Cybersecurity for rail systems
Operators of rail systems face new threats, new laws, and – because of this – new cybersecurity requirements. We offer one holistic approach to cybersecurity that does not only focus on technical aspects, but also considers processes and includes internal and external stakeholders throughout the transportation system’s lifecycle.
Operators of rail systems face new threats, new laws, and – because of this – new cybersecurity requirements. We offer one holistic approach to cybersecurity that does not only focus on technical aspects, but also considers processes and includes internal and external stakeholders throughout the transportation system’s lifecycle.
White paper: Cybersecurity for rail – Everything you need to know
Increasing digitalization brings benefits for all mobility stakeholders. But it also creates the need for holistic, best in class protection against cyberattacks. Our white paper explains the requirements of holistic cybersecurity concepts – and what you need to know to implement them.
Protecting your rail system from cyberattacks
Products and solutions
CoreShield Connect is your secure connectivity toolbox for real-time management of your rail assets. It consists of a hardware component for comprehensive connectivity and controlled monitoring of security-relevant networks and an OT Security Appliance for OT networks of railway signaling systems. An encryption unit, a Linux OS and secure remote software updates are also part of the toolbox. Additionally, you can rely on our RUGGEDCOM hardware equipment for harsh environments.
Services
Our holistic cybersecurity services include assessing existing systems, supporting continuous risk management and implementing additional mitigation and protection measures. We also offer specialized rail security training to qualify your staff in cybersecurity technologies and practices according to their specific roles and along the entire rail system’s lifecycle. We conduct awareness programs as well to highlight typical cybersecurity threats, such as phishing. For our products and solutions, we offer vulnerability advisories on a contractual basis, following the principles of managed transparency.
Supply chain and integration
Combining multi-vendor solutions into a secure, interoperable approach is complex – unless you have the right partner on hand. Our solution engineering and system integration specialists work hand in hand with cybersecurity experts, while suppliers are required to comply with strict security and quality standards. Our ProductCERT team collaborates with researchers to investigate, report, and disclose issues. Through managed transparency, we ensure that security information is shared responsibly, building trust without compromising protection.
Our solutions for secure rail traffic
Cybersecurity for rolling stock
Secure train operations in the digital age
When it comes to cybersecurity, we are a strong partner for transportation companies worldwide. We bring expertise, efficient workflows, and practical experience based on over 100 customer projects to the table. As your single source for cybersecurity solutions, we cover the entire product lifecycle from procurement and manufacturing to the operating phase.
Cybersecurity for infrastructure
Secure network connectivity without compromise
Our CoreShield portfolio consists of three solutions, made to protect the operational technology (OT) of your transport systems.
From active system protection to automated cybersecurity monitoring solutions and remote software updates, we help you keep your rail infrastructure safe.
Cybersecurity services
Secure rail operations
When it comes to secure rail operations, nothing should be left to chance. Use our rail cybersecurity services for analyzing and assessing your rail systems’ security along the entire operational process and lifecycle. Where are potential vulnerabilities? What are the best measures to protect your rail vehicles and systems? We cover every angle proactively, knowledge-based, customized, and in a closed process, enabling you to respond on the spot.
Turnkey cybersecurity
Overarching solutions
We plan, construct and optimize the cybersecurity solution for your turnkey project, coordinating the interfaces and implementing the system, covering the full scope of rolling stock, infrastructure and services. Thanks to our experience and expertise, we orchestrate the largest and the most complex projects in different environments reliably and integrate them for you. We also help improve cybersecurity in existing environments based on a customized risk-based approach for each customer.
Selected references
Why Siemens Mobility as a partner for cybersecurity?
Managed security
Our products, projects, and assets are security-managed. Our trains are equipped with built-in security measures, covering the complete product lifecycle and the entire supply chain. This holistic approach to cybersecurity is implemented in the product development phase with constant and rigorous vulnerability monitoring, continuing until the train is delivered and throughout its lifecycle. We also ensure secure train connectivity for the safe transmission of data within the trains.
Proven expertise
Whether it’s rail infrastructure security or protecting rolling stock from cyberattacks, with our team of hundreds of cybersecurity experts, we can ensure the highest level of security – as we have done in many successful projects so far. We also train all our Siemens Mobility employees with awareness training, and our cybersecurity specialists with dedicated advanced training.
Integrated approach
Unlike almost any other technology company, we offer a closed range of products, solutions, and services. This makes our cybersecurity approach seamless. We are able to solve projects completely in-house without having to pass on tasks to third parties. Of course, we can also partner with external assessors when certification is needed.
Certified security
We are leading the market in security compliance. Siemens Mobility is the most certified railway vendor worldwide. The certification scheme encompasses processes and selected products and is steadily extended to meet upcoming regulatory needs. Products and processes are certified by leading institutes such as TÜV Süd and DNV.
Report a potential security issue
Do you have a cybersecurity-related question, or would you like to report a potential security issue? Contact Siemens ProductCERT for all product, solution, and service inquiries, or Siemens CERT for all Siemens IT assets-related matters.
What our experts have to say about rail cybersecurity
Podcasts & webcasts
- Webinar series on cybersecurity rail services
- Podcast: Season 3, Episode 2 of Securing Digitalization - Keeping trains on track: Experts Helen Negre and Marta Garcia discuss cybersecurity and diversity in the rail industry
- Podcast: Sustainable cybersecurity for rail: Siemens Mobility expert Christian Paulsen shares how sustainable cybersecurity can be achieved in the railway industry
- Webcast: Cybersecurity for railways: Siemens Mobility experts discuss current and future trends and needs
Articles
- On the right track: An interview with Siemens Mobility experts on how to best face cyberthreats in the rail industry
- Cyber-securely riding the rails: About the unique cybersecurity needs of trains
- Smart city, secure city: Why smart cities need protection to be sustainable
- The backbone of our society: How cybersecurity protects the fundamental basis of our society
- Towards a European cybersecurity standard: How stakeholders worked together to facilitate standardization
Siemens Xcelerator: Creating an interoperable rail ecosystem with cybersecurity in mind
Cybersecurity is the prerequisite for digital transformation in every industry. Siemens Xcelerator offers curated and modular digital solutions. The digital business platform and offerings adhere to high cybersecurity standards to ensure secure access to powerful digital tools for you.
Start your digital transformation with Siemens Xcelerator!
Networking for a secure digital infrastructure
We take our responsibility for cybersecurity well beyond the boundaries of our own organization, because approaches to cyber threats do not end there. To make the digital world more secure, we have joined forces with leading companies from around the globe to form the Charter of Trust.
