Cybersecurity is critical for the digital transformation of the railway sector. To enable a uniform and efficient assessment of cybersecurity risks, a method was developed that transfers existing threat lists into a harmonized, application-specific threat catalog. This approach forms the basis for harmonized risk analyses and facilitates the comparison of risks across different systems under consideration (SUC), such as rail vehicles from various manufacturers and series.