New book shows how Korea’s industrial groups and technology companies build, govern and secure connected systems across ten sectors
GOLDEN, CO. Bridging Culture Worldwide founder Don Southerton has announced Connected: How Cars, Factories, Chips, Robotics, Smart Manufacturing, Ships, AI, and Biopharma Run on the Same Architecture, is to be released October 15, 2026. The Kindle edition is available for pre-order now on Amazon, with the paperback following on release day.
Connected cars, smart factories, semiconductor fabs, robots, digital twins, battery plants, shipyards, AI, smart cities and biopharma clusters look like different industries. Southerton shows that underneath, they run on the same architecture: sensors, controllers, a network, a gateway to the cloud, and software that updates.
Drawing on more than 30 years of work with Korea’s leading industrial groups and firsthand visits to plants, suppliers and innovation hubs, the book follows Hyundai Motor Group, Samsung and other global players from the vehicle, with Pleos and Gleo AI, to the factory floor, the shipyard and the biopharma cluster in Songdo.
Three threads run through every chapter: the same architecture at every scale; regulators certifying the process, not just the product, from UN R155 and R156 in vehicles to ISO 10218 in robotics and IACS E26 and E27 in shipbuilding; and ownership as the advantage, with groups that own more of the stack integrating faster and governing more easily.
“I have watched the auto industry move from carburetors to over-the-air updates. What struck me writing Connected is that the same architecture now runs through every sector Korea competes in. The technology is never the hard part. Governing it is,” said Southerton.
Connected is written for executives, engineers, compliance leaders and investors who need to see the whole system. It follows Hyundai Way: Transformation (2026) and adds to more than a dozen books by Southerton on Korean business, US-Korea history and historical fiction.
Connected releases October 15, 2026. Kindle pre-order ($9.99) is open now on Amazon at
amazon.com/dp/B0H7VRNCRY
The paperback ($24.95) will be available October 15.
A quick personal note. My new book, Connected, is out October 15.
Cars, factories, chips, robotics, ships, AI and biopharma look like different industries. Underneath, they run on the same architecture: sensors, a network, the cloud, and software that updates. Connected follows that architecture across ten sectors and shows how Korea’s industrial groups and technology companies build and govern it, from Hyundai’s in-house software to Samsung and the biopharma cluster in Songdo.
Kindle pre-order is open now: amazon.com/dp/B0H7VRNCRY The paperback arrives on October release day.
We also have a limited number of early PDF drafts. If you would like one, just reply to this email. If it is useful to you or your team, I would be glad to hear what you think.
Chuseok, one of the most important Korean traditional holidays.
According to the Lunar calendar, the festivities begin on the 15th day of the 8th month of the full moon harvest.
Using the Gregorian calendar, Chuseok 2026 in South Korea KST, Chuseok falls on Friday, September 25, with the official public holiday extending from Thursday, September 24 through Saturday, September 26. This year, many residents will treat it as a four-day break through Sunday, September 27.
Like many agrarian cultures, Koreans once followed the lunar calendar; however, recently, they have shifted to the solar calendar in line with international practice.
While public holidays are based on the solar calendar, a few days are celebrated based on the lunar calendar.
In mass, and I mean a substantial part of the population, travels. For many, this can be back to their home villages. Over the holiday, they perform ancestral rituals at relatives’ graves and share time with their family over traditional foods.
Others opt to travel, or a popular trend has been staycations in luxury hotels.
For our Korean colleagues (in Korea), you can wish them a “Happy Chuseok” by Text, Message or email. Most will go offline for the Holiday
For international teams (abroad) Anytime from Friday September 25 is fine.
Currently drafting: Connected, a book tracing technology as it moves from the vehicle to the factory floor and beyond. Ten chapters so far: connected vehicles, smart manufacturing, semiconductors, robotics, digital twins, energy and storage, shipbuilding, AI, smart cities, and biotech and biopharma, framed with personal observations from two decades in the industry.
Don Southerton, CEO and president of Bridging Culture Worldwide
The Consulting Practice
Bridging Culture Worldwide LLC advises on Korea-US business: Western brands entering the Korean market, Korean brands entering the US, and the corporate, cultural, and ownership dynamics that shape how those moves actually work. Over twenty years across automotive, technology, food and beverage, and other sectors.
