Proposal to align the UN R155 Interpretation Document with the proposal to extend the scope of UN R155 to Category L vehicles.

Proposal to extend the scope of UN R155 to include all vehicles of Category L.

Proposal to expand the scope of the Regulation to include all Category L and O vehicles if fitted with an electronic control unit.

Proposal in response to GRVA-17-13 with regard to T, R, S category machinery.

Inclusion of vehicles of Categories L, R, S and T into the scope if fitted with at least one electronic control unit.

The European Union, the recently proposed EU Cyber Resilience Act (CRA) will introduce a set of horizontal requirements aimed at strengthening cyber resilience for products across a large number of sectors. While the CRA is a significant legislative initiative, its generic nature might not fully address the specific needs of the automotive industry, in particular for L-category vehicles. UN Regulation No. 155 is already available, proven for the automotive industry, and fully compatible with the EU CRA requirements, making it a more suitable and focused solution for these vehicles.

Proposal to introduce an explanation clarifying the possibility for Approval Authorities to recognise Certificates of Compliance for Cyber Security Management Systems (CSMS) issued by the Approval Authority of another Contracting Party.

Proposal to improve explanations and examples for spoofing threats.

Proposal from the GRVA secretariat to amend the original proposal based on the input of a workshop on the implementation of UN R155 held during 12-13 Jan. 2023.

Proposal to improve the applicability of examples given in Tables A1 and B1 in Annex 5 in UN R155 regarding risks due to spoofing of messages or data received by the vehicle.

Proposal from the informal working group on Cyber Security and OTA issues (CS/OTA) to update the text:

1. Use of “802.11p” to refer to V2X communications is out of date: 802.11p is properly referred to as 802.11-OCB and other direct communication methods are in use. “V2X” is the preferred term.
2. Platooning is a niche V2X operation and not widely used: The proposal suggests to use more mainstream examples such as cooperative awareness or manoeuvre coordination.

Proposal from the informal group on on Cyber Security and OTA issues for amendments:

1. To reflect updates and the most current version of relevant standards, notably ISO/SAE 21434:2021 and ISO/PAS 5112, and
2. To update the text in line with Supplement 1 to UN R155 (WP.29/2022/54).