ISO/SAE 21434 RQ-09-01: [RQ-09-01] Item definition

The item definition shall identify the item boundary (distinguishing the item from its operational environment, including interfaces to other in-vehicle and external E/E systems), the item functions (its intended behaviour across the lifecycle phases, including the vehicle functions it realises) and the preliminary architecture (its components, their connections and external interfaces); constraints and applicable cybersecurity standards are considered.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Clause 9: Concept – ISO/SAE 21434

RQ-09-02 [RQ-09-02] Operational environment description
RQ-09-03 [RQ-09-03] Risk analysis of the item
RQ-09-04 [RQ-09-04] Risk treatment decision per threat scenario
RQ-09-05 [RQ-09-05] Cybersecurity goals
RQ-09-06 [RQ-09-06] Cybersecurity claims
RQ-09-07 [RQ-09-07] Verification of goals and claims
RQ-09-08 [RQ-09-08] Description of cybersecurity controls
RQ-09-09 [RQ-09-09] Cybersecurity requirements and requirements on the operational environment

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ISO/SAE 21434 controls