ISO 24089 · Process certification
ISO 24089. Software update engineering for vehicles
ISO 24089 defines requirements for the secure and traceable engineering of software updates for road vehicles and their systems.
Overview
What is it about?
ISO 24089 “Road vehicles. Software update engineering” sets requirements for organisations and processes that develop, release and deliver software updates for vehicles and their electronic systems. It reflects the fact that modern vehicles are increasingly modified via updates throughout their lifecycle. Whether to fix errors, close vulnerabilities or extend functionality.
The standard covers the entire update process: from the infrastructure and update campaign management through the creation and verification of software update packages to secure delivery to the vehicle. Including over-the-air updates. It addresses the compatibility, integrity and traceability of updates and thereby complements functional safety and cybersecurity. It forms the technical basis for demonstrating the requirements of UNECE Regulation R156 for a software update management system.
Purpose & benefit
Certification demonstrates standard-conform, end-to-end controlled management of vehicle software updates. It supports evidence of conformity with UNECE R156, which is binding for the type approval of update-capable vehicles.
What's included
- Organisational requirements and competencies for software update engineering
- Software update infrastructure and management of update campaigns
- Creation, verification and validation of software update packages
- Compatibility and dependency checking of affected vehicle systems
- Secure delivery and installation, including over-the-air updates
- Documentation, traceability and recording of performed updates
For whom
Is this right for you?
The standard is aimed at vehicle manufacturers and at suppliers and service providers involved in developing, providing or delivering vehicle software updates. It is relevant for all organisations that maintain update-capable E/E systems in the field.
Your benefits
What it does for you
- Evidence of an end-to-end controlled and secure update process
- Basis for meeting UNECE R156 and type approval
- Preservation of vehicle safety and conformity even after delivery
- Traceable documentation of all updates to reduce liability risks
Our role
How we work
- 1Planning and conducting certification audits to assess the conformity of your management system with the requirements of the standard
- 2Independent decision on certification based on the audit results
- 3Issuing and maintaining certificates
- 4Conducting surveillance and recertification audits in accordance with the applicable rules and defined time intervals
Impartiality
Consulting or support services for the introduction, implementation or improvement of management systems are not part of our activity as a certification body.
FAQ
Frequently asked questions
How do ISO 24089 and UNECE R156 relate to each other?
UNECE R156 requires a software update management system for type approval. ISO 24089 provides the recognised technical and procedural basis for implementing and demonstrating the requirements of this system in a structured way.
Does the standard also cover over-the-air updates?
Yes. ISO 24089 explicitly addresses the secure delivery of software updates including over-the-air methods and sets requirements for the integrity, compatibility and traceability of the installation.
How does ISO 24089 complement ISO/SAE 21434 and ISO 26262?
ISO 24089 ensures that updates do not compromise cybersecurity per ISO/SAE 21434 or functional safety per ISO 26262 across the lifecycle. The standards interlock and are coordinated within the engineering process.
Your request
What would ISO 24089 cost for you?
Simply request a non-binding quote, quickly and directly.