Source Documents & Parsing

# 1001379436_P10_000_01_RDDM-1140152501-1744 <!-- source_pdf: 1001379436_P10_000_01_RDDM-1140152501-1744.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> Document type Title Issue SPECIFICATION General cybersecurity requirements 2.0 Approver File name Approval date Wallebring Jörgen RDDM-1140152501-1744.docx 2021-06-30 Issued by/Issued by department Status Page/Sida Marcus Lindner EPXC Published 1(16) Contents General cybersecurity requirements ............................................................................ 1 1. Introduction ......................................................................................................... 3 1.1. Summary ...................................................................................................... 3 1.2. Target reader ................................................................................................ 3 1.3. Definition of terms ....................................................................................... 3 1.4. Abbreviated terms ....................................................................................... 3 1.5. Naming conventions ................................................................................... 4 2. General cybersecurity requirements................................................................. 5 2.1. Development process ................................................................................. 5 2.1.1. Cybersecurity methods and strategies .................................................. 5 2.1.2. Risk assessment ...................................................................................... 5 2.1.3. Cybersecurity concept ............................................................................ 5 2.1.4. Verification and validation ...................................................................... 6 2.1.5. Documentation ......................................................................................... 6 2.2. System requirements .................................................................................. 7 2.2.1. Software security ..................................................................................... 7 2.2.2. Security architecture ............................................................................... 7 2.2.3. Cryptographic libraries ............................................................................ 7 2.3. Communication requirements .................................................................... 8 2.3.1. Services .................................................................................................... 8 2.3.2. Interfaces .................................................................................................. 8 2.4. Information security .................................................................................... 8 2.5. Key management ......................................................................................... 9 2.6. Cybersecurity lifecycle ................................................................................ 9 2.6.1. Security updates ...................................................................................... 9 2.6.2. Incident management ............................................................................ 10 To ( official workplace

# 3299216_1 <!-- source_pdf: 3299216_1.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> TECHNICAL PRODUCT DATA 3299216 Requirements Specification Requirement specification for ECA Approved by Information Classification Internal Introduced ECO 801763 Issued by Patrik Hård Checked 1 agaox2 Checked 2 Revision 1 Status P Approved Date 2026-05-08 Page 1 (61) No. of classified requirements, STD3944 <C>; <M>; No. of regulations, STD4178 <L>; Requirements Specification Requirement specification for ECA N.B. The copyright and ownership of this document including associated computer data are and will remain ours. They must not be copied, used or brought to the knowledge of any third party without our prior permission. © Scania CV AB, Sweden SV 1744 01-06 (2006-11-16) ## Page 2 <!-- page: 2 --> TECHNICAL PRODUCT DATA 3299216 Requirements Specification Requirement specification for ECA Issued by Patrik Hård Checked 1 agaox2 Checked 2 Information Classification Internal Status P Revision 1 Page 2 (61) N.B. The copyright and ownership of this document including associated computer data are and will remain ours. They must not be copied, used or brought to the

# CVS123-2 <!-- source_pdf: CVS123-2.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> COMMERCIAL VEHICLE STANDARD MAN Truck & Bus SE / Scania CV AB / International Motors, LLC / Volkswagen Truck & Bus Indústria e Comércio de Veículos Ltda Release date 2025-08 CVS123-2 Info class Internal Technical responsibility Standardisation organisation Continuation page 1 to 53 Platform EE Architecture, TGRESA TRATON Standardization, TGRMHPS Replacement for: ./. Distribution: This Commercial Vehicle Standard is distributed at all involved brands of TRATON Group internally and externally to relevant suppliers via Supplier Portals of the involved brands. TRATON Software Update Variant 2 (SUV2) sequence Foreword This Commercial Vehicle Standard (“CVS123-2”) contains requirement specifications for TRATON Group and may be referred to by any of its commercial vehicle Affiliates. Any review of this CVS123-2 shall only be done in agreement with the involved TRATON Group commercial vehicle Affiliates stated in the table below under section “Technical responsibility”. In this CVS123-2, all non-company standards are referred as international standards (e.g.: ISO, EN). These international standards are available as national edition at the

# CVS124 <!-- source_pdf: CVS124.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> COMMERCIAL VEHICLE STANDARD 2025-12 Edition 2 CVS124 Info class Internal ICS: 19.040*29.060*29.120*29.140*35.240*43.040 TRATON GROUP Standardization, TGRMHPS Continuation page 1 to 90 Technical responsibility Distribution: System Architecture GER, TGRESA1 System Architecture SWE, TGRESA2 System Architecture US, TGRESA3 This Commercial Vehicle Standard is distributed internally within TRATON GROUP and also externally to relevant Suppliers via Supplier Portals. Replacement for: – Notice All rights reserved according to ISO 16016. The reproduction, distribution and utilisation of this document as well as the communication of its contents to others without express authorisation is prohibited. Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a patent, utility model or design. The User shall apply the latest version of this CVS124. Latest version is the electronic issue distributed by the respective standardisation organisations and if applicable the respective Supplier Portals. TRATON Specification on Unified diagnostic Services (UDS) requirements ## Page 2 <!-- page: 2 --> COMMERCIAL VEHICLE STANDARD CVS124:2025-12

