UNECE WP.29 R155 7.2.2.2(g): 7.2.2.2(g) Processes to monitor, detect and respond, and to re-check mitigation effectiveness

The processes used to monitor for, detect and respond to cyber-attacks, cyber threats and vulnerabilities on vehicle types, and to assess whether implemented measures remain effective against newly identified threats and vulnerabilities. The Interpretation Document looks for post-production monitoring, relevance assessment of collected information, risk determination, incident response procedures for registered and unregistered vehicles (interaction with authorities, escalation triggers, response options, supplier handling) and evidence that response works (exercises); unfulfilled where there is no threat intelligence, no monitoring staff or skills, alerts are not prioritized or updates are not applied in time.