Connected and software-defined vehicles are reshaping the automotive industry, enabling new digital services, business models, and customer experience. At the same time, this transformation is fundamentally changing the cyber risk for the automotive industry.

Modern vehicles increasingly depend on cloud platforms, software suppliers, connectivity providers, and other external digital services, creating a highly interconnected mobility ecosystem where cyber incidents can originate far beyond the vehicle itself.

Unlike traditional automotive risks, disruptions to external digital services can affect vehicle availability, operations, and customer experience without directly compromising the vehicle. As a result, OEMs, suppliers, mobility providers, and insurers are facing new operational, liability, and financial challenges that extend beyond conventional cybersecurity.

Vehicle connectivity continues to expand rapidly and is expected to become a standard feature of new vehicles. Industry forecasts suggest that by 2030, around 95% of new vehicles sold globally will feature embedded connectivity, while the global installed base of connected vehicles is projected to exceed 840 million vehicles, representing approximately 43% of the global vehicle fleet. As connectivity becomes ubiquitous, cyber resilience is becoming a critical business enabler for the future of mobility.

From cybersecurity to business resilience

As connected vehicles evolve into software-defined platforms, cyber risk increasingly extends beyond the vehicle itself into a complex ecosystem of cloud services, software suppliers, digital platforms, and third-party partners. While regulations and cybersecurity standards continue to strengthen security requirements, technical compliance alone cannot eliminate cyber risk.

Building confidence in connected mobility requires a broader perspective—one that combines cybersecurity, operational resilience, and financial risk management to address the residual risks that remain in increasingly interconnected ecosystems.

A joint Munich Re and TÜV SÜD whitepaper

To help OEMs, suppliers, mobility providers, and insurers better understand and manage this evolving risk landscape, Munich Re and TÜV SÜD have jointly developed the whitepaper:

The publication brings together technical, regulatory, and insurance perspectives to demonstrate why cyber risk increasingly arises across the connected mobility ecosystem rather than within the vehicle itself. It introduces a holistic approach that integrates cybersecurity, operational resilience, and financial risk management to support better risk assessment and insurability.

What you'll find inside

• Connected vehicles transform cyber risk from a vehicle-level issue into an ecosystem-wide business risk.
• Increasing reliance on cloud platforms, software suppliers, and connected services creates new systemic dependencies and external vulnerabilities.
• Compliance with evolving cybersecurity regulations is essential but cannot eliminate residual cyber risk.
• Cyber incidents can disrupt vehicle availability, operations, and customer services without compromising the vehicle itself.
• Effective cyber resilience requires a combination of technical cybersecurity, organizational resilience, and financial risk transfer.
• Munich Re and TÜV SÜD are developing a framework that links cybersecurity maturity with structured risk assessment and insurability.

Combining technical expertise with financial resilience

Munich Re and TÜV SÜD bring together complementary expertise in automotive cybersecurity, technical assessment, certification, and financial risk management to help organizations better understand, quantify, and manage cyber risk across connected vehicle ecosystems.

Together, the collaboration aims to create greater transparency around cyber exposure, strengthen organizational resilience, and support the development of sustainable insurance solutions for connected mobility.

Supporting the future of connected mobility

As connected mobility continues to evolve, organizations need new approaches to understanding and managing cyber risk that extend beyond technical compliance. Greater transparency into cyber exposure, combined with effective resilience strategies and appropriate risk transfer mechanisms, will be essential to support innovation and build trust across the mobility ecosystem.

Through this joint whitepaper, Munich Re and TÜV SÜD aim to advance the dialogue on how cyber risk can be better understood, assessed, and financed in an increasingly connected world.

We welcome discussions with OEMs, suppliers, technology providers, mobility companies, and insurers to help shape the next generation of resilient connected mobility.