| UN R155: Proposal for a Supplement |
| Reference Number: GRVA/2026/28 |
|
Proposal to amend para. 5.3.2. to require notification of assessment methods and criteria including paras. 8.2. and 8.3., insert new paras. 8.2. and 8.3. establishing criteria for equipment installation without further assessment, and amend Annex 1 to require disclosure of equipment excluded from assessment pursuant to paras. 8.2. and 8.3. The amendments clarify that equipment with negligible intrinsic cyber security risk installed according to manufacturer specifications and not introducing cyber security risk, and standard non-automotive equipment connected solely for power supply with no increased cyber security risk, shall not invalidate approval of the original vehicle type under UN Regulation No. 155. |
| Submitted by: TFCS |
| Meeting Sessions: 26th GRVA session (14-18 Sep) |
| Document date: 03 Jul 26 |
| Document status: Formal GR review |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management |
| View full document file for more information |
| Click here to view the full document file |
| UN R155: Proposal for a Supplement |
| Reference Number: GRVA/2026/29 |
|
Proposal to insert new Part C providing guidance for the application of UN R155 to transformed vehicles. Part C addresses identification of cyber-relevant transformations, impact on original vehicle architecture, connection risks, and impact on cyber security management systems. It specifies that transformations require new approval unless the manufacturer provides clear evidence that the original approval remains valid, and outlines critical factors and examples of cyber-relevant actions. It details documentary evidence expected from manufacturers regarding functional descriptions, connections with original vehicle types, added components and functions, and arguments demonstrating negligible intrinsic risk. |
| Submitted by: TFCS |
| Meeting Sessions: 26th GRVA session (14-18 Sep) |
| Document date: 06 Jul 26 |
| Document status: Formal GR review |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management |
| View full document file for more information |
| Click here to view the full document file |
| UN R155 and R156: Proposal to amend GRVA/2026/30 |
| Reference Number: GRVA-26-35 |
|
Proposal to amend para. 5.1.3., insert new paras. 5.1.5. and 5.1.5.1. requiring the Approval Authority to refuse type approval unless the Certificate of Compliance for the Cyber Security Management System is issued by the same Approval Authority granting vehicle type approval, while permitting referencing of certificates from other Approval Authorities under specific conditions with documented agreements and clarified responsibilities, and insert new paras. 5.4. and 5.4.1. with equivalent requirements for the Software Update Management System Certificate of Compliance. |
| Submitted by: UK, France, Luxembourg, Germany, and Netherlands |
| Meeting Sessions: 26th GRVA session (14-18 Sep) |
| Document date: 17 Sep 26 |
| Document status: Approved by GR |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management and UN Regulation No. 156 | Software Update Processes and Management Systems |
| View full document file for more information |
| Click here to view the full document file |
| UN R155: Proposal to amend GRVA/2026/29 |
| Reference Number: GRVA-26-36-Rev.1 |
|
Proposal to amend paragraph AI to introduce a link between existing text in Part A and new text in Part C regarding vehicle transformations, and insert new Part C providing guidance for the application of UN Regulation No. 155 to transformed vehicles. The proposal adds section 6 clarifying that the requirement for the Certificate of Compliance and type approval to be issued by the same Approval Authority applies only within the scope of the type approval granted to the manufacturer concerned, and does not restrict another manufacturer from obtaining a separate type approval and associated Certificate of Compliance from the responsible Approval Authority. |
| Submitted by: UK |
| Meeting Sessions: 26th GRVA session (14-18 Sep) |
| Document date: 18 Sep 26 |
| Document status: Approved by GR |
| Relevant to: UN Regulation No. 155 | Cyber Security and Cyber Security Management |
| View full document file for more information |
| Click here to view the full document file |