Proposal to amend UN R155 and UN R156 to require that Certificates of Compliance for Cyber Security Management Systems and Software Update Management Systems be issued by the same approval authority that grants type approval. Germany reported a case where different authorities issued the certificate and type approval, creating assessment and enforcement issues. The proposal aims to ensure holistic cyber security evaluation and align both regulations.

UN R156 requires administrative provisions under the 1958 Agreement to demonstrate that vehicles comply with its requirements at specific points in time, not solely at market placement. The action plan involves developing a numbering system for amending approval extensions to account for software updates, considering how updates impact existing type approvals, and reviewing related 1958 Agreement aspects.