VISITOR COUNT visitor counter
CIRT Banner CIRT BNCAP ASRTU
2026 Cohort  ·  Registration Open  ·  Limited Seats

Certified SUMS
Implementation Professional
(CSIP)

Delivered Jointly by CIRT & Autosifu
Hands-On Labs  ·  AIS-190 & UN R156
May – June 2026  ·  Live Online
SUMS Secure Master Program
₹45,000 + GST
Registration Closes
30 April 2026
Program Starts
08 May 2026
Enquire Now
 Program Timeline

Training Schedule — May & June 2026

Clinic 1
May 8
Day 1
May 9
Clinic 2
May 15
Day 2
May 16
Clinic 3
May 22
Day 3
May 23
Clinic 4
May 29
Day 4
May 30
Clinic 5
Jun 5
Exam
Jun 6
May 2026
Program Kick-off → Training Days 1–4
SunMonTueWed ThuFriSat
1
2
3
4
5
6
7
Friday8 Clinic 1
Saturday9 Training Day 1
10
Monday11Self Study
Tuesday12Self Study
Wednesday13Self Study
Thursday14Self Study
Friday15Clinic 2
Saturday16Training Day 2
17
Monday18Self Study
Tuesday19Self Study
Wednesday20Self Study
Thursday21Self Study
Friday22Clinic 3
Saturday23Training Day 3
24
Monday25Self Study
Tuesday26Self Study
Wednesday27Self Study
Thursday28Self Study
Friday29Clinic 4
Saturday30Training Day 4
31
Monday1Self Study
Tuesday2Self Study
Wednesday3Self Study
Thursday4Self Study
Friday5Clinic 5
Saturday6Final Exam
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
20
Self Study
Days (Mon–Thu)
7.5 hrs
Query Resolution
5 Clinics × 1.5 hrs
20 hrs
Live Training
4 Days × 5 hrs
27.5 hrs
Total Instructor
Contact Hours
Monday – Thursday  Self Study
Friday  Query Resolution Clinic — 1.5 hrs
Saturday  Instructor-Led Training — 5 hrs
6 June  Final Exam — 1.5 hrs
May – June 2026

Implementation Roadmap

21.5h
Live Instructor
Sessions
12.5h
Self-Paced
Video Library
*Accessible during program timeline only
6h
Query Resolution
Clinics
4
Hands-On
Lab Modules
1
Competency Exam
& Certificate
40h
Total Guided
Duration
1
Kick-off
Context & AIS-190 Landscape
2
Technical
OTA Workflows & PKI Design
3
Compliance
RxSWIN & Diagnostics
4
Live Labs
Evidence Pack Assembly
5
Final Exam
CIRT Competency Assessment
Note: All registered participants receive full access to live session recordings, video library, clinic recordings, evidence pack templates, and RxSWIN generation tools.
08 May (Friday) — Program Kick-off  |  09 May (Saturday) — Module 1 · 5 Live Hours

Context, Architecture & Regulatory Landscape

Live Session
  • AIS-190 & UN R156 deep-dive
  • SUMS architecture fundamentals
  • Regulatory approval workflow
  • Program goals & structure overview
  • Pre-reading materials distributed
Self-Study — Week 1
  • Video: Evolution of software updates — dealer to full OTA
  • Video: SUMS lifecycle & decommissioning checkpoints
  • Reading: ISO 21434, UN R155 CSMS & EU Cyber Resilience Act linkages
  • Exercise: Map SUMS with ISO 24089 clause structure
  • Async modules & pre-clinic exercises
Clinic 1 — 15 May (Fri)
  • Architecture clarifications
  • Regulatory mapping doubts resolved
  • Live Q&A with instructors
AIS-190 UN R156 ISO 24089 ISO 21434 EU CRA SUMS Architecture Regulatory Workflow
16 May 2026 (Saturday) — Module 2 · 5 Live Hours

Secure Update Workflow & PKI Infrastructure

Live Session
  • OTA/FOTA pipeline architecture
  • PKI design & key management
  • Cryptographic verification flows
  • Delta update techniques & backend infrastructure
Self-Study — Week 2
  • Video: Backend pipeline — ingestion, storage & distribution
  • Video: A/B partition rollback & bootloader decision logic
  • Exercise: PKI trust chain design with X.509 & HMAC
  • Reading: Delta update techniques — bsdiff & VCDIFF
  • Exercise: CI/CD pipeline for sign, build & deploy
Clinic 2 — 22 May (Fri)
  • PKI implementation clarifications
  • Pre-Day 3 preparation brief
  • Technical deep-dive Q&A on PKI & OTA
FOTA PKI Design OTA Pipelines Cryptography Delta Updates (bsdiff) Backend CI/CD VSOC & Fleet Analytics ASIL Safety
23 May 2026 (Saturday) — Module 3 · 5 Live Hours

Diagnostics, Compliance Mapping & RxSWIN Generation

Live Session
  • RxSWIN table design & generation
  • Rollback mechanisms & validation
  • UDS diagnostics & remote verification (DoIP/SOVD)
  • Compliance gap analysis
Self-Study — Week 3
  • Video: UDS services — DIDs, DTCs & version validation
  • Video: Type Approval evidence structure (AIS-190 & UN R156)
  • Reading: ISO 24089 clause mapping & BPMN workflow modeling
  • Exercise: Draft SUMS evidence pack outline & risk logs
  • Exercise: Hash chains & digital signatures for tamper evidence
Clinic 3 — 29 May (Fri)
  • Pre-lab compliance review
  • Evidence queries resolved
  • Live Q&A with instructors
RxSWIN Rollback Design UDS Diagnostics DoIP & SOVD OBD-II Updates Compliance Mapping
30 May 2026 (Saturday) — Module 4 · 5 Live Hours

