Alexander Dennis has announced that its Cyber Security Management System (CSMS) has received re-certification, whilst its Software Update Management System (SUMS) has also been certified.
Both systems have been certified by the United Kingdom’s Vehicle Certification Agency (VCA) in full accordance with UNECE Regulations 155 and 156, respectively.

The re-certification of the company’s CSMS follows an audit by VCA experts that evaluated Alexander Dennis’s documents, tools, templates and processes against requirements of the regulation, as well as interviews with key members of staff involved in the operation of all processes.
ISO/SAE 21434 was also utilised in the development of the CSMS, following recognised industry practices.
Alongside re-certification for its CSMS, the company’s SUMS has received initial certification after an in-depth audit by the VCA, which was been underpinned by using ISO 24089 on software update engineering for road vehicles during its development.
SUMS allows Alexander Dennis to both develop and maintain software used on its buses to increase functionality, whilst ensuring safety and cybersecurity is fully taken into account. The system also helps ensure that both the company and its zero-emission buses are prepared for the future.
Chris Gall, Group Engineering Director for Alexander Dennis, said:Achieving certification under UNECE Regulations 155 and 156 is a significant milestone that reflects our unwavering commitment to cybersecurity and software integrity.
We are proud to have put robust cybersecurity and software update management systems in place and have their compliance recognised by the VCA. This gives us a solid framework to protect our and our customers’ data, assets and technology.








