ISO 24089 is the international standard that establishes the requirements for software update engineering in road vehicles. As vehicles become increasingly defined by their software, the ability to update, maintain, and improve that software — both in the workshop and remotely over the air (OTA) — has become a core capability for any organisation operating in the modern automotive supply chain.

The shift towards the software-defined vehicle has transformed how products are developed, delivered, and maintained. ISO 24089 responds directly to this reality, providing the industry with a common framework to ensure that software updates are managed in a controlled, traceable, and safe manner throughout the entire vehicle lifecycle.

ISO 24089 defines the requirements that must be met across the full lifecycle of a software update process — from planning and development through to delivery, verification, and post-update monitoring. It applies to all types of software updates in road vehicles, regardless of whether they are performed remotely via OTA or through physical workshop intervention.

The standard addresses the organisation as a whole, not just the engineering teams. It requires that processes, responsibilities, and controls are in place at every level involved in the creation and deployment of software updates — covering both the vehicle manufacturer and the suppliers contributing software or systems to the update process.

Importantly, ISO 24089 does not operate in isolation. It is closely aligned with other key automotive standards, forming part of a broader framework that includes functional safety and quality management — all of which are increasingly interdependent in the context of connected and software-driven vehicles. 

The ability to update vehicle software is no longer an optional feature — it is a fundamental expectation of the market. OEMs are building long-term relationships with suppliers who can demonstrate that their software update processes are controlled, auditable, and aligned with recognised international standards. ISO 24089 is rapidly becoming the benchmark against which those processes are evaluated.

For suppliers and integrators, not having a process aligned with ISO 24089 creates direct business risk. It can mean being excluded from new project awards, failing to meet homologation requirements, or being unable to support OTA update capabilities that customers increasingly demand as standard. In a market where software differentiation is becoming a primary competitive driver, falling behind on update process maturity is a strategic vulnerability.

Beyond market access, the standard helps organisations manage the inherent risks of deploying software updates at scale. A poorly controlled update process can introduce new faults, compromise vehicle safety, or create significant liability exposure. ISO 24089 provides the structure needed to mitigate those risks in a consistent and demonstrable way.

Access to OTA-ready projects and next-generation platforms: As vehicle manufacturers accelerate their transition to software-defined architectures, they require suppliers with update processes that meet recognised standards. ISO 24089 compliance positions your organisation to participate in these high-value programmes.

Reduction of operational and liability risk: A structured update process reduces the likelihood of introducing faults through software changes and provides documented evidence of due diligence — protecting the organisation in the event of field issues or regulatory scrutiny.

Strengthened position in the supply chain: Conformance with ISO 24089 signals to OEMs and Tier 1 customers that your organisation has the process maturity to manage software at scale, building trust and supporting longer-term commercial relationships.

Future-proofing your organisation: The software-defined vehicle is not a future trend — it is the present direction of the industry. Implementing ISO 24089 now means your processes, teams, and systems are aligned with where the market is already heading, reducing the cost and disruption of catching up later.