October 27, 2020
TOKYO, Oct. 27, 2020 – UL, a leading global safety science company, announced today that it will launch new cybersecurity services for the Japanese automotive industry Nov. 1 to meet new cybersecurity regulations instituted by the United Nations Economic Commission for Europe.
In June 2020, the World Forum for Harmonization of Vehicle Regulations (WP.29), a working party of the Sustainable Transport Division of the United Nations Economic Commission for Europe (UNECE), adopted regulations for Cybersecurity and Software Update of Motor Vehicles, making it essential for new vehicles sold in Europe from July 2022 onward to meet these regulations for type approval, a certificate of conformity granted to a product to demonstrate it meets regulatory, technical and safety requirements. WP.29 is the only forum for multilateral discussions on global harmonization of vehicle safety and environmental standards and mutual recognition of certification and includes Japan as an active participant.
In addition to new cybersecurity and software update regulations, the UNECE now requires compliance with international standard ISO/SAE 21434, an international standard that requires cybersecurity measures at all stages of a vehicle's life cycle – from design to retirement, including parts. Automotive manufacturers (OEMs) and a broad range of stakeholders involved in automotive life cycles, including suppliers, will be required to prepare and implement security measures. UL will provide practical and holistic services on cybersecurity audit and assessment for the Japanese automotive industry to obtain type approval for Europe.
Meanwhile, as technological development is accelerated around the world toward achieving advanced autonomous driving technology and connected environment for vehicles, the revised Road Traffic Act came into effect in Japan in April this year. The Act allows on public roads Level 3 autonomous driving where the driver must remain alert and ready to take control if the system is unable to execute the task. Following this, the safety standards for securing cybersecurity were applied to the autonomous operation equipment installed in self-driving vehicles. The launch of commercial services for 5G systems that enable high-speed, high-capacity communications has also further pushed forward the use of connected technology for vehicles. In addition to vehicle-to-vehicle communications (V2V) and vehicle-to-infrastructure communications (V2I), technology expanded to vehicle-to-pedestrian communications (V2P) and vehicle-to-network communications (V2N), making it critical for the entire automotive industry to roll out cybersecurity measures.
New UL automotive industry cybersecurity services will fully assist towards obtaining EU vehicle type approval in accordance with the requirements under WP.29 and ISO/SAE 21434 and include:
- cybersecurity management systems framework
- software update management systems framework
- gap analysis against WP.29 Regulations and ISO/SAE 21434 standard
- risk management framework
- threat analysis and risk assessment framework
- cybersecurity audit
- security testing, including invasive and non-invasive penetration tests and vulnerability analysis
- UL Certified Cybersecurity Professionals in Automotive Training
“With more than 500 security professionals across the globe, UL utilizes insights and experience built on cybersecurity to assist the entire automotive industry supply chain in developing cybersecurity measures. Having launched cybersecurity services for the Japanese automotive industry that expands businesses in the European market, UL will further expand its service delivery capacity that can comply with the regulations for more countries,” said Hidehiko Yamajo, vice president and managing director of UL in Japan.
UL helps create a better world by applying science to solve safety, security and sustainability challenges. We empower trust by enabling the safe adoption of innovative new products and technologies. Everyone at UL shares a passion to make the world a safer place. All of our work, from independent research and standards development, to testing and certification, to providing analytical and digital solutions, helps improve global well-being. Businesses, industries, governments, regulatory authorities and the public put their trust in us so they can make smarter decisions. To learn more, visit UL.com. To learn more about our nonprofit activities, visit UL.org.