(a)The control centre at the disposal of the applicant or with which the applicant has contracted, as referred to in section 16f(a)(3), satisfies all of the following:
(1)it is capable of maintaining, at all times, two-way telephone communication with the Israel Police, Magen David Adom and the National Fire and Rescue Authority and of acting in accordance with their instructions; communication with the Israel Police shall be by means of a dedicated telephone number;
(2)it is capable of maintaining communication, at all times, with the body coordinating traffic management and control in every area in which the applicant intends to conduct an experimental operation of an autonomous vehicle, if such a body exists;
(3)it contains a computing system capable of issuing instructions to an autonomous vehicle, including an instruction for a complete stop;
(4)with regard to cyber protection, the provisions of subsection (h) have been complied with in the autonomous vehicle that it intends to operate, in the control centre and in the communication between the control centre and the vehicle in respect of which an application for registration as an autonomous vehicle has been submitted;
(5)it is capable of conducting continuous cyber monitoring, at all times, of the autonomous vehicles it operates, connected to a cyber event monitoring, command and control centre (SOC – Security Operating Center) operated by the Ministry of Transport and Road Safety;
(6)its employees possess knowledge in the fields of vehicle systems, computer systems, communication systems and cyber protection enabling them to carry out the functions of a control centre pursuant to this Ordinance, to the satisfaction of the National Traffic Superintendent; the number of such employees shall be as required for the performance of these functions having regard to the number of autonomous vehicles to be operated by the applicant.
(b)A computing system capable of collecting and retaining the information that the permit holder is required to collect and retain pursuant to section 3 is at the disposal of the applicant.
(c)The applicant has presented documentation and documents to the satisfaction of the National Traffic Superintendent, detailing the technological means at its disposal and the professional knowledge, training and education of the employees it employs and the manner of calculating the number and types of employees required, all as required for the purpose of complying with the requirements of subsection (a).
(d)The applicant is capable of identifying a cyber attack and reporting it pursuant to section 3 to the National Traffic Superintendent.
(e)The applicant is capable of operating a service centre for passengers of the autonomous vehicle that can be contacted during the journey and also before or after it.
(f)The applicant shall submit an operational plan in the manner directed by the National Traffic Superintendent, which shall include, inter alia, the following, and such additional particulars as the Superintendent may direct:
(1)the number of autonomous vehicles to be operated by the applicant, and if the applicant intends to change that number during the permit period – the applicant shall detail the anticipated dates of changes known to it at the time of submitting the application and the number of autonomous vehicles it will operate following each change;
(2)particulars of the autonomous vehicles to be operated, including the standards requirements they meet, the manner of connecting the autonomous driving system to the autonomous vehicle, the performance of the autonomous driving system, the operational domain of the autonomous vehicle, the safety concept and the cyber protection measures installed in the vehicle;
(3)particulars of the systems for collection and retention of data by the autonomous vehicle and data protection;
(4)a detailed description of possible failure modes of the autonomous driving system it operates that may cause a serious safety incident or a breach of a provision pursuant to this Ordinance with regard to road behaviour, a document it has prepared for the assessment of the risk posed by such situations and the measures to be taken to manage them;
(5)a detailed description of the means installed in the autonomous vehicle ensuring that it will comply with the instructions of any person lawfully authorised to give instructions to a road user, and the autonomous vehicle's responses to the movement of a security vehicle in its vicinity; in this paragraph, "security vehicle" – as defined in the Traffic Regulations;
(6)a detailed description of the means installed in the vehicle for the purpose of ensuring the safety of passengers in the autonomous vehicle and for enabling them to make contact with the control centre, behavioural instructions for passengers in an emergency, and the manner of informing passengers of the existence of those means and of their use;
(7)particulars of a passenger service centre for passengers of the autonomous vehicle and the manner of informing passengers of its existence and of the means for contacting it.
(g)The applicant has demonstrated that it is capable of ensuring all of the following:
(1)regular updating of the computerised systems of the autonomous vehicle, including software updates;
(2)maintenance and security of the autonomous vehicle and its systems by means of a garage holding a licence to operate a garage pursuant to the Vehicle Industry Services and Occupations Licensing Law, 5776-2016, provided that the computing systems of such a garage shall not diminish the cyber protection of the autonomous vehicle pursuant to subsection (h).
(h)The applicant has furnished to the National Traffic Superintendent one or more of the following documents, as the Superintendent may direct, and their content has satisfied the Superintendent with regard to cyber protection of the control centre, the autonomous vehicle and its systems and the communication between them:
(1)documents detailing the cyber protection management system of the vehicle, the autonomous driving system, the means of secured two-way communication between the control centre and the autonomous vehicle, and their suitability for providing a cyber protection response against the threat mapping carried out by the National Traffic Superintendent, in accordance with individual risk management, subject to the provisions of this Schedule;
(2)results of theoretical tests and practical tests in the technical and procedural aspects, in order to demonstrate the implementation of the protection requirements for the systems as directed by the National Traffic Superintendent and to discover breaches in the protection of those systems notwithstanding the implementation of the defined requirements, including vulnerability assessment tests and penetration tests;
(3)high-level design documents for all the computing equipment and electronic equipment of the system and its components required for conducting tests as referred to in paragraph (2), including all implemented cyber controls;
(4)threat analysis documents;
(5)risk management documents;
(6)a detailed description of compensating solutions for possible breaches in the protection of the vehicle, the autonomous driving system, the control centre systems and the communication between all of these.