UNECE regulation UN R155 requires the operation of a certified cybersecurity management system (CSMS)

UN R156 requires that of a software update management system (SUMS) as a future condition of type approval

The EU is planning to make these requirements mandatory for the approval
ü New vehicle types by July 2022
ü Extend it to existing architectures by July 2024

EU Cyber Risk Management

Managing cyber-risks to vehicles

Securing vehicles “by design” to mitigate risks along the value chain

Detecting and responding to security incidents across vehicle fleets

Safely and securely updating the vehicle software,
including a legal  basis for over-the-air updates