TYPE APPROVAL – UNECE REGULATIONS - R155 & R156

R155 & R156 - Step 1

 Cybersecurity Mng. System - R155

 SW Update Mng. System – R156

Processes Development

Cybersecurity Management System (CSMS) to cover all the R 155/156 requirements with reference to ISO/SAE 21434 requirements

Extension of the existing supporting Processes (Config. Mng., Change Mng., Competence Mng.) to cover the ISO/SAE 21434 requirements

Processes for the Manufacturer’s Software Update Management System (SUMS) according to R156 and new ISO 24089:2023 for "Software update engineering"

Pre-Audit to achieve the " Certificate of Compliance" necessary for vehicle type‐approval application

R155 & R156 - Step 2

Vehicle Type Assessment

Cybersecurity Measures Assessment - R155

SW Update Testing - R156 Step 2

Preparation to Vehicle Type Assess. 
Assessment: Cybersecurity Measures Assessment

R155 Step 2 & SW Update Testing
  R156 Step 2

Consultancy

R155 & R156 - Step 1 & Step 2

All phases of the Product Develop:

• TARA, CyS Concept, relationship with FuSa, etc. with reference to CSMS/SUMS
• Field monitoring, CyS events evaluation, Vulnerability analysis and management

Product Development:

• Strategies/criteria/algorithms to protect from vulnerabilities vs. Annex 5 - R 155
• Field monitoring and CyS protection improvement

Audit and Assessment

Cybersecurity Auditing: Organizational level, Project level, Cybersecurity Assessment

Audit according to ISO/PAS 5112 "Guideline for Auditing Cybersecurity Engineering" and VDA Guide "Automotive Cybersecurity Management System Audit" (ACSMS)