China opened comment on a vehicle supply-chain cybersecurity standard project

China’s Ministry of Industry and Information Technology published a notice dated September 30 opening comment on 29 recommended national standard projects. The notice is signed by the ministry’s Science and Technology Department and dated September 29, and comment runs to October 29 through the ministry’s standards information service platform.

The attached plan table lists the project that heads the notice as GQCCPZT0289-2026, covering cybersecurity technical requirements and test methods for the intelligent and connected vehicle supply chain. The table records it as recommended rather than mandatory, in the safety category, as a new standard on an 18-month development cycle, led inside the ministry by Equipment Industry Department I and assigned to the National Technical Committee of Auto Standardization. Its drafting units are the China Software Testing Center, the China Automotive Technology and Research Center and Beihang University.

Two further vehicle projects sit immediately below it. GQCCPZT0290-2026 is recorded as an identical adoption of ISO 34505:2025, on scenario evaluation and test case generation for automated driving system test scenarios, on a 12-month cycle, drafted by CATARC with JAC and Yinwang Intelligent Technology. GQCCPZT0291-2026 covers technical specifications for lane centering control systems on a 16-month cycle, drafted by CATARC with Geely Holding Group and Dongfeng Commercial Vehicle. Four later projects in the batch, run through the ministry’s information and communications department, cover internet-of-vehicles service platform quality of service, platform capability interfaces, and C-V2X communication performance and message-layer test methods.

The plan table records each project’s number, title, nature, category, development cycle, lead department, technical committee and drafting units. It contains no requirement text, so what any of these standards will demand is not yet on the public record.