India’s first vehicle cybersecurity standard AIS 189: What it means for the Auto Industry

The Indian automobile sector is about to witness another regulatory shift, as the government has been planning to roll out AIS 189, the country’s first mandatory vehicle cybersecurity standard. This move is expected to change how vehicles are designed comprehensively. Beyond production, these changes will also impact how cars are tested and sold, as cars are becoming increasingly connected.

The upcoming regulatory framework, AIS 189, is modelled on global frameworks such as the UN R155 vehicle cybersecurity regulation. AIS 189 will make cybersecurity approval a pre-requisite for the launch of new vehicles in India. Implementation could begin for new models by October 2027, with full compliance for new models by the next year.

More from Auto

The new regulation will bring India in line with major automotive markets that have already made cybersecurity mandatory. The European Union established R155 in 2022, while China introduced a similar framework in 2024. With more than 60 countries recognising UNECE vehicle regulations, cybersecurity compliance is no longer optional for automakers.

What will change for automakers

At the core of the new AIS 189 is a cybersecurity management system, a structured matrix that will cover everything from risk assessment to incident response. In parallel, this cybersecurity management system also requires software update management systems, ensuring secure delivery of over-the-air updates to vehicles and workshop software fixes.

These rules will help manufacturers shift to a continuous cycle of cybersecurity oversight throughout a vehicle’s lifecycle. It is possible that, in the short term, the adoption of AIS 189 increases compliance costs for automakers and suppliers. The new regulations are expected to create a new market for cybersecurity services in India, increasing consumer trust in connected vehicles, a segment that is expected to grow rapidly in the coming years.

Early movers vs late adopters

Manufacturers who plan to invest early on might be able to gain a competitive edge, not just in India but across global markets. AIS 189 is more than just a compliance requirement; it signals a broader transition in the auto industry from mechanical engineering dominance to a future where software security is critical.