Training
Automotive cybersecurity training for UN R155 and R156
Private cohorts for regulators, manufacturers and suppliers across Asia, from a one-day executive seminar to a 13-day assessor track. Delivered from Singapore, in the region's time zones, for one organisation at a time.
Why now
UN R155 (cybersecurity) and R156 (software updates) are already mandatory in the EU and Japan, and comparable rules are phasing in across Korea, China and India.
| Market | Rule | Status |
|---|---|---|
| European Union | UN R155 / R156 | Mandatory for all new vehicles since July 2024 |
| Japan | UN R155 / R156 | Applied since 2022 |
| South Korea | National cybersecurity rules aligned to R155 | New types from August 2025, existing types from August 2027 |
| China | GB 44495 | New types from January 2026, all vehicles from January 2028 |
| India | AIS-189 (draft, MoRTH consultation, July 2026) | Proposed: Level 3+ automated vehicles from October 2026, over-the-air-capable vehicles from April 2028, all other software-update-capable vehicles from October 2029 (new models first) |
| ASEAN | No mandatory rule confirmed yet | Anyone exporting to the markets above must already comply |
For ASEAN, the rule reaches you through your export markets before your own regulator writes it.
Six tiers
Private cohorts for one organisation at a time, delivered from Singapore in the region's time zones. Every cohort starts with the skills questionnaire, so we place people in the right tier before they pay. Fees are per participant and come with the proposal.
| Tier | Duration | Who it is for |
|---|---|---|
| Executive Seminar | 1 day | Directors, approval heads, product owners |
| R155/R156 Workshop | 2 days | Compliance, homologation and engineering leads |
| Regulatory Assessor | 8 days | Staff who audit or approve a manufacturer's CSMS and SUMS |
| Technical | 5 days | Engineers testing vehicles and ECUs |
| Forensics add-on | +2 days | Incident and investigation teams |
| Comprehensive | 13 days | Teams building a full in-house capability |
Who it is for
| Who | Why they come | Likely tier |
|---|---|---|
| Transport regulators and approval authorities in ASEAN | Need staff who can assess a manufacturer's cybersecurity and update systems | Assessor, Comprehensive |
| Vehicle manufacturers' regional offices in Singapore | Export programmes need R155/R156 evidence | Workshop, Technical |
| Tier-1 and Tier-2 suppliers | Manufacturers push R155 requirements down the supply chain | Workshop, Technical |
| EV makers entering Southeast Asia | Selling into markets that already enforce the rules | Executive, Workshop |
| Test labs and technical services | Want to offer R155 testing locally | Technical, Forensics |
| Fleet and mobility operators | Connected-fleet incidents and software updates | Executive, Forensics |
Skills questionnaire
Free, and the first step for every cohort. It places each participant on the right track (Executive, Regulatory Assessor or Technical) and sets the depth of the hands-on labs. One form per participant; it takes about five minutes. Answer for your own experience, not your team's.
Free online briefing: R155/R156 in 45 minutes
What UN R155 and R156 ask of regulators, manufacturers and suppliers, and how the rules reach ASEAN through export markets. Online, on Microsoft Teams, ending with the cohort options and the questionnaire.
Other services
- MAS AI risk advisoryThe AI inventory, risk materiality rating and gap closure against the MAS Guidelines on AI Risk Management.Read more
- AI security testingRed-teaming and testing of AI systems against the OWASP Top 10 for LLM Applications, with Monarch.Read more
- EU AI Act and ISO/IEC 42001 readinessReadiness and gap assessments for the EU AI Act and the ISO/IEC 42001 AI management system standard.Read more
- Cyber Essentials to ISO/IEC 27001From a CSA Cyber Essentials mark to Cyber Trust and ISO/IEC 27001, reusing the work you already have.Read more