UNECE R155: Cyber-Security Guideline

09/28/2022

Cars are no longer just cars - they are high-tech computers and thus vulnerable to hackers. The vehicle must be able to withstand cyber attacks to ensure the safety of everyone on the road. Therefore, car manufacturers invest billions to be able to design cars securely.

Since July 2022, regulations of the UNECE (United Nations Economic Commission for Europe) have come into force bindingly to provide more security. In 56 countries for the time being, the so-called UN Cybersecurity Regulation R155 now requires car manufacturers to have a certified cyber security management system as a prerequisite to be able to register new vehicle types. These regulations apply to all new vehicle types and, in two years, to all new vehicles, including cars, vans, trucks and buses.

However, the progress of implementation varies significantly in different countries. Yet the danger is very real, as back in 2015 hackers managed to penetrate a car's entertainment system through a security hole and partially remotely control it. As a result, 1.4 million vehicles had to be recalled to close the security hole. Despite cyber security projects implemented years ago in the automotive industry, many companies are still in the development phase due to a lack of skilled IT staff or internal processes leading to delayed implementation.

The ZD.B Cybersecurity Topic Platform is planning an online event on November 21, 2022 on the UN Cybersecurity Regulation R155 and its impact on automotive manufacturers and suppliers. Do you have questions about the topic or the event? Then feel free to contact us!

Your contact

Bianca Sum
Dr. Robert Couronné