This document proposes guidance on reporting cyber security issues affecting autonomous driving systems safety. The proposal modifies the description of reportable cyber security incidents to replace “Safety-relevant ECU compromised” with “Any cybersecurity threat identified to safety relevant ECU, or” and deletes “ADS control channel manipulated.” The text also clarifies that reporting must align with UN R155 where this Regulation is applied, replacing the reference to “CSMS procedure where R155 is applied.”