Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Mitigations: The group confirmed the mitigations for each threat identified in the spread sheet Note: a non-cleaned up version is available as document TFCS-07-10-Rev1, a cleaned up version will be made available on the TFCS-08 page for final confirmation during TFCS-08 The structure of the recommendation paper on cyber security was agreed, reproduced in document TFCS-07-11 Note: The group agreed that a drafting group of interested experts will prepare detailed input for TFCS-08 Group consists of Mr. Nakao (ITU/NICT), Mr. Ramakrishnan (NL), Mr. Poulson (OICA), Mr. Leimbach (CITA), Mr Preuß (FIA), Mr. Handley (co-chair UK), Mr. Niikuni (co-chair JPN) and Mr. Schenkenberger (Secretary)

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Mitigations (continued): The group discussed, how the recommendations/results could be made publically available, based on the presentation from Japan (TFCS-07-08) The Consilidates Resolution (R.E. 3), already incorporating the ITS/AD guideline on Cyber Security for Connected and Automated , was identified as a suitable document

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Software updates: Results of the ad hoc meeting “Software TAN / Software updates” in Hamburg (2 August 2017) were presented: The possibility to introduce a Regulation-linked Software Identification Number (=> RxSWIN), formerly named S/W TAN, was confirmed. Different views on introducing the number: in each relevant Regulation (OICA/CLEPA approach) vs. introducing a standalone “Software Regulation” (NL) NL tabled a draft proposal for a new standalone Software Regulation (TFCS-07-05). Members were asked to provide comments on the paper by 15 September 2017 to PStriekwold@rdw.nl; Darren.Handley@dft.gsi.gov.uk; niikuni@ntsel.go.jp; jschenkenberger@hyundai-europe.com

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Software updates (continued): Presentation on EUCARIS and DETA by NL: The presentations gave valuable background information on (a) how the respective systems/databases work and (b) how they may support the administrative process for software updates. Japan presented a view on the different registration schemes established in the EU and Japan The group agreed to hold a dedicated webmeeting (ad hoc „Software updates 2“) on 27 September 2017 in order to elaborate further on a common position for an approach on software updates (excl. security related issues covered within the cyber security/mitigations part)

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Delivery of the results of TF-CS/OTA to parental group: While the task force is schedule to work until the end of 2017 it was recognized that an earliest delivery to UNECE WP.29 IWG ITS/AD will be in March 2018. This means that the results would be delivered at a time where the group formally no longer exists As a possible way forward it was proposed to extend the task force‘s mandate by 6 month in order to deliver the recommendations to IWG ITS/AD in March 2018 and in to prepare feedback to requests from IWG ITS/AD, if any A status update on the TF-CS/OTA work shall be given during the next IWG ITS/AD session in November 2017

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Action items: Threats/mitigations: Cleaned up version of the table D. Handley TFCS-08 Draft recommendation paper Drafting group TFCS-08 on mitigations (structure + content) Software updates: Comments on NL proposal („S/W Reg“) all 15 Sept. 2017 Draft recommendation paper Co-chairs/Sec TFCS-08 on mitigations (structure)

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Next meetings: TFCS ad hoc „Mitigation paper“ 25 September 2017 (Webmeeting) 10 am – 12 pm CEST TFCS ad hoc „Software updates 2“ 27 September 2017 (Webmeeting) time tbd TFCS-08 11-12 Oct. 2017 JASIC Office, Tokyo TFCS-09 09-10 Nov. 2017 OICA Office, Paris Note: Since the meeting room at the UN in Geneva is no longer available, the co-chairs decided to change the venue to Paris TFCS ad hoc „Recommendations“ (8 or 15) December 2017 (Webmeeting) time tbd TFCS-10 16-17 Jan. 2018 London or Stuttgart tbc tbc

Outcome TFCS-07 // 30-31 August 2017 @ NH Den Haag, NL Timeline/Work program: End of original mandate End of extendedmandate Ad hoc „SWU2“ 27 Sep. 2017 TFCS-08 Tokyo 11-12 Oct. 2017 TFCS-09 Paris 09-10 Nov. 2017 ITS/ADGeneva Nov 2017 Ad hoc „Recom“ Dec. 2017 TFCS-10 UK or D 16-17 Jan. 2018 ITS/ADGeneva March 2018 Dec. 2017 Jun. 2018 CS/M table Drafting of Cyber Security recommendation Draft structure Drafting of S/W update recommendation Elaborate safety aspects of S/W updates Agree status report for ITS/AD Status report Finalize and adopt recommendation papers Presentation of recommendation papers Commonize position on S/W Updates Adopt CS/M table; Agree format for recommendations