GB 44495-2024, "Cybersecurity Technical Requirements for Whole Vehicles," is a mandatory national standard. Together with GB 44496-2024 ("General Technical Requirements for Vehicle Software Upgrades"), it forms a crucial safeguard for the security of intelligent and connected vehicles. Below is the complete application process and key information.

GB 44495 Certification Core Process:

The GB 44495 certification process typically takes 6-12 months and involves four main stages:

1.Preparation:

·Conduct Gap Analysis and System Establishment.

·Develop Risk Assessment and Mitigation Plans.

2.Testing and Verification:

·External Connection Security Testing.

·Communication Security Testing.

·Software Update Security Testing.

·Data Security Testing.

3.Audit and Certification:

·Submit application materials and undergo audit.

·Receive certification certificate upon approval.

4.Ongoing Surveillance:

·Undergo annual surveillance audits.

·Ensure continued compliance with standard requirements.

  Key Details for Each Stage:

1.Preparation Stage: The primary tasks are establishing the Cybersecurity Management System (CSMS) and completing the Threat Analysis and Risk Assessment (TARA). The CSMS must cover the vehicle's entire lifecycle. Companies must also ensure their legal entity status is valid and meet relevant credit record requirements to avoid being listed as seriously dishonest.

2.Testing and Verification Stage: Vehicles are tested against the standard to validate security measures. Technical requirements focus on external connection security, communication security, software update security, and data security. Pay special attention to data compliance, including prohibitions on direct overseas data transfer and requirements for protecting sensitive personal information.

3.Application, Audit, and Ongoing Surveillance: Submit the application and complete technical documentation to the certification body for audit. After certification, companies must undergo annual surveillance audits and production consistency inspections to ensure ongoing compliance.

  Important Notes:

1.Mandatory Nature and Timeline: GB 44495-2024 is mandatory. Key dates: From Jan 1, 2026, newly applying vehicle types must comply. From Jan 1, 2027, vehicle types with existing approval must comply.

2.System and Certificate Requirements: The core requirement is establishing a CSMS covering the vehicle's entire lifecycle. GB 44495-2024 should be used in conjunction with GB 44496-2024.

3.Application Document Preparation: Mandatory product certification generally requires basic documents like applicant proof, general assembly drawings, electrical schematics, wiring diagrams, lists of critical components and/or main raw materials. For specific requirements, consult your chosen designated certification body, such as Lanya.

We hope this information helps you plan your GB 44495 certification application. If you have further questions about specific parts of the process, BLUEASIA Technology: 13534225140, provides professional certification consulting services!