30. The representative of the United Kingdom of Great Britain and Northern Ireland, Co-Chair of the IWG on Cyber Security and Software Updates, presented the status report (GRVA-23-30) of the group. He introduced the amendment to the Interpretation document for the implementation of UN Regulation No. 156, prepared by the group. He also reported on the activities carried out under the workshops on the implementation of UN Regulations Nos. 155 and 156 (deliberations on the application of the cybersecurity regulation within the framework of the multistage type-approval process for incomplete vehicles, and exchange of views on software updates of vehicles in use). Finally, he presented the question raised by experts on whether Management Systems certificates of compliance should be subject to mutual recognition.

31. Several delegations expressed views against the automatic mutual recognition of management system certificates of compliance, while industry representatives noted situations where such mutual recognition among Contracting Parties could be potentially needed. GRVA recommended that that group refer to the guidance in the interpretation document for UN Regulation No. 155.

32. GRVA requested the secretariat to distribute GRVA-23-26 and GRVA-23-27 with an official symbol at the January 2026 GRVA session. GRVA also requested the secretariat to submit GRVA-23-28 and GRVA-23-29 containing the amendments prepared by the group to ECE/TRANS/WP.29/2025/142 and ECE/TRANS/WP.29/2025/147 for consideration at the November 2025 WP.29 session.

33. GRVA agreed to remove GRVA-17-30 from the agenda.

34. GRVA endorsed the status report of the IWG on CS/OTA and agreed that the next workshop would be held before the next GRVA session.