ISO/SAE 21434 RQ-06-06: [RQ-06-06] Plan specifies the concept and development activities

The cybersecurity plan shall set out the cybersecurity activities needed in the concept phase and in product development, following clauses 9, 10, 11 and 15.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Clause 6: Project dependent cybersecurity management – ISO/SAE 21434

RQ-06-01 [RQ-06-01] Assignment of project cybersecurity responsibilities
RQ-06-02 [RQ-06-02] Cybersecurity relevance and planning analysis
RQ-06-03 [RQ-06-03] Cybersecurity plan contents
RQ-06-04 [RQ-06-04] Responsibility for the plan and progress
RQ-06-05 [RQ-06-05] Plan referenced in the project plan
RQ-06-07 [RQ-06-07] Plan updated on change or refinement
RQ-06-09 [RQ-06-09] Work products kept accurate to release
RQ-06-10 [RQ-06-10] Plans in distributed activities

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ISO/SAE 21434 controls