Case study: Achieving Regulatory Compliance and Driving Market Success with DAF Trucks

17 June 2024

By NCC Group

The blue and red logo of DAF Trucks

NCC Group used expertise in automotive cyber security to ensure that DAF Truck's vehicles meet high standards, protecting against potential cyber threats and facilitating compliance with diverse regional standards.

The Customer

DAF Trucks is a leading technology firm and Europe's top commercial vehicle maker. Known for excellence, it focuses on sustainable transport solutions that surpass customer needs.

With a commitment to employee inspiration and global improvement, their main work involves developing and producing light, medium, and heavy-duty commercial vehicles.

The Challenge

To gain approval for their vehicles from regulatory authorities, DAF Trucks faced the challenge of demonstrating the robustness of their vehicle security measures.

This required strict adherence to cyber security standards required by Approval Authorities, as failure to comply could lead to significant delays or outright denials in the approval process.

The Solution

Using extensive expertise in automotive cyber security, NCC Group guided Approval Authorities in assessing DAF’s vehicle cyber security measures.

This collaboration aimed to streamline the approval process, bolster cyber security assurance for their vehicles, and expand market accessibility by meeting a variety of regional standards.

The Benefits

NCC Group strived to make the approval process easier, enabling smooth navigation and cutting of bureaucratic red tape. The Group's expertise ensures DAF Trucks' vehicles meet top cyber security standards, giving confidence to both the company and its customers.

Additionally, the team helped meet various regional standards, expanding market access for growth opportunities.

Addressing cyber security challenges for regulatory compliance

As vehicles become more reliant on digital systems, safeguarding their security is crucial. DAF Trucks, a leading automotive manufacturer, aimed to protect their vehicles from cyber threats and prove their security to Approval Authorities.

Automotive Original Equipment Manufacturers (OEMs) must undergo two weeks of rigorous testing required by Approval Authorities under Regulation UNR 155 for vehicle homologation, confirming vehicles meet safety, environmental and performance standards before they are allowed on the road.

Compliance is vital to maintain consumer trust and confidence. Failure to do so can result in denial or delays in Vehicle Type Approval, affecting market access and customer confidence. DAF Trucks partnered with NCC Group because of a reputation as experts in automotive cyber security, and the testing and guidance delivered helped them obtain vehicle type approval successfully.

Guiding Approval Authorities in evaluating DAF Trucks' vehicle cyber security

NCC Group experts played a crucial role in supporting Approval Authorities/Technical Services (TS) in evaluating vehicle cyber security measures for DAF Trucks. Given the experience and leadership in automotive cyber security, these experts were well-suited for this collaboration. NCC Group takes pride in offering comprehensive services, including tailored cyber security programs designed specifically for the automotive industry. Additionally, their cyber security solutions are adaptable to meet regional requirements.

Working closely with DAF Trucks' technology partners including the chief technical officer (CTO) and the chief information security officer (CISO), the team guided DAF through:

  • Identifying test units by advising on the selection of Electronic Control Units (ECUs) for testing
  • Assisting in establishing the testing environment, methods, and success criteria
  • Specifying and executing test cases, while managing any anomalies that arose

Leveraging a deep knowledge of automotive cyber security, DAF Trucks benefited from solutions tailored to both international and local markets, including Regulation UNR 155 and ISO/SAE 21434 based test plans, policies and procedures.

Added value for DAF Trucks

This partnership with DAF Trucks offered several key benefits to the client, starting by streamlining the type of approval process for efficiency. Then NCC Group used an expertise in cyber security to ensure that DAF Trucks' vehicles meet high standards, protecting against potential cyber threats. Lastly, by facilitating compliance with diverse regional standards, the NCC Group team helped DAF Trucks access a broader market, enhancing their market accessibility and potential for growth.

The team brought a wealth of expertise to the table, offering a variety of services to support both OEMs and suppliers. From assisting in vehicle development to crafting security elements out of context (SEooC), they provide comprehensive assistance. Group support extends to various areas including item definitions, threat analysis and risk assessment (TARAs), cyber security concept creation, managed detection and response (MDR) implementations, and electron control unit (ECU) hardware teardowns. 

NCC Group ensures regulatory adherence by keeping our clients up to date with the latest cyber security regulations, helping them maintain compliance and stay ahead in the automotive industry.

Achieving regulatory compliance and driving market success

One of the key benefits of the partnership was helping DAF Trucks avoid the consequences of non-compliance. Failure to comply with an Approval Authority's request can lead to denial or delays in Vehicle Type Approval, resulting in the inability to sell that vehicle in the region.

The collaboration between NCC Group and DAF Trucks highlights the critical role of cyber security expertise within the automotive sector. With the testing support, DAF Trucks successfully met the stringent requirements of Approval Authorities, emphasizing the value of such partnerships in achieving regulatory compliance and driving market success.

Get started on your cyber security journey.

Our experts are ready to help you stay ahead in a constantly changing threat landscape. Contact us today to learn more about what NCC Group can do for your organization's unique cyber security needs.