ARAI Becomes India's First Test Agency to Offer Integrated Vehicle Cybersecurity Services

The Automotive Research Association of India (ARAI) has launched a full-spectrum vehicle cybersecurity capability, making it the first test agency in India to offer testing, verification and validation, research and development, and homologation services within a single facility.

The move comes as vehicles increasingly incorporate connected systems and software-defined architectures, which expand the potential attack surface for cyber threats. Cybersecurity has, as a result, become a consideration not only in vehicle design and development but also in regulatory frameworks governing vehicle safety and approval.

In India, this has translated into two automotive industry standards: AIS-189, which sets out requirements for Cyber Security Management Systems, and AIS-190, which addresses Software Update Management Systems. ARAI's capability is structured to help vehicle manufacturers and suppliers demonstrate compliance with both standards through assessment, testing and homologation activities.

ARAI Vehicle Cybersecurity Services: What the Facility Offers

The facility covers a range of services that extend beyond regulatory compliance. These include Vulnerability Assessment and Penetration Testing (VAPT), verification and validation of Threat Analysis and Risk Assessment (TARA) reports, development of Hardware Security Modules (HSM) and Software Security Modules (SSM), XiL-based cybersecurity evaluation, V2X testing, and the tracking and maintenance of Common Vulnerabilities and Exposures (CVE) records. Together, these services are intended to support cybersecurity assurance across the vehicle lifecycle — from development through to post-market support.

The scope of the facility covers vehicles, electronic control units, connected systems and other automotive electronic components. By consolidating testing, R&D, verification, validation and homologation under one roof, ARAI positions itself as a single point of access for manufacturers and suppliers working through the cybersecurity requirements of vehicle development and approval.

About ARAI: Accreditations and Certifications

ARAI was established in 1966 and is affiliated with India's Ministry of Heavy Industries. It is recognised by the Department of Scientific and Industrial Research and holds accreditation from the National Accreditation Board for Testing and Calibration Laboratories (NABL). The organisation is also certified under ISO 9001, ISO 14001, ISO 27001 and ISO 45001:2018. Over six decades, it has provided testing, homologation, certification and R&D services across the Indian automotive sector.

Why Domestic Vehicle Cybersecurity Testing Matters for Manufacturers

The development has relevance beyond individual compliance exercises. Until now, manufacturers requiring specialised vehicle cybersecurity assessments often had to rely on facilities outside India. The establishment of this capability domestically means that a greater share of cybersecurity evaluation and development work can be conducted within the country, with implications for both cost and lead time for manufacturers operating in the Indian market.

The broader context is one of regulatory and technological convergence. As software becomes more central to vehicle function, cybersecurity requirements are being integrated into homologation processes in several markets globally. India's AIS-189 and AIS-190 standards reflect this direction, and ARAI's expanded capability aligns the country's testing infrastructure with that regulatory trajectory.