Automotive

Dealer-installed security hardware can cross the vehicle trust boundary without being governed like an OEM security component.

Detection matters only when the organisation can translate it into an owned product decision.

Supplier evidence becomes part of production resilience during a live decision.

When regulatory evidence depends on sensors, ECUs, onboard monitoring and off-board data, integrity has to survive the complete chain.

The Kia research showed how a public identifier and an over-privileged dealer workflow could become an internet-to-vehicle control path.

The risk is not one compromised charger. It is coordinated control across an ecosystem that can aggregate into material grid behaviour.