UN Regulation No. 155 on cyber security and cyber security management systems, and Regulation No. 156 on software updates and software update management systems, enter into force today under the UNECE 1958 Agreement.
Key points
- Vehicle manufacturers need a certified Cyber Security Management System (CSMS) covering the whole vehicle lifecycle.
- A Software Update Management System (SUMS) is required, including for over-the-air updates.
- Compliance becomes a condition of vehicle type approval in adopting countries.
- Manufacturers must manage cyber risks in their supply chain.
- ISO/SAE 21434 supports the engineering processes needed to meet the regulations.
The regulations apply in the EU, UK, Japan, Korea and other UNECE contracting parties. UK automotive suppliers should expect manufacturers to flow down security engineering, vulnerability management and evidence requirements.
Source: UN Regulation No. 155 (UNECE)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
