The UNECE regulation R155 requires the vehicle manufacturer to identify and manage cybersecurity risks in the supply chain. Automotive SPICE® is a process model which, when used with an appropriate assessment method, helps to identify process-related product risks. In order to incorporate cybersecurity-related processes into the proven scope of Automotive SPICE®, additional processes have been defined in a Process Reference and Assessment Model for Cybersecurity Engineering (Cybersecurity PAM).