## 2 Theoretical and Conceptual Framework
### Cybersecurity in the Automotive Sector  
As we have mentioned in the Introduction, the appetite for more technological and capable vehicles is the number one demand from customers [1; 2]. Having a technologically developed and connected vehicle is the way original equipment manufacturers (OEMs) are moving towards the development of vehicles that satisfy this demand [4]. With more connectivity and technology, vehicles become more vulnerable to cybersecurity attacks [32]. Thus, cybersecurity will need to be developed and maintained to cover a whole vehicle, connections and features, to provide safety and security to vehicle users, other road users and the vehicle itself. In this context, institutions are not unaware of the importance of adopting and implementing cybersecurity in vehicles. Thus, institutions such as the United Nations Economic Commission for Europe (UNECE) have created a working party (WP29) to look at autonomous/automated and connected vehicles (GRVA), and a task force on cybersecurity and software updates (CS/OTA) that has worked on the release of the ISO/SAE 21434 road vehicle cybersecurity [33; 34]. These include regulations and standards to implement and manage cybersecurity in a vehicle. In addition, while not specific to automotive systems, ISO/IEC 27001 [35] is crucial for managing information security across all industries. As connected vehicles increasingly rely on secure communication networks and data, ISO/IEC 27001 [35] provides a framework for ensuring that cybersecurity management practices align with broader information security standards (see Table 1). The awareness of vehicle cybersecurity has existed since the first introduction of connected features in vehicles. The spike in cybersecurity in the automotive industry was back in 2016 when researchers [PERSON] and [PERSON] published their research and demonstration of the 'Jeep hack' [36; 37], which attracted wide media attention and got the industry thinking about cybersecurity. Similar research studies were performed by several other researchers and research labs, such as the Keen Security Lab on the Tesla Model S hack [38]. Slowly, cybersecurity in the automotive sector is acquiring not only importance in companies but also in the entire added-value chain, from OEMs or suppliers to the final customer. In addition, importance has been given to the subject with the introduction of 'autonomous driving systems', 'assisted autonomous driving systems' or any systems supported by artificial intelligence (AI) (or machine learning (ML) or deep learning (DL)). These systems are applied in safety-critical components and features, where the vehicle driver will not be fully in control of the vehicle, and in cases where these being hacked or tampered with could result in the loss of life. These new autonomous technologies, such as autonomous emergency braking and lane assistance systems, are implemented on vehicles that are on the roads today [39; 40]. These systems use radar, cameras and LiDAR (LiDAR stands for 'light detection and ranging' and describes a sensor technology that can create a map of the environment around it [15]) technology to assess the road ahead and work out potential hazards. They generally inform a driver that action is needed to avoid an imminent collision or safety hazard, and then if no action is taken, the autonomous system will kick in to avoid harm to the vehicle and its passengers. However, not only has autonomous technology changed the automotive industry; customer demands for having centralized systems that can do all the things that other IT-based systems can perform (such as computers or smartphones) have also had an effect. This has required the application of IT technologies and the introduction of the IoT to the vehicle space, which has changed the way we interact with vehicles [2; 41].