Worldwide | Automotive regulatory
New UNECE cybersecurity and software update regulations
The final version of the UNECE regulations for cybersecurity and software updates has been published by UNECE’s World Forum for Harmonization of Vehicle Regulations
The regulations are the first attempt harmonized at the international level at regulating the cybersecurity risks and issues related to software updates in vehicles. It is an important step to help car manufacturers to tackle these risks by establishing clear performance and audit requirements.
The main areas covered by the two regulations are:
- Managing vehicle cyber risks;
- Securing vehicles by design to mitigate risks along the value chain;
- Detecting and responding to security incidents across vehicle fleet;
- Providing safe and secure software updates and ensuring vehicle safety is not compromised, introducing a legal basis for so-called “Over-the-Air” (O.T.A.) updates to on-board vehicle software.
The regulations will apply to passenger cars, vans, trucks and buses. They will enter into force in January 2021. In the European Union, the new regulation on cyber security will be mandatory for all new vehicle types from July 2022 and will become mandatory for all new vehicles produced from July 2024.
The UN Regulation on uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management system is available at: link
The UN Regulation on uniform provisions concerning the approval of vehicles with regards to software update and software updates management system is available at: link
For further Information on this topic please contact us!