UNECE R155 – Cybersecurity (CSMS & Type Approval)
This section provides an introductory, high-level overview of UNECE Regulation No. 155: organizational capability (CSMS), lifecycle risk management, supplier integration, monitoring/incident handling, and evidence for vehicle type approval. For authoritative requirements, refer to the official regulation text and your approval authority’s guidance.
At a Glance
CSMS
Organizational governance, roles, competence, processes, and evidence.
Risk Management
Identify threats, assess feasibility/impact, treat risks, and trace evidence.
Type Approval
Show that CSMS and risk practices are applied to the specific vehicle type.
Chapters
Risk Management
TARA alignment, treatment strategy, acceptance rules, and traceability.
Risk Management →Vehicle Type Approval
What authorities examine and how to package conformance evidence.
Vehicle Type Approval →Monitoring & Incident Management
Telemetry, PSIRT, CVD, SLAs, comms, and feedback to CSMS/TARA.
Monitoring & Incidents →Supplier & External Interfaces
Flow-down, evidence exchange, assessments/audits, and ops coordination.
Supplier & Interfaces →Preparing for R155 Type Approval?
We support OEMs and suppliers with CSMS assessments, evidence pack assembly, TARA reviews, PSIRT readiness, and SUMS alignment (R156/ISO 24089).