Netherlands proposal for incorporating the UN Regulation on software systems (under development within the Cybersecurity/OTA task force) into UN Regulation No. 79 on steering. UN R79 is being updated to address the approval of automated steering functions. This document is a version of the regulation with a new paragraph 5.1.11.: “The performance of the steering system shall not be adversely affected by the software present in the system. This shall be demonstrated by compliance with the technical requirements and transitional provisions of Regulation No. X[Software Regulations], series of amendments or any later series of amendments.”

Discussion of the possibilities for regulating critical vehicle software systems.

Background in support of a proposal to develop requirements for software verification and validation at an overarching level above the system type approvals. The “software” in software update to be assessed against the verification and validation requirements.

Netherlands input towards defining framework and work of the AV informal group.

Proposal to amend UN R155 and UN R156 regarding approval authority requirements:

• Add a refusal ground to para. 5.1.3. of UN R155 where the Certificate of Compliance for the Cyber Security Management System has not been issued by the same approval authority granting type approval
• Insert new para. 5.4. into UN R156 to provide that approval authorities shall not grant any type approval if the Certificate of Compliance for the Software Update Management System has not been issued by the same approval authority granting type approval.

Proposal to amend UN R155 by inserting new para. 5.1.3.(e) establishing that the Certificate of Compliance for the Cyber Security Management System shall not be issued by a different Approval Authority than the one granting type approval, and amend UN R156 by inserting new para. 5.4. establishing that Approval Authorities shall not grant type approval if the Certificate of Compliance for the Software Update Management System has not been issued by the same Approval Authority granting type approval. Justification includes ensuring holistic cybersecurity assessment, clarifying reporting obligations under para. 7.2.2.2.(g), addressing unharmonized mutual recognition of management system certificates, maintaining consistency between regulations, and upholding the fundamental principle that approval authorities retain responsibility for all aspects of type approval.