# CVS151 <!-- source_pdf: CVS151.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> COMMERCIAL VEHICLE STANDARD MAN Truck & Bus SE / Scania CV AB / International Motors, LLC / Volkswagen Truck & Bus Indústria e Comércio de Veículos Ltda Release date 2025-08 CVS151 Info class Internal Technical responsibility Standardisation organisation Continuation page 1 to 27 Platform EE Architecture,TGRESA TRATON Standardization, TGRMHPS Replacement for: ./. Distribution: This Commercial Vehicle Standard is distributed at all involved brands of TRATON Group internally and externally to relevant suppliers via Supplier Portals of the involved brands. RBAC for diagnostics Foreword This Commercial Vehicle Standard (“CVS151”) contains requirement specifications for TRATON Group and may be referred to by any of its commercial vehicle Affiliates. Any review of this CVS151 shall only be done in agreement with the involved TRATON Group commercial vehicle Affiliates stated in the table below under section “Technical responsibility”. In this CVS151, all non-company standards are referred as international standards (e.g.: ISO, EN). These international standards are available as national edition at the respective national standardisation organisation (e.g.:

# CVS154 <!-- source_pdf: CVS154.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> COMMERCIAL VEHICLE STANDARD MAN Truck & Bus SE / Scania CV AB / International Motors, LLC / Volkswagen Truck & Bus Indústria e Comércio de Veículos Ltda Release date 2025-08 CVS154 Info class Internal Technical responsibility Standardisation organisation Continuation page 1 to 15 Platform EE Architecture, TGRESA TRATON Standardization, TGRMHPS Replacement for: ./. Distribution: This Commercial Vehicle Standard is distributed at all involved brands of TRATON Group internally and externally to relevant suppliers via Supplier Portals of the involved brands. Data Security Container base definition Foreword This Commercial Vehicle Standard (“CVS154”) contains requirement specifications for TRATON Group and may be referred to by any of its commercial vehicle Affiliates. Any review of this CVS154 shall only be done in agreement with the involved TRATON Group commercial vehicle Affiliates stated in the table below under section “Technical responsibility”. In this CVS154, all non-company standards are referred as international standards (e.g.: ISO, EN). These international standards are available as national edition at the respective national

# CVS31 <!-- source_pdf: CVS31.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> COMMERCIAL VEHICLE STANDARD 2025-12 Edition 2 CVS31 Info class Internal [Keywords] TRATON GROUP Standardization, TGRMHPS Continuation page 1 to 31 Technical responsibility Distribution: Platform EE Architecture, TGRESA This Commercial Vehicle Standard is distributed internally within TRATON GROUP and also externally to relevant Suppliers via Supplier Portals. Replacement for: CVS31: 2025-08 Notice All rights reserved according to ISO 16016. The reproduction, distribution and utilisation of this document as well as the communication of its contents to others without express authorisation is prohibited. Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a patent, utility model or design. The User shall apply the latest version of this CVS31. Latest version is the electronic issue distributed by the respective standardisation organisations and if applicable the respective Supplier Portals. . Authentication 0x29 ## Page 2 <!-- page: 2 --> COMMERCIAL VEHICLE STANDARD CVS31:2025-12 Internal Page 2 (31) Contents Contents ................................ ................................ ................................ ................................ 2 1 Scope

# CVS32 <!-- source_pdf: CVS32.pdf --> <!-- ocr_used: false --> ## Page 1 <!-- page: 1 --> COMMERCIAL VEHICLE STANDARD 2026-03 Edition 2 CVS32 Info class Internal ICS: 19.040*29.060*29.120*29.140*31.220*35.240*43.040 TRATON GROUP Standardization, TGRMHPS Continuation page 1 to 29 Technical responsibility Distribution: Plattform EE Architecture, TGRESA This Commercial Vehicle Standard is distributed internally within TRATON GROUP and also externally to relevant Suppliers via Supplier Portals. Replacement for: CVS32: 2025-08 Notice All rights reserved according to ISO 16016. The reproduction, distribution and utilisation of this document as well as the communication of its contents to others without express authorisation is prohibited. Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a patent, utility model or design. The User shall apply the latest version of this CVS32. Latest version is the electronic issue distributed by the respective standardisation organisations and if applicable the respective Supplier Portals. SecuredData Transmission 0x84 Version 2.0.0 (Major.Minor.Patch) ## Page 2 <!-- page: 2 --> COMMERCIAL VEHICLE STANDARD CVS32:2026-03 Internal Page 2 (29) Foreword This CVS32 contains requirement