UNECE WP.29 R155
UN Regulation on Cybersecurity for vehicles
UNECE WP.29 R155 is a compliance framework from International with 6 domains and 15 controls that map to 8 other frameworks. The largest domains are Cyber Security Management System (6 controls), Vehicle Type Approval (5 controls), CSMS (1 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
CSMS
| Code | Title |
|---|---|
| UNECER155-1 | Cyber Security Management System (CSMS) |
Cyber Security Management System
| Code | Title |
|---|---|
| R155-CSMS-COMP | Competence and training of personnel |
| R155-CSMS-CONTRACTING | Outsourced processes and joint development |
| R155-CSMS-GOV | Cyber Security Management System governance |
| R155-CSMS-INCIDENT | Incident response and reporting to approval authority |
| R155-CSMS-MONITOR | Monitoring of cyber threats, vulnerabilities, and attacks |
| R155-CSMS-SUPPLIER | Management of supplier-related cybersecurity |
Software Updates
| Code | Title |
|---|---|
| UNECER155-4 | Software Updates Management System (alignment with R156) |
Threat Assessment
| Code | Title |
|---|---|
| UNECER155-3 | Threat Assessment (Annex 5) and Risk Mitigation |
Type Approval
| Code | Title |
|---|---|
| UNECER155-2 | Vehicle Type Approval and Cyber Security Demonstration |
Vehicle Type Approval
| Code | Title |
|---|---|
| R155-VTA-ASSURANCE | Independent assurance and approval authority interaction |
| R155-VTA-MITIGATIONS | Implementation of proportionate mitigations |
| R155-VTA-POSTPROD | Post-production cybersecurity management |
| R155-VTA-RISK | Vehicle type cybersecurity risk identification |
| R155-VTA-TEST | Testing the cybersecurity of the vehicle type |
Your Compliance Coverage
If you comply with UNECE WP.29 R155, you already cover:
ISO 27005
7%
1 controls mapped
Compare →ISO 20000-1
7%
1 controls mapped
Compare →ISO 19011
7%
1 controls mapped
Compare →+ 5 more: ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence (7%), ISO 14001 (7%)
See all 8 mapped frameworks ↓Maps to 8 other frameworks
What is UNECE WP.29 R155 and who does it apply to?
UNECE WP.29 R155 is a compliance framework from International with 6 domains and 15 controls. UN Regulation on Cybersecurity for vehicles It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does UNECE WP.29 R155 actually require?
UNECE WP.29 R155 has 15 controls organised across 6 domains. The largest domains are Cyber Security Management System (6 controls), Vehicle Type Approval (5 controls), CSMS (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of UNECE WP.29 R155 do I already cover?
UNECE WP.29 R155 maps to 8 other compliance frameworks. The top mapping partners are ISO 27005 (7% coverage), ISO 20000-1 (7% coverage), ISO 19011 (7% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement UNECE WP.29 R155?
Start your UNECE WP.29 R155 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about UNECE WP.29 R155 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 15 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required