Global commercial vehicle OEM ensures UNECE WP.29 R155 compliance with Upstream
Overview
A leading global commercial vehicle (CV) OEM, with more than 100,000 employees and dozens of production sites worldwide, implemented a comprehensive cybersecurity management system that meets the requirements of UNECE WP.29 and R155 and supports its commitment to ensuring vehicle safety.
Following the evaluation of several solutions, the OEM chose Upstream’s cloud-based and agentless automotive cybersecurity platform due to its holistic solution and coverage of vehicles already on the road as well as any future vehicles.
- IndustryCommercial
OEM - Company size~100,000 employees
- About One of the world's largest commercial vehicle manufacturers, with over 35 main locations worldwide and over 100,000 employees that specialize in designing, manufacturing, and distributing a wide range of trucks & buses that set new standards in efficiency, reliability, and innovation.
The Challenge
Ensuring future-proof cybersecurity resilience and quick time-to-compliance
- Meeting and exceeding the current regulatory requirements with the flexibility to comply with any future changes in regulations across multiple world regions and evolving attack vectors.
- Implementing a solution that would cover existing vehicles already in the market and any future products with the ability to effectively scale as needed.
- Onboarding a solution with minimal effort, leveraging existing connected vehicle data streams to deliver detection, mitigation, and compliance in a short timeframe.
The Solution
Upstream’s Platform: cloud-based and agentless cybersecurity management platform
The OEM implemented a cloud-based vehicle cybersecurity platform from Upstream Security, used by the OEM’s Vehicle Security Operations Center (vSOC) operated by a global MSSP.
The Upstream Platform is agentless and offers seamless integration with existing connected vehicle data feeds. As a result, it enables unparalleled cybersecurity protection of vehicles on the road today and those still in production.
The Platform was designed to meet the requirements of the automotive industry, layering unique domain expertise in automotive with robust ML-based detection for cybersecurity threats.
The Platform’s architecture ensures that all vehicles are monitored without requiring software or hardware components installed in-vehicle.
The Upstream Platform acts as a vehicle detection and response (V-XDR) solution offering holistic monitoring of cybersecurity vulnerabilities, risks, and attacks.
As a cybersecurity management system, Upstream provides OEMs with a risk analysis framework and threat assessment engine.
The Upstream Platform
The Result
Fully Compliant & Future Proof
- Fast time-to-compliance and security
Monitoring millions of vehicles globally, the Upstream Platform ingests connected vehicle data streams quickly, including vehicle sensors and signals, mobile applications, and command and control telematics servers, delivering a quick ramp-up for monitoring as required by R155. - Enhanced cybersecurity detection and response
The Platform’s advanced cybersecurity capabilities enable the proactive detection and mitigation of potential known threats and employs machine learning-based detection for unknown threats, boosting trust and ensuring the cybersecurity resilience of the OEM’s vehicles. - Future-proof solution
Upstream’s cloud-based and agentless solution requires no software or hardware to be installed in vehicles, enabling the protection of connected vehicles already on the road and new vehicles with quick time-to-market.
Expanding the ROI of the Upstream Platform Beyond
Cybersecurity Compliance.
The Upstream Platform’s advanced data management and anomaly detection capabilities can be
leveraged for additional use cases, providing significant value to customers and users.
-
API Security Increase coverage to include mobility APIs, a growing attack surface.
-
Predictive Maintenance Utilize data to repair vehicles on time with pre-ordered parts.
-
Vehicle Quality Detect quality issues before vehicles leave the factory and during the production stage by correlating factory, DTC, OTAs and vehicle data.
-
Fleet Management Achieve operational efficiencies with data-based insights into fleet performance.
-
Actionable Insights Maximize customer satisfaction by improving customer service processes and optimize asset utilization.
The 2024 Global Automotive Cybersecurity Report
The Result
Fully Compliant & Future Proof
- Fast time-to-compliance and security
Monitoring millions of vehicles globally, the Upstream Platform ingests connected vehicle data streams quickly, including vehicle sensors and signals, mobile applications, and command and control telematics servers, delivering a quick ramp-up for monitoring as required by R155. - Enhanced cybersecurity detection and response
The Platform’s advanced cybersecurity capabilities enable the proactive detection and mitigation of potential known threats and employs machine learning-based detection for unknown threats, boosting trust and ensuring the cybersecurity resilience of the OEM’s vehicles. - Future-proof solution
Upstream’s cloud-based and agentless solution requires no software or hardware to be installed in vehicles, enabling the protection of connected vehicles already on the road and new vehicles with quick time-to-market.
Expanding the ROI of the Upstream Platform Beyond
Cybersecurity Compliance.
The Upstream Platform’s advanced data management and anomaly detection capabilities can be
leveraged for additional use cases, providing significant value to customers and users.
-
API Security Increase coverage to include mobility APIs, a growing attack surface.
-
Predictive Maintenance Utilize data to repair vehicles on time with pre-ordered parts.
-
Vehicle Quality Detect quality issues before vehicles leave the factory and during the production stage by correlating factory, DTC, OTAs and vehicle data.
-
Fleet Management Achieve operational efficiencies with data-based insights into fleet performance.
-
Actionable Insights Maximize customer satisfaction by improving customer service processes and optimize asset utilization.
Related Resources
You might find these resources interesting
90 Days with Upstream: From “Project Beacon” to “Data-driven Cybersecurity”
Read more
