scale across the automotive ecosystem."

Ana Tavares Lattibeaudiere, GlobalPlatform's Executive Director, described the recent developments as "a breakthrough in the industry's goal of creating a standardised and certified platform for secure vehicle applications." She urged additional automotive industry participants to join the initiative, highlighting the potential to reduce risk, lower costs, and eliminate fragmentation across the cybersecurity ecosystem.