New Delhi: Kia India has received Confirmation of Compliance (CoC) certifications from the Automotive Research Association of India (ARAI) for AIS 189 and AIS 190, covering cybersecurity management and software update management systems across its vehicle portfolio. The certifications mark an important step in the automaker’s efforts to strengthen digital security as vehicles become increasingly connected and software-dependent.
The certifications address two critical aspects of modern automotive technology: protecting vehicles against cybersecurity threats and ensuring that software updates, including eligible over-the-air (OTA) updates, are managed through secure and reliable processes.
With connected features becoming commonplace in passenger vehicles, manufacturers face growing responsibilities that extend beyond traditional mechanical engineering. Software security, data protection and update management are increasingly important components of the ownership experience.
What AIS 189 and AIS 190 Certifications Mean
The AIS 189 certification validates Kia India’s Cyber Security Management System (CSMS), which establishes processes for identifying, assessing and managing cybersecurity risks throughout a vehicle’s lifecycle.
The framework covers cybersecurity governance, risk assessment, incident management, organisational capabilities and continuous monitoring of potential security threats. These measures are intended to help the manufacturer identify vulnerabilities and respond to emerging risks during development, production and post-production support.
Meanwhile, the AIS 190 certification validates the company’s Software Update Management System (SUMS), which governs how vehicle software updates are planned, tested, deployed and monitored.
Its scope includes software validation, OTA package protection, update traceability, regulatory compliance and monitoring procedures designed to maintain software integrity.
Together, the two certifications establish compliance with management-system requirements intended to support secure vehicle software operations.
Secure OTA Updates and Connected Vehicle Ownership
For Kia customers, the certifications are intended to strengthen confidence in connected vehicle features and software-related services.
One of the key areas is the management of over-the-air software updates, which can allow eligible vehicle software to be updated remotely without requiring a conventional workshop visit for every supported update.
However, OTA functionality and update eligibility remain dependent on the particular vehicle and software involved.
Kia said its software update management processes incorporate validation, deployment controls and monitoring to help maintain reliability throughout the vehicle lifecycle.
The growing importance of these safeguards reflects a broader shift in the automotive industry. Cars are no longer defined solely by engines, transmissions and mechanical components; software increasingly influences how they operate and how their features evolve over time.
Kia India Highlights Cybersecurity Commitment
Commenting on the certifications, Atul Sood, Senior Vice President, Sales & Marketing, Kia India, said:
“As vehicles become increasingly connected and software-driven, safeguarding the customer’s connected mobility experience is as important as ensuring performance, quality and safety on the road. The AIS 189 and AIS 190 certifications reflect Kia India’s commitment to maintaining robust cybersecurity and software update management practices throughout the vehicle lifecycle. Through these systems, we are strengthening protection, reliability and trust while delivering secure and continuously evolving mobility experiences to our customers.”
The company said its approach extends across the vehicle lifecycle, from initial development and manufacturing to post-production support.
It includes cybersecurity governance, continuous risk assessment, incident-response preparedness and secure software update procedures aimed at identifying and addressing emerging digital threats.
Continuous Monitoring and Internal Audits Planned
Kia India’s implementation roadmap includes several ongoing measures intended to maintain compliance and strengthen its internal cybersecurity capabilities.
These include continuous risk monitoring, employee awareness programmes, competency development, internal audits, process improvements and cybersecurity incident preparedness.
The company also plans to undertake continuing compliance activities as connected vehicle technologies evolve.
Such systems are becoming increasingly relevant as automakers introduce more connected functions and software-enabled services. Maintaining security is not a one-time exercise, particularly when vehicles may receive updates throughout their operational lives.
Cybersecurity Becomes a Key Part of Automotive Safety
Kia India’s AIS 189 and AIS 190 certifications reflect the automotive industry’s growing emphasis on cybersecurity and software governance alongside conventional vehicle performance, reliability and safety.
Although management-system certification does not eliminate every possible digital vulnerability, it provides a structured framework for identifying risks, managing updates and responding to security incidents.
As connected vehicles become more widespread in India, the ability to maintain secure and reliable software throughout a vehicle’s lifespan is likely to play an increasingly important role in customer confidence. After all, modern car ownership is no longer just about what happens under the bonnet, but also about what happens behind the screen.
