The Informal Working Group on Cyber Security and Software Updates will continue to consider how cyber security and software updates have a bearing on automotive safety and security, and whether any changes are necessary to the Regulations and guidance it has produced under WP.29. In particular, the IWG shall maintain official documents regarding UN R155, UN R156, and Recommendations on uniform provisions concerning cyber security and software updates; develop amendments to relevant documents; develop a proposal to amend UN Regulations under the responsibility of GRVA to record details of an RXSWIN where applicable which have been mandated by the 01 series of UN Regulation No. 156; develop proposals to amend UN Regulation No. 155 and its interpretation document to support application in national/regional frameworks for aspects such as multi-stage manufacturing; consider and develop deliverables regarding software updates after registration potentially creating a proposal for modification to the type approval numbering or a classification of update categories; support and review the application of cyber security and software update provisions across GRs notably for the Global Technical Regulation on Automated Driving Systems; and provide opportunities to participants to share knowledge, experience and ideas from implementation of national regulation/standards regarding CS/OTA as well as UN R155 and R156. The IWG will continue its activities until November 2029.

The agenda and minutes from the 51st session were adopted without comment. The group discussed a status report on Supplement 3 to UN R10.07, updated Terms of Reference, and proposals for the 08 series of amendments, with decision to move submission to 2027/2028 to integrate test modes for automated driving systems. The group reviewed proposals on steer-by-wire systems, CISPR average detector clarification, flicker requirements, and AC/DC charger specifications, concluding that most require further elaboration or revision. The 53rd meeting is scheduled for 1–2 July 2026 in Paris.

The EMC informal group proposes to hold a meeting in Tokyo during the 2nd or 4th week of November 2027, with demonstration venue also in Tokyo. Proposed demonstration content is to be determined for automated driving systems. The meeting contents are subject to change.

Proposal to clarify ADS Active Mode, clarify methods to activate ADS using test equipment or by modifying in-vehicle ADS-related ECU software, clarify test objects for ESA at component-level or system-level, and clarify test methods when ADS cannot be activated in an anechoic chamber, when testing in a non-active state, or when errors occur upon ADS activation. This preliminary proposal is intended for presentation at IWG EMC meetings in autumn 2026.

Agenda includes status of work on GTR and UNR proposals and the Guidance and Interpretation Document (GID), and proposals to resolve open items concerning:

• The baseline document integration of GTR provisions,
• Introduction to the GID,
• Terms and definitions,
• ADS operational states,
• DDT requirements,
• Other ADS requirements,
• Safety of interactions between the ADS and its user(s),
• Safety cases and their assessment,
• SMS requirements and their assessment,
• Test environment requirements and their assessment,
• In-service monitoring and reporting requirements and related annexes,
• Approvals and related annexes,

Answers to questions on separate technical unit approvals under UN R155 clarify that a base vehicle must already hold an R155 type approval before an ESA can be added at Part III; approval authorities for different parts may differ with mutual recognition applying; the end of support period for an ESA manufacturer must be communicated to the vehicle manufacturer, with implications to be discussed by the IWG; installation of ESAs must follow vehicle manufacturer instructions without necessarily requiring separate agreement; STU data sharing agreements are required; and after ESA installation, a whole vehicle cyber security risk assessment is not necessary, though Part III must consider risks where ESA and base vehicle interactions occur. A working document is planned for submission to GRVA in January 2027. The IWG will explore whether Part II components may include equipment from certificated base vehicles under UN R155 multi-stage categorization and discuss incorporating STU into original approvals.

Questions address whether minimum vehicle architecture approval should be required before Part III can be used for additional devices; whether approved ESAs can be incorporated in original vehicle approval or as an extension to Part I approval; whether different terminology should replace CSMS for Part III approvals; whether second Part III approvals are permissible for vehicles already approved to Parts I and III; and what implications arise from end-of-support by ESA manufacturers.

The agenda includes review of proposals for amendments to R155 concerning multistage vehicles, separate technical units and component approval, approval-authority requirements for CSMS CoC and vehicle type approval, and remote operation for ADS; review of cyber and software requirements in the ADS Regulation based on WP.29/2022/60 as amended by WP.29/2023/87; discussion of RXWIN application amendments; and consideration of terms of reference renewal ahead of mandate expiration in November 2026.