EU and China Quality Bridge: A Roadmap of international norms and INTACS and ASQMS
Abstract: The automotive industry is currently undergoing dramatic changes and innovations. To realize the electrification of vehicles, and the development of SDVs (Software Defined Vehicle) and AIDVs (AI Defined Vehicle) a number of collaborations are emerging that involve Europe and China together. Instead of acting only as competitors, effective partnerships are required. However, there are differences in the understanding and use of norms and requirements for the certification of software in vehicles and the level of safety and security to build into vehicles. Also there are different scenarios that require a joint understanding: (1) a European OEM contracts a Chinese supplier, (2) a European OEM or supplier wants to offer services in China, (3) a Chinese OEM wants to launch vehicles in Europe, (4) a Chinese OEM works together with suppliers in Europe. The QMBB (Quality Management Bridge Builders) group under the ASA was formed to perform an analysis of different perspectives and the differences between relevant norms. For a first analysis, representatives from ASQMS (China view), INTACS/ASPICE, and experts for IATF 16949 and ISO 21434 and ISO PAS 5112 and ISO 26262 have been invited. Where helpful, additional norms were invited. The key note will also highlight the new integration of AI engineering and data engineering into this reference landscape via a coupled W-model, linking machine learning development with data lifecycle management. The resulting model supports development, manufacturing, and service contexts while enabling delta-based auditing and improved global interoperability, particularly for EU–China collaboration.
Lars Dittmann is iNTACS e.V. Vice President and Managing Director. He was spokesman of HIS working group and leader of VDA AK13. He has experience in various automotive OEM areas has done more than 50 assessments.
Dr Wolfgang Rainer Wagner has more than 40 years of experience in Automotive, and had/has leading positions, such as Founder / General Manager VDA-QMC China Association of German Car Industry (2005...2008), ACCU X-Tech (Hong Kong, Suzhou, Munich) CEO and CACPQSP Automotive Workgroup, International Representative since 2021, and he is currently the acting managing director of the ASQMS Germany GmbH. He has more than 15 years experience in leading positions to establish China and Europe co-operations.
Implementing Security Framework for Limited Resources IoT Environment via Smart Gateways
Abstract: The widespread deployment of Internet of Things (IoT) systems in resource-constrained environments introduces significant cybersecurity challenges, particularly when heterogeneous devices must communicate securely through centralized aggregation points. This talk presents the design and implementation of a security-enabled smart multi-protocol gateway tailored for limited-resource IoT environments. The proposed gateway integrates concurrent support for multiple low-power wireless protocols—including BLE, Zigbee, LoRa, and Wi-SUN—while embedding a systematic cybersecurity framework selected through Analytic Hierarchy Process (AHP) multi-criteria decision-making. The NIST Cybersecurity Framework (CSF) v2.0 is implemented and mapped to specific gateway operations, addressing critical risks such as long-term key compromise, lack of mutual authentication, unsigned firmware, and denial-of-service vulnerabilities. A comprehensive risk assessment using CVSS v3.1 scoring identifies and prioritizes 30 security outcomes across the Identify, Protect, Detect, Respond, and Recover functions. Cryptographic benchmarking on Raspberry Pi CM5 hardware compares WolfSSL and MbedTLS libraries, demonstrating that ECC-based operations and symmetric encryption achieve feasible performance with execution times under several milliseconds and moderate memory footprints. Furthermore, AI is used on the gateway to optimize the network performance and optimize the communication slot. Experimental evaluation validates the gateway's ability to perform mutual authentication, encrypted data forwarding, and secure data exchange updates without disrupting real-time communication. A structured risk-based framework will be presented to show the deployment on resource-constrained edge hardware, bridging the gap between comprehensive cybersecurity standards and the operational limitations of low-power IoT environments.
Dr. Ahmed Soltan is an Associate Professor in the Electronics and Computer Engineering Program at Nile University and Director of the Nanoelectronics Integrated System Design Research Center (NISC). He earned his B.Sc., M.Sc., and Ph.D. degrees from Cairo University and received the university’s Best Thesis Award for his Ph.D. research in fractional-order circuits and systems. His research focuses on smart energy harvesting, biomedical implantable devices, lab-on-chip systems, embedded systems, and fractional-order modeling for biomedical applications. He has published more than 100 research papers with a Google Scholar H-index of 23. Dr. Soltan received Egypt’s State Encouragement Award in 2019 and is a Fellow of both the Royal Academy of Engineering’s Leaders in Innovation Fellowship (LIF) program and the Higher Education Academy (UK). He has secured over £10 million in research funding and serves as a consultant in embedded systems and system integration for industry partners in Egypt and abroad.
China Speed – The 5 Dimensions of the Systemic Approach for China Speed
Abstract: Very often in the automotive product development community; China Speed is understood as being fast, but not accurate. Speed is achieved by shortening the product development cycle, by deleting process steps and therefore results will be developed products with higher risks and failing regarding required quality ! For being able to compete in product development with China Speed, first China Speed needs to be completely understood and second, learnings should be identified and probably adapted. To understand China Speed, interviews were taking in place with Managers and Leaders of Chinese automotive supplier and Chinese nonautomotive OEMs (Original Equipment Manufacturer). The interviews were giving a complete picture of China Speed and could be clustered in 5 dimensions gaining a systemic approach. Parts of this approach can be identified as transferable leanings for adapting, also in other environments and cultures.
