SHEET 09REUSABILITY · ISO/SAE 21434 §6

Solve it once.
Reuse it across every program.

Catalogs, frozen baselines and security blueprints turn last program's work into this program's head start. Approve a control once, then reuse it — with its evidence attached — across every vehicle line that inherits it.

See reuse in action CATALOGS · BASELINES · BLUEPRINTS
Reuse ledger
CATALOG controls 214 · threats 96
BLUEPRINT Gateway-Secure v3 · 6 programs
└ model + TARA + controls + claims
BASELINE B-14 (frozen) → inherited by EV-Gen4
DELTA 12 lines re-flagged for re-verify
REUSE RATE 73% of controls inherited
STATION 1 · CATALOGS

Catalogs,
not copy-paste.

Curated libraries of assets, threats, damage scenarios, requirements and controls — governed once, referenced everywhere. A catalog entry is a single source of truth, not a snippet pasted into ten projects that quietly drift apart.

HOLDS → assets · threats · controls · reqs
GOVERNED → once · referenced everywhere
UPDATE → propagates to references
frozen snapshot per release ← BASELINE
diff any two baselines ← COMPARE
program release = program-only ← SCOPED
STATION 2 · BASELINES

Baselines you
can freeze.

A baseline freezes the state of a program at a release — model, TARA, risk treatment and evidence together. Later programs inherit the latest baseline, and any two baselines diff cleanly so a change is a reviewable delta, not a rewrite.

ThreatZ Security Blueprints library — reusable security-analysis templates published from projects, with modules, variants and status.

INHERIT A BLUEPRINT → ITS EVIDENCE COMES WITH IT.

STATION 3 · BLUEPRINTS

Blueprints carry
their evidence.

A security blueprint packages a proven architecture with its TARA, controls and verified claims. Reuse it on the next program and the evidence comes with it — the Tier-1 answer to "prove this component again" is already written.

PACKS → model · TARA · controls · claims
REUSE → across OEM programs
SHARE → upstream to the OEM
new program inherits latest baseline ← INHERIT
changed interfaces re-flag lines ← RE-VERIFY
auto-remap to newest baseline ← REMAP
STATION 4 · INHERIT

Inherit,
then re-verify.

Reuse is not blind copying. A new program inherits the latest baseline, then only what actually changed re-flags for review — so you carry forward everything that still holds and re-verify only the delta. Governed by policy, on the Governance sheet.

TITLEREUSABILITY — CATALOGS, BASELINES & BLUEPRINTS
STANDARDISO/SAE 21434 §6
FORMATSBLUEPRINT · BASELINE
REVR-1.0