I work in the broad "automotive" sector. After ISO-9000 and 14000 and SOX and all the emissions regulations and the emissions documentation regulations and all

I work in the broad "automotive" sector. After ISO-9000 and 14000 and SOX and all the emissions regulations and the emissions documentation regulations and all the other make-work-for-auditing-firms regulations and certifications, the latest craze sweeping the industry is "functional safety." It sounds all well and good, but the requirements to satisfy the certifications are yet another enormous amount of work on top of all the rest, and I fear that companies are yet again getting caught up in the stuff that can be easily audited, and will be "straining at gnats and swallowing camels" when it comes to actual device security. To wit: all the stories about how KIA's are trivial to break into and drive away come to mind.