Martin Brett Vice President of Engineering, Robert Bosch GmbH, Germany
Martin Brett is a Vice President at the Bosch Group (Robert Bosch GmbH). He has held significant executive and engineering leadership roles within the company, notably serving as a Vice President for Bosch Engineering Systems in China and for Bosch Global Software Technologies in India.His career and contributions at Bosch include:
Executive Leadership: He has acted as a key regional executive, driving innovation management, strategic operations, and technology development for Bosch in Asia.
Industry Representation: He frequently serves as a keynote speaker and representative for Bosch at major technology and automotive events, presenting on topics like embedded systems, vehicle safety electronics, and EU up-skilling strategies within the automotive ecosystem.
Regulatory Compliance: Due to his high-level management position, he is formally listed as a corporate executive for Bosch's subsidiary branches in global equipment filings, such as FCC submissions for Connectivity Control Units (CCU)
Innovate or Perish - Why Structured Innovation and Innovation Capability are Required in Europe
Abstract:
In the last 30 years Europe became a comfort zone with a feeling of safe and secure working environments, stable growth, constant increase of salaries and so forth. In the last years it has become visible that in the competition with other continents like China (especially in the electrification of vehicles and battery Systems) Europe started to lose the innovation challenge, then in 2022 war started in the East and suddendly disruptive innovation and high-speed structured innovation became required to sustain Europe's position. Also, while the ASPICE assessments are very effective for series projects, their quality effort is too much for pre-development and therefore a Potential Analysis was created, and ASPICE assessments would kill Innovation Analysis efforts in a very early phase of innovation, distracting engineers from inventing new patents or trying different solutions before a fixed solution becomes the basis for a pre-development. So while in Europe the quality increased the speed of development in China increased. What is the answer to this? How to create then a structured Innovation in European Industry? What are the highlights of the new ISO 56000 Innovation norm and how to interpret this for the innovation departments in automotive industry? What are required best practices to grow in the speed of innovation and meet a China Speed?
Dr Richard Messnarz He was one of the developers of the first European process capability assessment model BOOTSTRAP (1989 - 1993). He was working at IICM / TU Graz in Austria (till 1997) where parts of the Internet protocol were developed before being made available to the public (the image transmission). And in 1993 he published the first article predicting the concept of virtual teams and companies in the Internet, which is now reality. In 1997 he published a book in IEEE (Better Software Practice for Business Benefit) in which there is a chapter about software engineering paradigms predicting that we will have non-deterministic functions in the future and this is now reality with AI. In 1994 he founded the EuroSPI conference series which is still there. And in 2003 - 2005 he led the EU Project ORGANIC developing an innovation model for core competence analysis and this concept is now used by many companies. In the years 2009 - 2012 together with Grenoble University he developed in an EU Project Researcher-Entrepreneur a training to empower young engineers to create innovations for the market. In the EU Projects TIMS (2022-2024), FLAMENCO (2023-2024), TRIREME (2024 - 2027) he empowered a young team of researchers and consultants in EuroSPI and Tu Graz to develop new materials, and tools for practically implementing ISO 56000 (Innovation Management System Norm series) including an Innovation assessment tool (different to ASPICE, more based on how Innovation Departments think), a data analysis demo tool, and examples of how to use AI in idea Management in cooperation with the innovation agent working group in ASA.

General Chair & Workshop Chair
Richard Messnarz, ISCN, Austria
European Skills (R)Evolution - Feel (discuss) the wind of change
Abstract: Skills required in the future by automotive eco-system, embedded, and defence industry are evolving and changing at high speed leading to European up-skilling and re-skilling strategies. The ASA (Automotive Skills Alliance DRIVES) has been formed by end of 2021 as a result of the EU Blueprint project DRIVES integrating different automotive associations and members of blueprint projects for automtive to build an upskilling strategy and platform for the automotive sector.
TRIREME, as the blueprint for sectorial skills collaboration in automotive (2024 - 2027) , developed first key skills, re-evaluated the skills for the skills required for a more resilient European automotive industry, and developed first training in the EU wide skills hub (e.g. using ISO 560xx innovation management system norm, strategic intelligence with AI). The first outcomes of the intelligence reports will be presented, giving a direction for automotive in these challenging times.Three successful ASA initiatives will give a short vision statement.
- a 10 mins pitch talk about the vision of ASA Battery WG (invited speaker Jozsef Tichanek)
- a 10 mins pitch talk about the vision of the Hydrogen VET Forum (invited speaker Didier Stevens)
- a 10 mins pitch talk about the vision of the innovation agent WG (invited speaker Laura Aschbacher)
- a 10 mins pitch talk about the vision of European regional strategies (invited speaker Anna Spechtenhauser)
- and then the president of the ASA moderate a panel which discusses new skills ASA proposes for Europe.
