1. Outcome of TFCS-12 - summary slides - (detailed meeting minutes will be provided separately) April The Shilla Seoul, ROK

2. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
The UN Task Force on Cyber Security and Over the Air issues (TF-CS/OTA) will provide two recommendations:
Data protection
Software updates
Certification aspects
Cyber Security
Security aspects
Legal aspects
out of scope
Threat analysis
pre- registration
post- registration
Develop flow diagram
Define mitigation principles
Define approval method
Table of threats
Develop Recommendation on Cyber Security
Safe execution
Develop
recommendation for safe execution
Develop Recommendation on Software Updates

3. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Document structure: Software update paper
Recommendation Software updates
Guidance on processes and procedures, and advice to support national registration processes
„S/W update Resolution“
Main body of the Recommendation (Chapter 1-6)
Requirements for approving OEM S/W update Management; Incl. process verification, audits & assessment of OEM capability
„S/W update Regulation“
Annex A
S/W update requirements
incl. safety and security
„Regultory text RxSWIN“
Software Identification Number
be introduced in existing UN Reg. (where appropriate)
Annex B

4. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Document structure: Cyber Security paper
Recommendation Cyber Security
„Cyber Security Resolution“
Guidance on process and procedures; best practices (threats & mitigations); ...
Main body of the Recommendation (Chapter 1-6)
Annex B („List of threats and corresponding mitigations“)
Annex C („Examples of Security Controls related to mitigations“ - informative)
Requirements for approving OEM C/S Management System; Certification of OEM
„Cyber Security Regulation“
Annex A
Approval of vehicle type C/S
Cyber Security requirements
refer to Resolution

5. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Software updates:
The group reviewed the entire Annex A of the draft Recommendation on Software updates (Regulatory Annex) for the first time
Further work is necessary:
structure of the draft Regulation (Annex A) needs further refinement, especially in order to better differentiate between requirements for:
OEM processes vs. vehicle approval
General software updates vs. OTA updates
content of the paper needs to be finalised and agreed
regulatory text needs to be checked for whether/where changes may be needed for automated vehicles

6. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Software updates (continued):
OICA suggested there may be a need to have independent approvals for production vehicles and vehicles that are already registred:
initial suggestion is to insert text highlighting the issue into the recommendation. Depending on further considerations it may be added into the draft regulation
Japan raised initial concerns about the approach but will check the issue internally
OICA was invite to develop their recommendation so that the task force may further contemplate it

7. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Cyber Security:
The group reviewed the entirety of Annex A (Regulatory Annex) and Chapter 7 (Recommendations) for the first time
Annex C (“Examples of Security Controls related to mitigations”) is kept as an informative annex
Further work is necessary, particularly:
update chapters 4 &7 according to agreed changes
refine Annex A to fit standard UNECE regulatory text
further reflection on Annex A (regulatory text) was requested to ensure its appropriateness
content of the consolidated paper needs to be finalised and agreed, including verification that Annexes B and C are appropriate and accurate.

8. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
General:
The group drafted the proposed Regulations on Cyber Security and Software updates according to the 1958 Agreement of UN ECE (=> as UN Regulations)
In case WP.29 IWG ITS/AD would like to bring the content of the Task Force forward as a GTR, further review will be required
WP.29 IWG ITS/AD may need to further discuss the scope of the new draft Regulations since there had been no participation from industry representatives of vehicle category O, R, S and T, and very late involvement of IMMA. Therefore, category L, R, S and T are put in parenthesis.

9. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
General (continued):
Information item: Presentation by NL on a proposal to handle the issue of „Software Verification and Validation“ (Software quality) by a new group (subgroup of ITS/AD Task Force on Assessment/Certification of Automated Vehicles)

10. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Next steps:
Germany and OICA volunteered to refine the structure of Annex A of the S/W update recommendation according to the outcome of TFCS 12
The group agreed to hold four additional web meetings in order to progress the remaining work (one C/S and one S/W update webinar before and after the WP.29 IWG ITS/AD meeting) => Doodle poll will be sent out shortly
The latest status of the draft recommendations will be referenced for the WP.29 IWG ITS/AD on 21 June 2018

11. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Next meetings:
TFCS ad hoc „Cyber Security Review I“ June 2018
(Webmeeting) time tbd
TFCS ad hoc „Software updates Review I“ June 2018
WP.29 IWG ITS/AD June 2018
TFCS ad hoc „Cyber Security Review II“ July 2018
TFCS ad hoc „Software updates Review II“ July 2018
TFCS-13 (if needed; in Europe) Sept. 2018

12. Outcome TFCS-12// 17-19 April 2018 @ The Shilla Seoul, ROK
Timing (target)
End of extended mandate
TFCS-12 Seoul
17-19 Apr. 2018
Ad hoc C/S 1 Web
June 2018
Ad hoc S/W 1 Web
June 2018
ITS/AD Geneva
21 June 2018
Ad hoc C/S 2 Web
July 2018
Ad hoc S/W 2 Web
July 2018
TFCS-13 Europe
- if required -
Sept. 2018
ITS/AD Geneva
15 Nov. 2018
Cyber Security Resolution + Regulation
S/W update Resolution + Regulation
Status report
Presentation of recommendation papers