Automotive Cybersecurity & Vehicle Regulations
Be ready before 2027 – and be able to build it.
AIS-189 and AIS-190 become enforceable in India from 2027. This cohort takes you from the standards to working implementation: cryptography in C, HSM and secure boot, AUTOSAR security configuration, a full TARA and audit-ready evidence.
The compliance wave is here. Most engineers can quote the standard – few can implement it.
From 2027, AIS-189 and AIS-190 cybersecurity compliance become enforceable for vehicles in India, and every OEM and Tier-1 will need engineers who understand UN-R155 and R156, ISO/SAE 21434, TARA and CSMS. But the gap senior engineers keep telling us about is not awareness – it is implementation. Most courses stop at the theory: you finish knowing what a TARA or an HSM is, but you have never encrypted a CAN payload, verified a signed boot image or configured a SecOC-protected PDU.
This cohort closes that gap. Every week pairs the concepts with a guided lab, so you leave with code, configurations and work products you built yourself – and the vocabulary to defend them in a design review or a homologation audit.
What you’ll walk away able to do
- Implement AES encryption/decryption, CMAC and digital-signature verification in C, and explain when each is the right control
- Explain how an HSM, secure boot, secure flashing and key management create a vehicle chain of trust
- Configure the AUTOSAR Classic crypto stack and SecOC, and map the equivalent services on AUTOSAR Adaptive
- Run a complete TARA on a real ECU item and turn it into cybersecurity goals, requirements and controls
- Explain UN-R155 / R156 and AIS-189 / AIS-190, and assemble the evidence an OEM or supplier needs for audit and type approval
- Walk into a TÜV / SAE certification exam or an architect interview with the syllabus already covered and practised
Who it’s for
Built for practising engineers.
- A technical lead or senior engineer (8-15+ years) preparing to step into a security or technical architect role, who needs hands-on depth – not just slides
- A practising embedded or AUTOSAR engineer who wants to move into the fast-growing cybersecurity and compliance niche
- A testing or validation engineer looking to step up into security testing and software roles
- An engineering team lead who has to run 21434-compliant projects and face CSMS and type-approval audits
- An experienced engineer returning after a career break, re-entering on a high-demand, future-proof skill
Probably not for you if: you have no engineering or embedded background at all. You will need working C and basic comfort with a Linux terminal.
Six weeks, built from a delivered OEM programme – with a lab every week
The ten modules we delivered to Maruti Suzuki engineers are all still here, re-paced for engineers working a full-time job and extended with the implementation depth senior engineers asked for.
Foundations, threats & your lab bench
Why cybersecurity entered automotive, CIAAA properties, attack trees and the standards landscape. The threat landscape – CAN injection, replay, spoofing, telematics and remote attacks – and why physical vs remote attack surfaces change your controls.
Applied cryptography for embedded engineers
AES and its modes (ECB, CBC, CTR, GCM), SHA-2, CMAC and HMAC, RSA and ECC signatures, random numbers and key management basics – what each protects, what it costs on an ECU, and the classic implementation mistakes.
HSM, secure boot & the chain of trust
HSM and SHE / EVITA-class security modules, secure key storage, secure boot from ROM to application, secure flashing and update authenticity (R156), debug-port protection, and diagnostic access control with UDS 0x27 and 0x29.
Security in AUTOSAR Classic & Adaptive
Classic: the crypto stack (CSM, CryIf, Crypto Driver), SecOC with freshness values and authenticators, KeyM. Adaptive: ara::crypto, Identity and Access Management, and the Intrusion Detection System Manager. Security use cases and defence in depth.
ISO/SAE 21434, CSMS & TARA end to end
ISO/SAE 21434 work products across the lifecycle, UNECE R155 / R156, CSMS and the OEM-supplier interface agreement. Risk management and TARA. Post-development: monitoring, vulnerability and incident response, decommissioning.