Dr Jakub Stolfa is the president of the Automotive Skills Alliance & Program Manager and Assistant Professor at VSB - Technical University of Ostrava. Jakub has been coordinator of the EU Blueprint projects DRIVES (2018-2023), FLAMENCO (2023-2024), and TRIREME (2024-2027). Jakub will act as moderator of the session and the panel.
Experiences with Key Best Practices for Quality in VALEO
Abstract: VALEO is using advanced methods in quality engineering, leading to a very effective implementation of the quality system. Modern techniques are applied. Examples are the gamification of process improvement (presented in EuroSPI conferences) leading a very high motivation of quality engineers. Another example is the AI-augmented quality assurance approach that leverages LLM models and generative AI to help quality engineers reduce audit time and detect issues in highly complex software developed with SAFE Agile. Another example is the adaptation of ASPICE to work as a continuous model for platforms (example V-Core). This combination of modern techniques with ASPICE is a unique feature of the VALEO quality engineering success.
Ashraf Rizallah is the Valeo Egypt Quality Director
Automotive Cybersecurity TARA Experiences at Vehicle Server Level - Major Content Update of the INTACS Certified ASPICE for Cybersecurity Training and EU Project Cybertester Results
Abstract: When setting up an automotive cybertester lab two different architectures were separated in the EU project Cybertester, the ECU controller architecture (e.g. steering system) and the vehicle domain or gateway server architecture. When creating a defense-layered architecture for vehicles the first entry point to attack with unlimited access from outside over the Internet is the telematics ECU in combination with the gateway server. While there are many known publications about the cybersecurity of ECUs, there is less to be found about attacking HPCs (High Performance Computers) as servers of the vehicle. State of the art vehicles have now a Posix/Linux based multi-core gateway server which is like an Internet server (QNX based, the test lab in the Cybertester project used QNX 8.0 and will move soon to QNX 9.0) which is different in the system and software architecture compared to ECUs. The servers are programmed as a so-called SOA (Service-Oriented-Architecture) on which applications are running. This leads to a set of different attack vectors and assumptions compared to a normal ECU. This new architecture is taken as a basis, and a TARA example is explained. The starting point of our paper will be a Threat Analysis and Risk Assessment (TARA) [66] which will be done for a vehicle server level and outline (based on recent attack reports from organizations like upstream) how a RCE (Remote Code Execution) attack can happen and that this opens the door for all types of cybersecurity threats, including tampering (changing data and configurations), denial of service (deleting important files), or spoofing (sending commands in the vehicle in ADAS mode).
CVs: Thomas Liedke is the moderator of the INTACS working grpup developig the training materials and examples for APICE for Cybersecurity and Richard Messnarz is the moderatpr of the SOQRATES group who contributed examples and explanations for the security processes.

Thomas Liedke,
Senior Cyber Security Expert,
Independent Consultant, Germany

Dr Richard Messnarz,
Manager and Senior Expert,
ISCN/SOQRATES Group, Graz, Austria
A Satirical View - What not to do in ASPICE
Abstract: After many years of ASPICE usage, Pierre will delivery a satirical view about what not to do, or what happened in worst cases. While many talks just present super achievements, this talk just helps to get a humorous view about what can go wrong.
Pierre Metz is the Advisory Board Speaker of INTACS, he is Instructor in ASPICE and has held various top management positions in leading companies to implement ASPICE, functional safety, and cybersecurity. He has many years of experience and will share what not to do in a satirical presentation.

Dr Pierre Metz,
International Assessor Certification Scheme e.V., Advisory Board Speaker,
INTACS, Germany
EuroSPI as an Eco System - You are part of the story to build the knowledge community
Abstract: EuroSPI started as a conference in 1994, then became an academy with industry courses that are held at master and PhD levels in universities and as training in industry. Then EuroSPI developed the exam and certification systems and provides certificates in cooperation with ASA. The conference produced a pool of best practice papers published in a SPRINGER book series with a total of more than 2 million downloads now. In parraöle a special issue of a Q2 rated journal was agreed as an annual journal and this is done since 2003 now. And a number of EU projects and partnerships continuously add content. Also infrastructure has been set up for assessment tools (ISCN moved Capability Adviser to EuroSPI) and EuroSPI developed AI based desk top research tools like SmartSPI combining 3 GenAIs/AIs as an analysis service.
ASA (Automotive Skills Alliance) signed a partner agreement with EuroSPI in 20025.
Meanwhile the combination of academy, certificates, assessments, and tools, EU research led to an eco system itself. What is now the future vision? What is the next step of evolution?
Prof. Dr Andreas Riel is professor at Grenoble INP, France, and member of the book editor team of the annual EuroSPI book, and senior trainer and consultant in cooperation with EuroSPI. He co-develops the EuroSPI strategies since years and will develop in 2026/2027 a new strategy to which the European university community and partners will be invited. He supports the new EuroSPI GenAI/AI initiaves and will give an outlook to the future plans.





