A method at a network element (414, 514), the method comprising: sending to at least one of an updates server and an anomaly server a status request; receiving, in response to the status request, at least one message at the network element (414, 514), the at least one message being one or both of: an update status information message (434, 522) from the updates server (417, 517); and an anomaly detection status information message (442, 532) from the anomaly detection server (418, 518); determining, based on the receiving the at least one message, a dynamic cybersecurity posture indication for an intelligent transportation system entity (410, 510); wherein the dynamic cybersecurity posture indication changes over time based on the receiving the at least one message, the dynamic cybersecurity posture indication being representative of a measure or a level of security of the intelligent transportation system entity; and digitally signing the dynamic cybersecurity posture indication by a certificate authority for the intelligent transportation system entity; and providing (450, 542) the signed dynamic cybersecurity posture indication for the intelligent transportation system entity (410, 510) to an Enrolment Authority (412, 512), and wherein the signed dynamic cybersecurity posture indication is included in a certificate relating to the intelligent transportation system entity; the method further comprising: receiving an information message at the network element, the information message being from one of the updates server and the anomaly detection server indicating that an event has occurred for the intelligent transportation system entity, wherein the event lowers the dynamic cybersecurity posture indication; and based on the receiving the information message, sending a Certificate revocation list addition request to the certificate authority for the intelligent transportation system entity. an update status information message (434, 522) from the updates server (417, 517); and an anomaly detection status information message (442, 532) from the anomaly detection server (418, 518); determining, based on the receiving the at least one message, a dynamic cybersecurity posture indication for an intelligent transportation system entity (410, 510); wherein the dynamic cybersecurity posture indication changes over time based on the receiving the at least one message, the dynamic cybersecurity posture indication being representative of a measure or a level of security of the intelligent transportation system entity; and digitally signing the dynamic cybersecurity posture indication by a certificate authority for the intelligent transportation system entity; and providing (450, 542) the signed dynamic cybersecurity posture indication for the intelligent transportation system entity (410, 510) to an Enrolment Authority (412, 512), and wherein the signed dynamic cybersecurity posture indication is included in a certificate relating to the intelligent transportation system entity; the method further comprising: receiving an information message at the network element, the information message being from one of the updates server and the anomaly detection server indicating that an event has occurred for the intelligent transportation system entity, wherein the event lowers the dynamic cybersecurity posture indication; and based on the receiving the information message, sending a Certificate revocation list addition request to the certificate authority for the intelligent transportation system entity. receiving an information message at the network element, the information message being from one of the updates server and the anomaly detection server indicating that an event has occurred for the intelligent transportation system entity, wherein the event lowers the dynamic cybersecurity posture indication; and based on the receiving the information message, sending a Certificate revocation list addition request to the certificate authority for the intelligent transportation system entity.