Both OEMs and Tier 1/2s need to control vulnerabilities and reduce the costs during development by addressing vulnerabilities as soon as possible. Tier 1s need to provide evidence of proper vulnerability management to OEMs that are required to present for regulatory compliance for type approval. Once the vehicle is on the road, the vulnerabilities need to be continuously monitored and mitigated for detected sever ones. At the end of the day, OEMs want to avoid any reputation damages and huge costs associated with a cyber incident. Gilad Bandel, veteran of automotive cybersecurity will discuss with Eden Ben Shabat, leading automotive cybersecurity analyst, how should OEMs and Tier 1/s address those challenges and which course of action is recommended for effective and efficient mitigating those challenges. Field experience, lessons learned, and interesting actual cases will be used to demonstrate the proper process, options available and risks to be avoided.