Glossary comparison
ISO/SAE 21434 vs UNECE R155: what is the difference?
The difference
R155 is a regulation that makes a cyber security management system a condition of vehicle type approval. ISO/SAE 21434 is a voluntary standard describing how to do the engineering that supports it.
R155 is a legal requirement for vehicle type approval in the countries that apply it. ISO/SAE 21434 is a voluntary engineering standard that many companies use to meet it.
The two terms
ISO/SAE 21434
The joint ISO and SAE standard defining cybersecurity risk management across the vehicle lifecycle, including threat analysis and risk assessment, secure development and post-production incident response.
UNECE R155
The vehicle type-approval regulation requiring manufacturers to operate a certified cybersecurity management system and to demonstrate risk management for each vehicle type across its lifecycle.
Side by side
| Field | ISO/SAE 21434 | UNECE R155 |
|---|---|---|
| Stands for | Road vehicles - Cybersecurity engineering | UN Regulation No. 155 on cyber security and cyber security management systems |
| Type | Standard | Standard |
| Domain | Standards & Organisations | Safety & Security |
| Group | Automotive & functional safety | Security standards |