Hands-on Labs: Assembling the Type Approval Evidence Pack

Live Lab
  • Flask backend, OpenSSL PKI & ECU update simulation
  • bsdiff delta updates & UDS diagnostics testing
  • SUMS evidence pack assembly
  • Peer review & CIRT auditor Q&A
Self-Study — Week 4
  • Video: End-to-end integration — backend to ECU communication
  • Exercise: Error handling, signature failures & rollback testing
  • Final revision & mock competency test
  • Evidence pack polishing & structure review
Clinic 4 — 05 Jun (Fri)
  • Mock competency test
  • Final evidence pack review
  • Last prep session before exam
Flask REST APIs OpenSSL PKI ECU Simulation bsdiff Delta Updates UDS Diagnostics Evidence Pack Live Labs
06 June 2026 (Saturday) — The Finale: Competency Exam · 1.5 Hours

Certificate Exam

Written Exam
  • Regulatory compliance domain
  • Technical implementation domain
  • Operational & evidence generation
Practical Assessment
  • Exam format walkthrough
  • Final evidence pack review
  • Last-minute clarifications
Certificate Issuance
  • CIRT Certificate of Completion issued
  • Recognised by OEMs & regulators
  • Signed by India's Type Approval Body
Written & Practical Exam CIRT Certificate
The CIRT with AutoSifu Alliance

The Regulator and the Implementer.
Both in the Same Room.

80,000+
Industry Professionals Trained by CIRT
1,800+
Programs Conducted Across India
58 Years
CIRT’s Institutional Authority
CIRT Logo

Central Institute of Road Transport

The Regulator — India’s Type Approval Authority

“We are the Type Approval Body. We issue the certificates. We conduct the audits. We teach what auditors look for — because we are the auditors.”

Type Approval Authority AIS-190 Enforcement Body UN R156 Regulatory Oversight Government of India
AutoSifu Logo

AutoSifu

The Implementer — Production-Deployed SUMS Specialist

“We don’t just read the standard — we build the backend pipelines. Every OTA architecture, every PKI flow, every RxSWIN table we teach has been deployed in production vehicles.”

Production OTA Experience PKI & RxSWIN Specialist SUMS Implementation OEM Audit Submissions
Expert Instructor

Instructor Introduction

Vyshak Suresh
Vyshak Suresh
Director of Cyber Defense — AutoSifu
ISO 21434 Certified ISO 24089 Expert IEC 62443 Specialist IT / OT / IoT Automotive Cybersecurity

Vyshak Suresh has led SUMS compliance implementations for major OEMs and guided teams through AIS-190 and UN R156 submission processes. His expertise spans over a decade across IT, OT, IoT, and Automotive cybersecurity — ISO 21434, ISO 24089, and IEC 62443 frameworks applied in production, not theory.

Every module in this program is drawn from scenarios Vyshak has personally navigated — OTA pipelines, PKI infrastructures, and RxSWIN workflows that are live in vehicles on Indian roads today.

We have already Successfully Completed India's First SUMS Workshop

Participated by India's Top OEMs

10+
OEMs & Tier-1 Suppliers Present
MoRTH
Ministry of Road Transport Represented
CIRT
In presence of Director & Head -Automotive Cybersecurity
India's 1st
SUMS Workshop — Landmark Event
Organisations That Participated
Maruti Suzuki Tata Motors Mahindra & Mahindra Hyundai Motor Honda Cars India Škoda Auto Mercedes-Benz R&D India Stellantis Renault Group Ashok Leyland Maruti Suzuki Tata Motors Mahindra & Mahindra Hyundai Motor Honda Cars India Škoda Auto Mercedes-Benz R&D India Stellantis Renault Group Ashok Leyland

Vyshak’s expertise is unparalleled. His practical insights helped us achieve R156 compliance ahead of schedule — every session mapped directly to our real submission work.

AP
Arjun Patil
Cybersecurity Lead, Tata Motors

The real-world audit experience they bring is something no textbook replicates. We left with documentation we used on our next AIS-190 submission the following week.

SR
Sanjay Rathod
CSMS Engineer, Maruti Suzuki

Having CIRT in the room changes everything. You are not learning what the standard says — you are learning what the approval body actually looks for. That distinction is enormous.

MK
Manish Kumar
OTA Systems Head, Hyundai Motor India

The PKI and RxSWIN labs were directly applicable. My team used the templates within days of the workshop on an active OTA campaign review. The value was immediate.

PP
Priya Pandey
OTA Campaign Manager, Mahindra & Mahindra

First time I’ve attended a program where the instructor has personally submitted the documentation being taught. The gap between theory and execution simply did not exist here.

VN
Vikram Nair
Cybersecurity Engineer, Mercedes-Benz R&D India

Vyshak’s expertise is unparalleled. His practical insights helped us achieve R156 compliance ahead of schedule — every session mapped directly to our real submission work.

AP
Arjun Patil
Cybersecurity Lead, Tata Motors

The real-world audit experience they bring is something no textbook replicates. We left with documentation we used on our next AIS-190 submission the following week.

SR
Sanjay Rathod
CSMS Engineer, Maruti Suzuki

Having CIRT in the room changes everything. You are not learning what the standard says — you are learning what the approval body actually looks for. That distinction is enormous.

MK
Manish Kumar
OTA Systems Head, Hyundai Motor India

The PKI and RxSWIN labs were directly applicable. My team used the templates within days of the workshop on an active OTA campaign review. The value was immediate.

PP
Priya Pandey
OTA Campaign Manager, Mahindra & Mahindra

First time I’ve attended a program where the instructor has personally submitted the documentation being taught. The gap between theory and execution simply did not exist here.

VN
Vikram Nair
Cybersecurity Engineer, Mercedes-Benz R&D India
Register Now Enquire Now