UN R155 Supplement 1 (00 series) · UNECE Regulation No. 155 (ECE R155) — Uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management system.
UN R155 — Supplement 1 to the 00 series of amendments
Base text → Supplement 1
- What changed
- Paragraphs 7.3.1. and 7.3.4. now refer to type approvals first issued before 1 July 2024 and to each extension thereof.
- Before this supplement, the changed sentences in both paragraphs said “for type approvals prior to 1 July 2024” and did not mention extensions.
- Why
- The Informal Working Group on Cyber Security and OTA issues (Software Updates) discussed a request to clarify the transition clauses in paragraphs 7.3.1. and 7.3.4.
- The amendments were proposed to clarify under which circumstances extensions are possible.
Q1What changed2 changes
Cyber security in the development phase: type approvals first issued before 1 July 2024 and each extension (para. 7.3.1.)
Paragraph 7.3.1. now refers to type approvals first issued before 1 July 2024 and to each extension thereof. Before this supplement, the changed sentence said “for type approvals prior to 1 July 2024” and did not mention extensions. The condition “if the vehicle manufacturer can demonstrate that the vehicle type could not be developed in compliance with the CSMS” does not change. The duty to demonstrate that cyber security was adequately considered during the development phase also does not change.
Another appropriate mitigation: type approvals first issued before 1 July 2024 and each extension (para. 7.3.4.)
Paragraph 7.3.4. now refers to type approvals first issued before 1 July 2024 and to each extension thereof. Before this supplement, the changed sentence said “for type approvals prior to 1 July 2024” and did not mention extensions. The duty to implement another appropriate mitigation “if a mitigation measure referred to in Annex 5, Part B or C is technically not feasible” does not change. The manufacturer must also give the approval authority the respective assessment of the technical feasibility.
Q2Why it changed
- Proposed by
- Experts from the Informal Working Group on Cyber Security and Over-The-Air issues (Software updates)
- Working party
- GRVA, 11th session (27 September – 1 October 2021)
Reasons
The Informal Working Group on Cyber Security and OTA issues (Software Updates) discussed a request to clarify the transition clauses in paragraphs 7.3.1. and 7.3.4. The request was about type approvals first issued before 1 July 2024, for which an extension is applied for after that date.
Source
“a request for clarification on the transition clauses specified in paragraph 7.3.1. and 7.3.4. with regards to the extension of type approvals”
The group proposed the amendments to the Regulation to clarify under which circumstances extensions are possible.
Source
“in order to clarify under which circumstances extensions are possible”
Document trail
- 2021-07ProposalECE/TRANS/WP.29/GRVA/2021/21Proposal by experts from the Informal Working Group on Cyber Security and Over-The-Air issues
- —Working party adoptsECE/TRANS/WP.29/GRVA/11Session report, para. 45
- 2022-02Sent to WP.29ECE/TRANS/WP.29/2022/54Text that GRVA sent to WP.29 and AC.1
- 2022-03WP.29 adoptsECE/TRANS/WP.29/1164Adopted at the 186th session (session report, para. 132)
- 2022-10-08In forceC.N.366.2022.TREATIES-XI.B.16.155UN depositary notification
Q3Who is affected
Vehicle manufacturer
- No direct action for this role.
Component supplier
- No direct action for this role.
Technical service / Approval authority
- No direct action for this role.
See every change side by side
RegVault customers compare every version of UN regulations, read the consolidated text and download the PDF.
ⓘ This report gives advice only. It is not legal or type-approval advice.