Interface agreements (CIA)
Who does what on cybersecurity between you and the OEM: responsibilities, information exchange, vulnerability handling. Template and register are in the catalogue.
Tier 1 and Tier 2 suppliers
R155 for suppliers: give the OEM the evidence it needs, before it asks.
R155 type approval belongs to the manufacturer, but the manufacturer must prove it manages its suppliers' risks. So questionnaires, interface agreements and TARA land on your desk. Omolia helps you answer with an orderly process.
TARA and risks
A documented, up-to-date risk assessment, with a register the OEM can find among its evidence.
The supplier portal
If your customer uses Omolia, you deliver firmware and evidence in its reserved space, without seeing the rest of its data.
From the platform · Regulatory coverage
Where the supply chain enters the R155 matrix
The R155 requirements that involve suppliers and the catalogue documents covering them: supplier procedure, questionnaire and interface agreement, registers.
Each cell tells whether that document covers the requirement and what state it is in. A row with no documents turns red: you know what is missing before the audit.
| Requirement | MAN-CSMS-00 · CSMS manual | PRO-CSMS-04 · TARA procedure | PRO-CSMS-08 · Supplier management | MOD-CSMS-03 · Supplier questionnaire and CIA | REC-CSMS-01 · Risk and TARA register | REC-CSMS-04 · Supplier and CIA register |
|---|---|---|---|---|---|---|
| 7.2.2.2.bIdentifying risks for vehicle types | – | – | – | |||
| 7.2.2.5Managing supplier dependencies | – | – | ||||
| 7.3.2Supplier-related risks for the vehicle type | – | – | ||||
| 7.3.3Vehicle type risks assessed and treated | – | – | – | – |
ApprovedDraft or in reviewTo updateNot generated yetReal catalogue coverage, example document states.
19 more requirements and 24 more documents in the full matrix.
Explore it in a demoFAQ
Frequently asked questions
Can a supplier be R155 certified?
No: the CSMS certificate of compliance and the type approval belong to the manufacturer. The supplier proves its contribution with processes, agreements and evidence, often requested in line with ISO/SAE 21434.
What is the difference between R155 and ISO/SAE 21434?
R155 is the regulation: it says what the manufacturer must prove. ISO/SAE 21434 is the engineering standard describing how to do cybersecurity across the vehicle life cycle. Omolia brings both together.
What does an OEM usually ask a supplier for?
A questionnaire on your cybersecurity process, an interface agreement splitting responsibilities, the parts of the TARA that concern your component and how you will handle vulnerabilities after production.
Contact
Tell us about your programme
Request a demo, a quote or simply information. We will reply within two working days.
- A demo on your vehicle types and regulations
- A proposal sized on your modules and users
- Support for onboarding and data migration