Immigration raid at the Hyundai-LG Energy Solution battery plant in Ellabell, Georgia,
One Year Later, Visa Gap
New reporting marking the first anniversary of the September 2025 immigration raid at the Hyundai-LG Energy Solution battery plant in Ellabell, Georgia, finds the underlying visa problem unresolved. The raid detained 475 workers, mostly South Korean nationals, in what was described as the largest single-site enforcement action in Homeland Security Investigations’ history. Korean nationals were released within eight days under a negotiated deal and returned home.
The episode remains a live risk factor as Seoul and Korean chaebols scale up the roughly $350 billion US investment pledge, since large buildouts depend on short-term technical labor that current visa categories do not clearly cover.
Korea Daily’s anniversary retrospective drew on immigration lawyers, former diplomats, business professors, and consultants, including Don Southerton, to assess what changed and what did not. Southerton’s read: the core failure was a local management gap. The Ellabell facility lacked seasoned, on-site personnel with authority to oversee operations and negotiate directly with authorities as the raid unfolded. His view is that a stronger local leadership presence, capable of managing stakeholder relations in a crisis, would likely have changed how the incident played out. He frames it as a broader structural gap for Korean companies building out US operations, not a one-off failure specific to LG.
Caveat: We saw a different pattern at the nearby Hyundai plant, where both Korean and Western leadership were in place and actively managing risk, and expat staff visas were in compliance. No comparable incident occurred there. That supports Southerton’s point: local leadership presence and visa compliance discipline, not the visa categories alone, appear to be the deciding factor.
Takeaway: expect continued scrutiny of how Korean chaebols staff and govern US mega projects, and continued demand for advisory support on visa strategy, local leadership builds out, and crisis coordination as investment pledges convert into construction.
Connected Series, Part 1 of 6 | Connected Vehicles
Headline: The car is where this architecture was proven. Everything that follows this week, the plant, the fab, the robot, the battery, is the same pattern moved to a different asset.
This week we are sharing Connected: A Case Study in Six Sections
1. Connected Vehicles (today)
2. Smart Manufacturing and Logistics
3. Semiconductors
4. Robotics
5. Digital Twins
6. Energy and Storage
The Setup
A connected car is any vehicle with a network link to outside systems: the OEM cloud, mobile apps, other vehicles, and road infrastructure. Every one of those connection points is also an attack surface. The threats look like any networked IT system. The consequences are physical.
The Architecture
Five parts carry the load. The Telematics Control Unit is the vehicle’s cellular modem and gateway out. The in-vehicle network, CAN bus plus automotive Ethernet, lets the control units talk to each other. The over-the-air update system pushes software and firmware remotely. The backend cloud handles data, diagnostics, and app connectivity. The Software Update Management System governs all of it.
Risk sits in four places: remote exploitation through the TCU, infotainment, or app APIs; vulnerable components from Tier 1 and Tier 2 suppliers; hijacked OTA updates pushed to a fleet; and exposure of location, driving behavior, and biometric data.
The Compliance Frame: R155 and R156
R155 requires a certified, organization-wide Cybersecurity Management System covering design, production, and in-service monitoring, plus risk assessment, incident response, and supplier verification.
R156 governs how updates are planned, deployed, and verified, with RXSWIN traceability and safe rollback that does not compromise safety-critical systems if an update is interrupted. Both are now a precondition for type approval in major markets.
Note what these regulations actually regulate. They sit on the process, not on the box. That is the single most useful thing to carry into the rest of the week.
Case: Hyundai Motor Group, Owning the Stack
The Group sells into the EU and Korea, both R155 and R156 markets, while converging on one in-house software brand, one consolidated telematics unit, and in-house certification.
Pleos launched as the mobility software brand at the Pleos 25 conference in Seoul in March 2025. The first production deliverable, Pleos Connect, shipped in May 2026 on the new Grandeur in Korea, with the IONIQ 3 in Europe next and a target of roughly 20 million Hyundai, Kia, and Genesis vehicles by 2030. Mobis introduced a 5G antenna-integrated Multi-Function Telematics Control Unit at CES 2026.
