S2R is an international motorcycle exhibition that gathers OEMs, suppliers and enthusiasts. This year in 2024 it was held in Lyon from 7 to 10 March. Rappel Cybersecurity participated to the event in pro days, 7-8 March to get in touch with motorcycle industry representatives and create awareness on the upcoming UN r155 Category L extension.

Before the event, we created our trifold brochures to distribute. Since the UN r155 regulation is not well-known in motorcycle industry, a handheld brochure did a good job to be able to explain what is Category L, the Cybersecurity Regulation UN r155 and how to comply with it.

‍

The motorcycle industry is highly diverse. There are world famous OEM's like Harley Davidson, Triumph, Honda, Yamaha, BMW, Indiana who manufacture high end motorcycles with sophisticated electronic systems and connectivity features and also mechanical genies like Brough Superior, MV Agusta, Murial etc. who focus on superior performance and the traditional genes of motorcycles. In addition, there is a huge variety of models for daily users and professionals. From cybersecurity compliance perspective, Category L is an untouched domain that requires novel approches to meet the needs of the varying customers.

High-end models that are built for long voyages are equipped with electronic systems no less than luxury vehicles. Check-out the BMW R18 Transcontinental below with numerous features like Speed Regulation, Emergency Call and Services, ABS, ASC, Drive Assistance, Connected Infotainment, Central Lock and many others. All this driving comfort and pleasure come with an impressive price tag of course.

‍

The explosion of electric 2 wheelers models is immediately noticed. Some famous brands have already released full electric models while some others have created a new brand for electric powered ones. For example BMW an Honda has electric models with the same brand however Harley-Davidson has created Livewire for electric. There are also several new brands, some which are founded very recently, focus only on futuristic electric models. Motowatt, Murtas, Pink Mobility are only some of the brands in this category.

From cybersecurity perspective, Category L is an untouched domain. We had the chance to contact the representatives of the well-known brands and also managers of middle and small size brands. The first thing that we have noticed is Category L notion of road vehicles is not commonly known. So before going into the cybersecurity topics we had to explain firstly what was category L and which vehicles were covered by it. Secondly, we informed them about the upcoming UN r155 regulation extension and the consequences of it on the motorcycles. We also explained the cybersecurity management system that needs to be established at organisation level.

Homologation with respect to safety regulations is well-known by all brands as it is an obligation to be able to sell their products. So it is a good path to start the dialogue with Category L OEMs and suppliers. However, a new regulation that enters the game should be presented carefully as the industry is already submerged into numerous regulations.

The Un r155 extension will be voted in June 2024 and the way forward will be defined by the nations themselves with respect to other regulatory texts, national priorities. Nevertheless, it is never early to start cybersecurity activities to optimize the effort and minimize the cost in long term.