Vehicle regulations, homologation & audit readiness
MoRTH and UNECE, the Indian framework (AIS-189 / AIS-190, CMVR, ARAI, ICAT), certification and type approval, global regulations (UNECE, FMVSS, GTRs), and how regulation shapes design, validation and homologation testing.
Want the full module-by-module detail? Download the brochure →
How the hands-on part actually works
A ready-to-run virtual lab on your own laptop, a starter repository and step-by-step guide for every lab, a stretch challenge, and a review in the next live session.
Open-source toolchain
Free tools that stay yours after the cohort.
Industry stacks – demonstrated
Where it adds value we demonstrate the same configuration on a commercial AUTOSAR toolchain (for example Electrobit tresos), so you recognise the workflow you will meet on the job. Commercial tool access depends on vendor licensing and is not required for any lab.
Built to prepare you for industry certification
Companies get audited against ISO/SAE 21434; individuals prove their competence with professional credentials. Our syllabus and Week 6 practice exam are mapped to the knowledge areas of the leading programmes.
| Credential | Issued by | What it covers |
|---|---|---|
| Automotive Cybersecurity Professional (ACP) Level 1 Foundation · Level 2 Advanced Engineering | CYRES Consulting framework, certified by TÜV Rheinland | ISO/SAE 21434 and UN-R155 aligned; online proctored exam after the matching ACP training. Details |
| Automotive Cybersecurity Certification Level One · Level Two | SAE International with TÜV SÜD | Fundamentals, UNECE WP.29 and ISO/SAE 21434, TARA, V&V, quality and risk management. Details |
| Certified Automotive Cybersecurity Practitioner (CACSP) | TÜV SÜD | ISO/SAE 21434, TARA, cryptography and key management, hardware security, secure communication, diagnostics and boot. Details |
Micromotiv is independent and not affiliated with CYRES, TÜV Rheinland, SAE International or TÜV SÜD. The cohort prepares you for the knowledge areas these programmes assess; it does not replace any provider’s mandatory training. Exam registration, eligibility and fees are handled directly with each body.
Delivered to 12 Maruti Suzuki engineers through L&T EduTech. L&T’s own Day 2 learner feedback scored 4.42 out of 5, and our post-programme survey returned an NPS of +42 with zero detractors.
What you get
- Live online cohort plus all session recordings
- Micromotiv Labs virtual lab, starter code and six guided labs
- A participant workbook for every module
- Net practice – drills, assignments, quizzes and feedback on your work
- Certification practice exam and syllabus map
- SME guest lectures from industry practitioners
- Accountability pods and a private learner community
- Live Q&A sessions and LMS access
- Micromotiv Certificate of Completion
- Founding-member perk: 30% founding-cohort discount
Founding batch pricing
Cohort 2 price (code COHORT2 at checkout) for the 2 November 2026 cohort · enrolment closes 1 November.
7-day money-back guarantee
Attend the first week. If the teaching style is not right for you, email us within 7 days of the first class for a full refund – no questions asked.
Paying in instalments? Ask us about a two-part instalment plan on the strategy call.
Zakir Ahmed
Founder & Chief Instructor, Micromotiv
12 years building automotive embedded software, with deep expertise in functional safety (ISO 26262), automotive cybersecurity, embedded software development and testing, ASPICE, AUTOSAR, vehicle communication (CAN, FlexRay, LIN, Ethernet) and vehicle diagnostics. Previously at Delphi, Veoneer, Aptiv and Mercedes-Benz R&D India. Zakir has delivered this material as corporate training to OEM engineering teams – most recently to Maruti Suzuki engineers through L&T EduTech – and now opens it to individual engineers, extended with the labs they asked for.
The 2027 mandate is not waiting.
A small founding cohort, taught by a practitioner who has delivered this material inside an OEM – and who will make you build it, not just memorise it. Book a call and we’ll work out whether it is the right next six weeks for you.
Book a free 30-minute strategy call