How to reach UNECE R155/R156 compliance

Do you need more knowledge on the R155/R156 regulations? We can help you with an in-company training for your staff.

During a Gap Assessment we review your CSMS processes (in case of R155), SUMS processes (in case of R156) and/or final vehicle type evidence.

You can expect an extensive documentation review and in-depth interviews between our experts and yours.

With the results of our report you can take concrete action to bridge gaps we have determined.

Which threats pose a real risk to your product? We can help you find out with the R155 Risk Assessment/TARA services.

The assessment is highly interactive: together with your experts we conduct several workshops on the target system. You gain insight into threats through an initial Threat Modeling session, we review attack paths, do risk calculation and draw up joint conclusions.

The resulting TARA is fully compliant with the R155 and ISO 21434 requirements, and you can use it as direct evidence for certification.

Depending on which gaps are determined during earlier assessments, you might need different kinds of Implementation Support. We offer consultancy services to help with implementation on both R155 and R156 regulations. Support can range from advice, all the way to actively draft (part of) the necessary processes. We also have extensive security testing experience, so we can help you perform the necessary tests.

As a designated Technical Service (E4, E5, E24, E49) Bureau Veritas Cybersecurity can support you with the formal CSMS/SUMS certification of processes, and type approval of your vehicles.

The certification is performed by an external entity, such as BV CPS or LCIE.