AutoEver holds a Level 3 cybersecurity capability certification and earned ASIL-D functional safety certification for its mobilgene platform in February 2025. AllDayEnergy launched in July 2026 as the global V2X brand.
Three design choices raise exposure: continuous OTA feature delivery, which puts R156 discipline on the product roadmap rather than only on recalls; an LLM-based agent that interprets driver intent instead of executing fixed commands; and an open platform giving third-party developers access to automotive endpoints. V2X adds grid interconnection as a new risk category.
Supplier cybersecurity verification is the hardest R155 obligation, because it depends on parties you do not control. Hyundai owns AutoEver, Pleos, and Mobis, so it certifies in house. The advantage is ownership, not technology.
Volvo
Volvo built its connectivity case around safety rather than features. More than one million Volvo models had active OTA capability as of August 2026, and through the European Data for Road Safety ecosystem the alerts reach vehicles Volvo did not build.
Four warnings arrived in 2026 software: Large Animal Alert, Vulnerable Road User Alert, Roadwork Alert, and Accident Ahead Alert.
Sharing safety data outside the brand deliberately widens the R155 boundary.
BCW Take
Two mo, and neither is really a technology strategy. Hyundai reduces exposure by owning the stack. Volvo accepts a wider boundary in exchange for network effect, because a hazard warning is worth more when it reaches cars outside your fleet. Toyota runs software through Woven, Volkswagen through CARIAD. Most other OEMs get neither position and will manage dozens of Tier 1 relationships under an obligation that reaches into every one of them.
Takeaways
The connected vehicle is a networked system with physical safety consequences. Every connection point is an attack surface.
R155 and R156 regulate the process, not the product. That pattern repeats every day this week.
Vertical integration is a compliance strategy before it is a technology strategy.
Continuous OTA delivery turns compliance from a one-time event into a permanent operating discipline.
Don Southerton Founder and CEO, Bridging Culture Worldwide bridgingculture.com
For decades my consultancy has engaged with Korean chaebol. My work has been uncovering and sharing company cultures, for example my Hyundai Way book series. I’ve also done deep dives into SK and LG plus dozens of other companies. I am now turning to Hanwha.
Hanwha lists three core values: Challenge, Dedication, and Integrity. Those are cited on the website and in the onboarding deck. Like the other chaebol, it is not what drives the company. More telling is the founding philosophy of Kim Jong-hee, who formed Korea Explosives in 1952. His core values, their corporate motto (sahoon) was sinyong gwa uiri, trust and loyalty.
I see these as core Hanwha values.
Sinyong신용 and Uiri의리
Sinyong is in the moral sense, trust.
Uiri is a strong sense of honor and duty within a relationship, not corporate loyalty in the HR sense.
I see both as grounded in Korea’s Neo-Confucian roots.
The Agreement Is a Roadmap, Not a Blueprint
Contracts matter, but Hanwha treats the signed document as a roadmap. Terms can and do get revisited as conditions change, and the expectation is that you revisit them together.
Western teams can read a long assessment period as slow, or as a sign there is no deal, and pull back right before the deal can move forward.
What Shapes Hanwha
Founder family at the center. Kim Seung-yeon took the chair from his father in 1981 and re-shaped the group. His eldest son, Kim Dong-kwan, now drives strategy across solar, aerospace, and shipbuilding. Decisions still get routed upward, and middle managers are expected to implement.
Two Hanwhas. Qcells in Georgia, Philly Shipyard, and Hanwha Ocean’s US work all operate closer to Western norms than the Korea-based explosives and defense units do. Treating the company as one culture is an assumption. There are several.
Shinsedae, or the new generation in the ranks. Younger Korean staff are often more pragmatic than in the past, which can mean less attached to lifetime employment, and more direct than their seniors. Your working-level counterpart may be far more candid than their seniors.
Be patient at the front. Be relentlessly consistent on small commitments. Best to have a senior sponsor on your side, but be aware that internal movement is common. These rotations can disrupt and delay projects.
Cadence: Briefing Mon-Fri, Sunday Week in Review, plus special updates most Saturdays.
In this week’s Saturday Update, I’d like to share a partial preview of my work in progress, “Connected.”
