Renault Group · Product Owner → Business Owner → Initiative Owner · 2020–2025
UNECE Cybersecurity Transformation for Global Manufacturing
Industrial Cybersecurity · Regulatory Transformation
Specific vulnerability findings and named internal systems are intentionally kept at the process/regulatory-transformation level.
Context
UN Regulations UN-R155 (cybersecurity management) and UN-R156 (software update management) turned vehicle and manufacturing cybersecurity from a technical concern into a regulatory, homologation-grade requirement — across an international manufacturing footprint.
The challenge
Translating UN-R155/UN-R156 regulatory requirements into a Cybersecurity Management System (CSMS) and Software Update Management System (SUMS), across a genuinely cross-functional set of stakeholders — Homologation, Legal, Security, Manufacturing, Quality, Supply Chain, After-Sales, Engineering, Diagnostics and IT — while building the reporting and education needed for vulnerability management to be understood and acted on by non-specialists, up to executive-committee level, and extending the work internationally.
My role
Progressive ownership of the cybersecurity transformation initiative (Product Owner → Business Owner → Initiative Owner), coordinating the regulation-to-operation transformation across all listed functions.
The approach
The work moved regulation into operation: interpreting UN-R155/UN-R156 requirements for a manufacturing context through CSMS and SUMS frameworks, building vulnerability-management practice and dashboards reported up to executive committees, and creating cybersecurity education aimed at non-specialists. Internationally, this included cybersecurity-related contractual work tied to China manufacturing and EV production-line cybersecurity audits carried out in both Europe and Asia.
System architecture
A regulatory-to-operational transformation program (UN-R155/UN-R156) rather than a single technical system — its artifacts are vulnerability-management processes, dashboards and cross-functional governance.
Technologies
- UN-R155 (CSMS)
- UN-R156 (SUMS)
- Vulnerability management
- Vulnerability dashboards
- Industrial cybersecurity audits
Project journey
- Concept
- Prototype
- Validation
- Industrialization
- Deployment
- Scale
My contribution
- Led
- Coordinated
- Deployed
Deployment / industrialization
Reached multi-site / scaled deployment.
Results — business / industrial impact
UN-R155/UN-R156 requirements were translated into operating manufacturing practice across an international footprint, including audits across Europe and Asia and cybersecurity-related contractual work for China manufacturing.
Skills demonstrated
- Regulatory-to-operational transformation
- Industrial cybersecurity
- Executive-level reporting
- Cross-functional governance
- International manufacturing coordination