A Grand Slam Victory!

The Connectivity Campaign focuses on fostering critical components and cutting-edge developments in connectivity cyber and data security, rigorously evaluating enterprises on security management systems, technical protection capabilities, emergency response mechanisms, and practical attack-and-defense strategies. This Campaign aims to accelerate higher standards for safety and stability across the connectivity industry.

Upon receiving this task, Ford Data Security & Compliance Committee (DSCC) jointed formed by Data Security & Compliance team and the OGC team acted quickly to break down the tasks and outlined a comprehensive response. Over nine months, the DSCC team actively participated in a series of training sessions and collaborated with multiple teams such as ET, OGC, GA, and EVD to deliver high-quality results on time, earning high praise from the Shanghai Communications Administration and winning three major awards, along with an excellence individual accolade.

For the first time, the EVD team also planned and successfully implemented an emergency drill for the connectivity cloud platform. The drill precisely targeted two key risk points, "application layer attacks" and "data information leaks", simulating real-world scenarios such as an intrusion and information leakage – prompting teams to collaborate closely to enhance their emergency response skills. This not only comprehensively tested the crisis response capabilities of various teams, but also validated the scientific effectiveness, practicality, and execution of the company "Cyber and Data Security Incidents Emergency Response Plan" issued by DSCC early time in 2024.

As for vehicle and application security testing, Ford China actively cooperated with joint ventures to conduct security tests on multiple models of vehicles and OTA systems, establishing a full lifecycle security management mechanism for the FordPass and Lincoln Way Apps to ensure vehicle and application safety.

In data security management, Ford China identified and mitigated three key security risks and protection vulnerabilities during the 2024 data security risk assessment, significantly enhancing its data security protection. For cross-border transfer of data, Ford China completed internal reviews and reported to the Shanghai Communications Administration to ensure safety and compliance.

Notably, during the intensive attack-and-defense drill, Ford China, serving as the defending blue team, delivered exceptional performance in both the connectivity platform and real car tracks.

To better prepare for the drill, information security experts from Ford China’s ET teams quickly established an efficient, collaborative command system during the planning phase. They conducted a comprehensive review of enterprise and product assets, resolved over 100 vulnerabilities, and meticulously developed drill plans while also providing security awareness trainings and conducting emergency plan drills.

During the five-day, 12-hour-a-day drill, the Ford China team faced fierce attacks from red teams. Ford China organized a 95-member emergency response team to stand by 24/7, leveraging its advanced technology platforms to successfully repel multiple attacks. The team blocked over 300 attack IPs and submitted several effective defense reports, demonstrating their strong defensive capabilities and adaptability.