A comprehensive cyber security risk assessment without gaps between Parts I, II, and III is required for component or separate technical unit approval. Risk assessment is difficult for manufacturers alone; contracts are required to share vulnerability information. Identification of realistic installation use cases, information sharing between approval authorities, and clarification of responsibilities are necessary. Components with no communication to the vehicle or only mechanical and power connection do not require new approval. Components sending data to the vehicle or controlling it require Part II approval and joint risk analysis by the original equipment manufacturer and installer.

The document clarifies two interpretation points regarding UN R156-01. First, software updates to registered vehicles require that an RXSWIN be assigned to every Regulation No. X type approval assessed during the update process, unless the manufacturer does not plan software updates for that particular system Regulation. Second, regarding para. 7.2.1.2.2., it is proposed to delete the requirement that software version changes be declared each time they are updated, since software versions are declared for each regulation subject to software updates following amendments to RE.3 Annex 7.

Research plan for ACPE vehicle performance. Tests using actual vehicles will evaluate ACPE performance of vehicles on the Japanese market. Tests specified in UN R175 01 series will be conducted, along with tests under extended conditions with partially expanded test parameters. Test procedure for creeping vehicle specified in UN R175 01 series, paragraph 6.6.2, will be conducted. Activation limits of ACPE will be confirmed using distance to target and pedal application speed as test parameters. Tests will use one 2026 model year Suzuki Swift and one 2026 model year Daihatsu Move. Vehicle procurement by end of September, testing late October to November, data analysis by end of December, summary of research results early January.