About ENX VCS
The increasing digitalisation of vehicle systems through automation, connectivity and new mobility concepts is increasing the requirements for cyber security in product development and product maintenance across large parts of the automotive industry's value chain and over the life cycle of vehicles. This makes it necessary for manufacturers and suppliers to manage risks based on standardised procedures to maintain vehicle and component security along the value chain. With the ENX Vehicle Cyber Security Audit (ENX VCS), the ENX Association has established a certification standard for the automotive industry. The ENX VCS scheme has been developed and is continuously evolved by experts of the automotive industry (OEMs, Suppliers and service providers) in the ENX working group. ENX VCS allows automotive suppliers to provide standardised proof of an implemented cybersecurity management system (CSMS) in accordance with the ISO/PAS 5112 guideline. This can be used to prove that companies fulfil the technical requirements for implementing a CSMS in the supply chain in accordance with the international standard ISO/SAE 21434. This means that the necessary standardised procedures for managing risks have been implemented. The type approval of vehicles is subject to a large number of regulatory requirements of the UNECE (United Nations Economic Commission for Europe). With UN R 155, these now also extend to the cyber security of the vehicle. Part of these requirements is a supplier management system focussed on information and cyber security.
In the pilot phase of ENX VCS, a number of partner companies such as parts and software suppliers and development service providers have already been certified and audit providers have been qualified. As with the use of TISAX and the ENX network, registration in the ENX portal is the starting point for every participant. Interested automotive suppliers can now register at enx.com and undergo standardised auditing by the approved ENX VCS audit providers. The registration for ENX VCS is free of charge until the end of 2024. Five of the world's leading audit providers - BSI Group, DEKRA, DQS Group, TÜV Nord and TÜV Süd - will be ready to carry out ENX VCS audits from the launch in June 2024, with more to follow.