Working paper draft from the task force chairman.

Discussion of structure for regulating vehicle-level software safety through a resolution on known threats and mitigations and compliance and testing provisions under one or more regulations.

Input for the annex on the “List of threats and corresponding principles and mitigations”.

Draft recommendations paper incorporating edits agreed upon through Day 3 of the 10th session of the TFCS informal group.

Draft recommendations paper integrating edits agreed upon through Day 3 of the 10th TFCS informal group session.

Summary of the discussions held on the draft papers concerning recommendations on cybersecurity and software updates. The cybersecurity discussion was held on 8 December while the software update discussions were held on 7 December and 16 December. (This version supersedes the earlier minutes posted in December 2017.)

Copy of UN R133.00.

Draft of an Annex 5 to the Cybersecurity Recommendations Paper as revised during the TFCS ad hoc session presenting a proposal for a type approval regulation, based upon the format of UN Regulation No. 133 on vehicle recyclability. A clean version of this proposal is also available.

Clean version of the draft paper prepared by the group secretary for review by the task force.

Definitions as developed during the TFCS “Definitions” ad hoc session.

Paper as updated during the ad hoc “Cyber Security Annexes on Risks and Mitigations” web conference of 26 Mar 2018.

TFCS working draft for a proposal to establish a methodology for the type approval of software update procedures and processes. (This document has been reissued and was originally posted as TFCS-12-03.)

Proposals from the TFCS chair.

Working draft paper pursuant to the 4 April 2018 ad hoc “Cyber Security Paper” session.

Draft annex 2 (mitigations and security controls) prepared by the TFCS secretary pursuant to the ad hoc telephone conference session on “Cyber Security Annexes on Risks and Mitigations”.

Updated annex 1 on risks and vulnerabilities pursuant to the WebEx session.

Background in support of a proposal to develop requirements for software verification and validation at an overarching level above the system type approvals. The “software” in software update to be assessed against the verification and validation requirements.

OICA and CLEPA joint comments on the proposal in document TFCS-12-08.

Updated list of terms and definitions pursuant to the 2nd ad hoc TFCS session of definitions (TFCS-ahDef).

Proposal for wording regarding vehicle manufacturer responsibility for supplier cybersecurity: “The vehicle manufacturer shall demonstrate that he has processes in place with his suppliers to ensure cybersecurity.”

Updated Day 2 document with revised paragraph 2.1.2 of annex 1 of Annex A.

Summary slides on the results and decisions of the 12th Cyber Security and OTA Software Updates Task Force session.

Cleaned and consolidated version of the draft Annex A to the Software Updates recommendations paper.

Prepared by the task force chair and secretary based upon the German document TFCS-ahRSUP2-02 reformatted and including suggestions by task force chair.

Working draft document based on document TFCS-12-19.

Annex C List of Security Controls related to cybersecurity threat mitigations

Comments on document TFCS-ahRSUP2-03.

Draft paper pursuant to the webex ad hoc review session prepared by the chair and not yet reviewed by the stakeholders.

Comments on the consolidated draft text after ahRCSP2 session.

Comparison of current text of the Software Update Processes recommendations paper (UN Regulation annex) and proposed changes.

Draft text from the Cybersecurity task force effort.

Cybersecurity and OTA updates task force summary review of the draft proposal for a UN Regulation on cybersecurity requirements (Annex A of the "recommendations paper) comparing the previous document TFCS-ahRCSP3-04 with the proposal as restructured by this cybersecurity ad hoc review group.

Version of the recommendations paper draft text as edited during the third ad hoc recommendations paper review session (held on 16 July 2018).

(Duplicate of document TFCS-12-20.)

Japan proposes the modification of the relevant parts (especially chapter 6.,7. and 9.) in the regulation annexes of the draft UN Regulations on cybersecurity and software updates to describe that both AA and TS can carry out the testing.

Draft regulation contained in Annex A of the draft Recommendations Paper on cybersecurity, including comments from OICA-CLEPA and Japan.

Comparison of draft UN Regulation and example GTR proposal

Draft text following the second day discussions of the 13th TFCS session.

Copy of doucment TFCS-13-21.