UN Regulation No. 155
Cyber Security and Cyber Security Management

Series of Amendments, Supplements, and Corrigenda

Proposal for a new UN Regulation on uniform provisions concerning the approval of vehicles with regards to cyber security and cyber security management system.

Proposal to clarify the transition clauses specified in paragraph 7.3.1. and 7.3.4. with regard to the extension of type approvals first issue before 1 July 2024 and applied for such extension after that date.

Proposal to improve explanations and examples for spoofing threats.

The European Union, the recently proposed EU Cyber Resilience Act (CRA) will introduce a set of horizontal requirements aimed at strengthening cyber resilience for products across a large number of sectors. While the CRA is a significant legislative initiative, its generic nature might not fully address the specific needs of the automotive industry, in particular for L-category vehicles. UN Regulation No. 155 is already available, proven for the automotive industry, and fully compatible with the EU CRA requirements, making it a more suitable and focused solution for these vehicles.

61. The representative of France presented (GRVA-17-13) an amendment proposal to the scope of UN Regulation No. 155 on behalf of France and the United Kingdom of Great Britain and Northern Ireland, in response to a GRVA request. He explained that the scope of UN Regulation No. 155 should be the same as the scope of UN Regulation No. 156. He clarified that this addition to the scope of UN Regulation No. 155 would not lead to automatically mandating the application of this regulation for the vehicles categories added. He added that not inserting these categories in the scope would prevent the manufacturers, who want it, to apply for an approval pursuant to this regulation for their products falling in these categories. He concluded his intervention by recalling that GRVA never heard any technical arguments against the inclusion of these categories in the scope.

62. The representative of IMMA supported (GRVA-17-06) the instruction of the Category L in the scope of UN Regulation No. 155. He recalled that his organization proposed to postpone this insertion back in 2020 until review by the industry would be completed. He explained that, in the European Union context, the Cyber Resilience Act was developed to cover all kind of products, from the smartphone to the washing machine, would not necessarily cover the specific needs of powered two wheelers. He called for avoiding fragmentation and double requirements and clarified that IMMA was seeking for a clear agreement in principle already at this session.

63. The representative of CEMA presented their views (GRVA-17-30), in response to GRVA-17-13. He proposed to restrict the inclusion in the scope of UN Regulation No. 155 of the vehicles of Categories S, R and T equipped with an ADS of level 3 or more.

64. GRVA agreed to include the Category L in the scope of UN Regulation No. 155 and requested the secretariat to prepare the corresponding formal proposal for review at GRVA in January 2024, on the basis of GRVA-17-43.

65. The representatives of Spain, Italy and CEMA were not in favour to include the categories S, R and T in the scope. The representative of France, Germany, the United Kingdom of Great Britain and Northern Ireland and CLEPA supported this inclusion. The representatives of Japan and Denmark were neutral (The representative of Denmark recalled that the Ministry of Transport in his country would not express an opinion on the categories R and S). GRVA agreed to resume consideration of this item for these three vehicle categories at its next session.

Proposal to extend the scope of UN R155 to include all vehicles of Category L.