Kia India Receives AIS 189 and AIS 190 Certifications from ARAI for Vehicle Portfolio

Kia India announced that it has received AIS 189 and AIS 190 “Confirmation of Compliance (CoC)” certifications from ARAI for its vehicle portfolio. The certifications cover compliance with industry requirements for vehicle cybersecurity and software update management. Kia India says the measures are intended to strengthen protection, reliability and confidence in connected vehicles throughout the vehicle lifecycle.

The AIS 189 certification validates Kia India’s Cyber Security Management System. It covers cybersecurity governance, risk assessment, incident management, organisational capabilities and continuous monitoring of cybersecurity risks across the vehicle lifecycle.

The AIS 190 certification validates its Software Update Management System. It covers software update planning, validation, deployment, over-the-air (OTA) package protection, traceability, monitoring and regulatory compliance.

Commenting on the certifications, Atul Sood, Senior Vice President, Sales & Marketing, Kia India, said, “As vehicles become increasingly connected and software-driven, safeguarding the customer’s connected mobility experience is as important as ensuring performance, quality and safety on the road. The AIS 189 and AIS 190 certifications reflect Kia India’s commitment to maintaining robust cybersecurity and software update management practices throughout the vehicle lifecycle. Through these systems, we are strengthening protection, reliability and trust while delivering secure and continuously evolving mobility experiences to our customers.”

According to the company, securely managed OTA updates will allow eligible software updates to be delivered to customers. Validation and monitoring processes are intended to help maintain software integrity and reliability throughout the vehicle lifecycle.

The initiative applies to Kia’s connected, software-enabled vehicles from development and production through post-production support. Kia India says its cybersecurity governance, continuous risk assessment, incident-response preparedness and secure software update management improve its ability to identify, assess and address emerging cyber risks.

The implementation roadmap includes continuous risk monitoring, employee awareness and competency development, internal audits, process improvement initiatives, cybersecurity incident preparedness and ongoing compliance activities.