Chapter 1 focuses on the connected vehicle architecture. Other chapters, so far, include semiconductors, AI, robotics, shipbuilding, steel, and batteries, all tied to the “Connected” theme.
Again, this is only a partial of my first draft. That said, it does share my thought process.
Enjoy.
CHAPTER 1
Connected Vehicles
A “connected car” is defined as any vehicle with a network connection linking it to external systems: the OEM cloud, mobile apps, other vehicles (V2V), and road infrastructure (V2I).
Architecture Basics
The core components are:
Telematics Control Unit (TCU). The vehicle’s cellular modem and gateway to the outside world.
In-vehicle network. The Controller Area Network (CAN bus) is a specialized internal communications network. It allows microcontrollers and Electronic Control Units (ECUs) to talk to each other directly, without a central computer, over the Ethernet linking the ECUs for engine, brakes, infotainment, and ADAS.
Over-the-air (OTA) update system. Pushes software and firmware to ECUs remotely.
A certified SUMS process covering the full update lifecycle: development, validation, deployment, and rollback.
RXSWIN (RX Software Identification Number), a traceable ID confirming which software version is installed.
Safe update delivery. Updates must not compromise safety-critical systems, even if interrupted mid-update.
Cybersecurity Management System (CSMS)
What OEMs must demonstrate:
A certified CSMS covering the full vehicle lifecycle: design, production, and post-production in-service monitoring.
A risk assessment process for identifying and mitigating cyber threats before type approval.
Incident monitoring and response, meaning the ability to detect and react to cyberattacks on vehicles already on the road.
Supply chain oversight, verifying that supplier components meet the same cybersecurity bar.
Risk
Every one of the connection points above is also an attack surface. Connected vehicles face threats similar to any networked IT system, but with physical safety consequences.
Key risk categories:
Remote exploitation. An attacker gains control via the TCU, infotainment, or app APIs.
Supply chain risk. Vulnerable components or software from Tier 1 and Tier 2 suppliers.
OTA update hijacking. Malicious or corrupted software pushed to fleet vehicles.
Data privacy. Location, driving behavior, and biometric data exposure.
The Global Compliance Landscape: R155 and R156
More connectivity also means more regulatory exposure.
Regulators responded with two linked UN regulations: R155 on how you manage cyber risk, and R156 on how you manage software updates safely. Together they are now a precondition for vehicle type approval in many major markets.
More specifically, R155 requires a certified, organization-wide Cybersecurity Management System covering design, production, and post-production in-service monitoring, plus risk assessment, incident response, and supplier verification.
R156 governs how OTA and wired software updates are planned, deployed, and verified. It is the companion regulation to R155.
OEM Approaches
I am assuming the major vehicle manufacturers may be taking similar approaches, while maintaining their own proprietary oversight.
What is universal is how they look at the shared landscape: the links to external systems noted above, the OEM cloud, mobile apps, other vehicles (V2V), and road infrastructure (V2I), as well as V2G (Vehicle-to-Grid) and V2H (Vehicle-to-Home).
One example is Hyundai and their connected vehicle architecture and compliance.
Hyundai Motor Group is converging its connected vehicle effort on one in-house software brand (Pleos), one consolidated telematics unit (Mobis MTCU), and in-house certification through Hyundai AutoEver.
This vertical integration allows for greater oversight of the supply chain that R155 imposes on OEMs, as well as tighter internal governance.
Thursday, August 13, 2026 | Bridging Culture Worldwide
HEADLINE
Hanwha bids up to $1.2 billion for Austal USA.
Hanwha Defense USA submitted a preliminary, non-binding offer of $1.05 billion to $1.2 billion for Austal USA’s Mobile, Alabama shipyard and its US support operations.
Austal’s board granted a four-week due diligence period that includes engagement with the Navy, Coast Guard, and the Department of War.
If it closes, Hanwha would run two US yards, Philadelphia and Mobile.
SECTOR WATCH
Semiconductors Samsung Electronics closed up as well as SK Hynix on a local report that Singapore’s Temasek plans to invest directly in both chipmakers. . Neither company has confirmed.
BCW TAKE
Beyond Austal, the $5 billion Hanwha Philly Shipyard program continues to operate at full speed.
