EU cybersecurity law kills the 718 Boxster and 718 Cayman series

Porsche 718 Boxster GTS and Porsche 718 Cayman GTS

Previously, Porsche announced that the production of the Porsche Macan equipped with a combustion engine would fade out. The only Porsche Macan available would be the full-electric version. This was because of the new EU Cybersecurity law, effective from July 2024. That same law now makes more victims in Zuffenhausen. The Porsche 718 Boxster and Porsche 718 Cayman model series will no longer be sold. Due to their low production numbers, the high-end Porsche 718 Boxster Spyder RS and the Porsche 718 Cayman GT4 RS escape from the consequences of the cybersecurity law and continue to exist.

Porsche 718 Cayman GT4 RS Clubsport and Porsche 718 Cayman GT4 RS
Porsche 718 Cayman GT4 RS Clubsport and Porsche 718 Cayman GT4 RS

Oliver Hilger, Porsche’s spokesman for the 911 and 718 series, confirmed us. Here is his statement

In the European Union and some states that apply EU legislation, the combustion-powered 718 models will not be available indefinitely. The main reason for this is the General Safety Regulation of the European Union (including cybersecurity), to which the platform will not be converted. Any models that do not meet these requirements will no longer be eligible for new registration in the EU after the beginning of July 2024. This applies not only to 718 models with an internal combustion engine, but to all models from all manufacturers, and this regardless of whether it is an e-vehicle or one with an internal combustion engine. As a result, sale of the 718 models with an internal combustion engine is discontinued in the EU and some states that apply EU legislation from now on, thereby ensuring that the vehicles can be delivered to customers and registered by the deadline. In regions where the relevant EU legislation is not applied, the 718 models with an internal combustion engine can remain available for longer.

Implementation of the directive not only requires adjustments to the technical implementation, for example in the control units, but essentially also a change to processes in the development phase. For example, management systems will have to be developed and certified with regard to cybersecurity. The management and documentation of cybersecurity risks is tracked, structured and formalised over the life cycle of the vehicle. All this could not be taken into account in the development of the 718 combustion models, as none of the requirements were known or applicable at the time. It is not possible to do this ‘in reverse’ without further ado.

The processes now required by UN ECE R 155 could not be implemented because they were not yet known and applicable back when the 718 platform was developed. But that doesn’t mean that older vehicles are not, per se, secure. When it comes to current models, we regularly check the cybersecurity of our products and work together with the global security community using a publicly accessible interface.

In the EU and some states that apply EU legislation 718 Cayman GT4 RS and 718 Spyder RS are not affected due to small series regulations. These two models are still offered in the markets following the EU legislation.

Adapting the electrical architecture of the 718 Boxster and 718 Cayman series to comply with the new rules would cost about half of the budget required to start a completely new model. No wonder Porsche decided not to go in that direction. The new, full-electric Porsche Boxster and Cayman will go on sale in 2025