Compliance
Audit Readiness
Gap analysis, evidence coverage and audit-trail readiness across ISO 26262 and ISO/SAE 21434.
Overall readiness
75%
75%
Functional safety
81%
81%
Cybersecurity
67%
67%
Evidence artefacts
0
0 audit-trail entries
Gap analysis
ISO 262628-11.4.5Every safety-relevant tool is classified (TI / TD → TCL)
25/25
100%
ISO 262628-11.4.4Classifications reviewed and approved
25/34
74%
MATLAB / Simulink — In Review, TargetLink — In Review, GCC ARM Embedded — Approved, GitLab Ultimate — Approved, Parasoft C/C++test — Draft, VectorCAST — Draft +3 more
ISO 262628-11.4.6Qualification performed for TCL2 / TCL3 tools
25/25
100%
ISO 262628-11.4.9Qualification evidence complete and archived
13/25
52%
TargetLink — evidence partial, Polyspace Bug Finder — evidence missing, GCC ARM Embedded — evidence partial, Polarion ALM — evidence missing, GitLab Ultimate — evidence partial, dSPACE SCALEXIO — evidence missing +6 more
ISO/SAE 214345.4.1Cybersecurity tool assessment performed
20/20
100%
ISO/SAE 214348.3 / 8.4No unresolved high or critical vulnerabilities
7/12
58%
CVE-2025-11832 (Critical) — Vector CANoe, CVE-2025-10774 (High) — Polyspace Bug Finder, CVE-2025-38447 (Critical) — Jenkins, CVE-2026-04477 (Critical) — Coverity, CVE-2025-51009 (High) — Jira Software
ISO/SAE 214349.4SBOM components reviewed and free of known vulnerabilities
6/14
43%
openssl 3.3.2 — 2 vuln(s), Open, libcurl 8.9.1 — 1 vuln(s), Approved, mbedTLS 3.6.1 — 1 vuln(s), Approved, log4cxx 1.3.0 — 3 vuln(s), Open, protobuf 27.3 — 1 vuln(s), Approved, sqlite 3.46.1 — 1 vuln(s), Approved +2 more
Audit trail (latest 15)
| When | Actor | Action | Object | Result |
|---|---|---|---|---|
| No audit entries recorded yet. | ||||