Ensure a secure software update with UN Regulation No. 156

With UN Regulation No. 156 (UN R156) and the requirements for the Software Update Management System (SUMS), the automotive industry is urged to act quickly. The UN 156 regulation is mandatory for all UNECE countries and suppliers providing for UN countries. Therefore, compliance is not optional, it’s a requirement for all parties involved. How do you get started? Find out in our webcast.

Access recorded webcast
UN R156 timeline
SUMS webcast

Why preparing for UN R156 before it comes into effect on July 2022 and July 2024 is crucial

  • Even newly launched vehicle types must also ensure compliance with the regulation by July 2022
  • All newly produced cars must comply with the regulation by July 2024 at the latest
  • The European Union has already adapted UN R156 into applicable law, meaning that the respective requirements are legally binding in the EU
  • Non-European car manufacturers who want to sell their cars in UNECE member states, are required to adopt equivalent principles to UN R156 and demonstrate compliance

Thus, there is a significant pressure on the automotive value chain to act in order to correctly set the course for the newly defined requirements for software updates, the software update management system and over-the-air updates in practice.

Our experts at CYRES have prepared a comprehensive Software Update Management System guide and ISO 24089

Understand the full scope of the impact of UN R156

In order to understand all the various aspects affected by UN Regulation No. 156 when it comes to ensuring secure software updates, it helps to structure the requirements. Therefore, in order to perform a secure software update in accordance with UN R156, it is necessary to correctly consider certain requirements. These concern:

  • the Original Equipment Manufacturer in cooperation with its suppliers,
  • the vehicle type
  • the proper consideration of the vehicle owner/user as part of the update process

At the same time it is important to understand that the requirements of UN Regulation No 156 cover the level of the organization, the specific project (across all phases of the entire product lifecycle) and the respective Software Update Campaign.

Which processes have to be addressed in this context? What are the exact requirements regarding information handling and documentation? You can get a first knowledge boost with our new video learning course on the CYRES Academy Online Learning Platform: UN Regulation No. 156 video course (€)

UN R156 regulations scope

Gain a basic understanding of the UN R156 in our free webcast

With the UN Regulation No 156 and Software Update Management System Info-Webcast you will be able to understand the context around secure software updates and organizational compliance requirements. After entering your contact information you will receive the recorded UN 156- SUMS webinar free of charge.

Watch UN Regulation No. 156 and SUMS free webcast

Get advanced learning on the UN R156 with this video course

Stay ahead of the curve on with the UN R156 on-demand learning video course. With a complete understanding of the full scope, you’ll be able to estimate the impact in your organization and take action towards compliance. Also, get a first glimpse of the upcoming ISO 24089.

→ Watch UN Regulation No. 156 video course


This is a video snippet from our video learning course „UN Regulation No. 156“ (in total consisting of seven videos).

After taking this course, you will be able to explain the scope of the UN R156, estimate the impact of the UN R156 on your organization and be able to discuss the UN R156 with colleagues and customers. The contents of the video course at a glance:

  • Intro to UN Regulation No. 156
    Get a first understanding of what UN R156 is
  • Importance of UN Regulation No. 156
    Why UN R156 is relevant for the whole automotive industry
  • Roots and scope of UN Regulation No 156
    Learn the roots and scope of the UN R156, where, and when it is mandatory
  • Structure and requirements of UN Regulation No 156
    Get a deeper understanding of Software Update Management System requirements: at the vehicle manufacturer, supplier, vehicle types levels and further aspects including the RXSWIN
  • Requirements for the SUMS for the vehicle manufacturer
    In this part we will provide an overview of the requirements for the Software Update Management System on the side of the vehicle manufacturer. Furthermore we will describe the vehicle type approval process for approving the Software Update Management System.
  • Who is responsible?
    After having seen what is required by the UN Regulation No 156, in this part we explain who is responsible and accountable.
  • Closing summary
    Finally, here we will sum up what you have learned about UN Regulation No. 156 and its requirements.
Start your UN R156 training

Start building an understanding of UN R156

While UN R155 (and the CSMS) is already widely known, UN Regulation No. 156 creates further pressure for the automotive industry. Our video learning course gives a first overview to understand the overall context around the Secure Software Update Management System (SUMS).

Understand the full scope of UN R156

What impact will UN Regulation No. 156 have on your organization and your processes? What aspects of Update Management does it actually cover? Our learning video course is designed to help you grasp the full scope of the requirements for secure updates.

Learn about the compliance challenges of UN R156

Compliance along UN Regulation No 156 plays a serious role in type approval. Accordingly, is UN R156 only an issue for original equipment manufacturers (OEMs)? It is not that simple. In this video course, we discuss the regulatory challenges along the value chain.

SUMS Webcast

Planning for tomorrow’s UN R156 regulation starts today

For the overall security and integrity of the software update process, it is not only necessary to involve all players in the value chain, but it is also important to take the software update requirements into consideration.

In the context of the pre-update, it is important to ensure that the preconditions for the update are properly in place – from the update infrastructure to the vehicle and more.

For the execution of the actual over-the-air update, it is also necessary to ensure certain parameters.

And afterwards, in the post-update phase, further requirements have to be met, e.g. with regard to documentation, etc.

The RXSWIN (the Regulation X Software Identification Number) plays a crucial role in the UN R156 assessment. The RXSWIN can be thought of as a dedicated identifier for the type approval relevant software of the Electronic Control System, defined by the vehicle manufacturer.

Let’s start a conversation surrounding your UN R156 compliance

    Please note: The presented offer of CYRES Consulting UN R156 assessment is a non-binding offer. Please use the form for your first non-binding inquiry. In the following dialogue we will present you the scope of our specific services and define the organizational details together with you.


    Phone: +49 (0) 89 9542 808 00
    E-Mail: office (at) cyres-consulting.com

    NEW! Fundamental Principles for Automotive Cybersecurity for your role

    Discover which of our new 8 on-demand learning bundles based on the ACP Framework competence model fits your role.


    Fehler: Kontaktformular wurde nicht gefunden.


    Essential Guide

    The Essential Guide to ISO/SAE 21434

    How to manage the challenges of the new automotive cybersecurity standards and regulations

    Essential Guide

    The Essential Guide to ISO/SAE 21434

    How to manage the challenges of the new automotive cybersecurity standards and regulations