The UNECE World Forum for Harmonization of Vehicle Regulations (UNECE WP.29) has introduced additional regulations (R155 / R156) since mid-2020. These officially came into force in January this year and will provide the framework for cybersecurity in vehicles in many parts of the world.
Regulation R155 requires a certified CSMS (cybersecurity management system) for the development of vehicles and their components, while R156 requires the operation of a SUMS (software update management system) as a future condition of type approval.
Philotech has been engaged by several OEMs since early 2020 to help implement these processes. This relates to the establishment of processes, the implementation of individual work steps to create the required artifacts, and the training of OEM employees in the context of specific security topics.