Rail cyber security services
Join our webinar: Monitoring cybersecurity on trains
Technical implementation and process integration for maintenance and operations. The implementation of additional hardware and software has its limits. Rail cyber security experts will share their insights and point out how to solve these challenges.
Join us on May 17th, 2023 at 2pm CEST!
Smart rail cyber security in a nutshell
In our connected world we see an increased demand for transportation. It needs to be sustainable and efficient. This requires more and more digitalization and connecting people always needs to be safe and secure. “What is the relevance of cyber security in the rail environment? And how can it be sustainable over the complete life cycle?” Watch the video, learn about the difference between safety and security, and see how smart rail cyber security services protect rail infrastructure and rolling stock.
Rail cyber security services for the digital rail world
Achieve higher availability and reliability
Gaps and vulnerabilities in cyber security can deteriorate availability and reliability of rail systems and endanger business objectives.
Comply with laws and regulations
Most countries have implemented cyber security strategies for critical infrastructures, including the rail sector.
Ensure safety by ensuring security
"If it is not secure, it is unlikely to be safe". Security and safety are different concepts, but they correlate. If systems are unsecured, this may lead to safety events.
Protect your image and reputation
Image of rail operators can be harmed when cyber security vulnerabilities or attacks become public.
Together we ensure rail cyber security
Explore our rail cyber security services offering step by step
Assess the current situation and identify risks
The first step towards cyber security in railway systems is a precise status analysis. Following the requirements specified in IEC 62443, we first determine and analyze the required scope for railroad infrastructure with you. In the next step, we develop the outline for an individual protection concept on the basis of a questionnaire specifically adapted to your system configuration, a joint workshop, and a site inspection. This protection concept includes customized technical and process-related measures.
For rolling stock, we apply a risk analysis method that has been specially developed and tested for the railway industry. Again, we first determine the systems to be analyzed with you. On this basis we prepare a risk assessment that includes pragmatic technical concepts and process-related measures in a joint workshop.
In addition, we determine and evaluate the individual risk potential of your system through intentional and transparent hacking attempts within the framework of a penetration test proven for railway systems. The outlined protection concepts as well as the results of the penetration test are the starting point for the next step: the implementation of necessary security measures.
Provide the utmost security
The assessment of possible risks and evaluation of required protective measures is followed by the implementation of your individual protection concept for cyber security. First of all, the protection concepts roughly outlined in the preceding step are described in detail for this purpose. Once all the necessary details have been defined, we implement project-specific technical measures, such as the hardening of systems, the execution of necessary updates and upgrades, and zoning, if that should be required. We will, of course, update the safety approval if necessary.
Always be alert and ready to react
Cyber security in railway systems can only be maintained permanently if the continually changing threat situation is constantly and closely monitored. That’s why we monitor data around the clock in real time. This enables us to immediately identify anomalies and possible new threats at any time. If the threat situation changes, we’ll inform you immediately with proactive threat reports that help you react appropriately and without delay. Of course, we also support you in the development of adequate responses to cyber security events.
Sensitivity for cyber security in railway operations
Just like in other industrial sectors, cyber security for railway systems ultimately stands or falls with the people behind the technology. That’s why we’ve developed a comprehensive range of customized training courses for rail operators. Our smart security experts raise your employees’ awareness of threats during the training sessions and convey consistent action strategies for the protection of your company and its systems.
In addition to the standard training courses that are available as Web-based online training or as classroom training at the Siemens Rail Academy, we also provide individual training courses tailored to your specific requirements.
Rail cyber security has many aspects – we take care of them
Proactive: detect and close security gaps before they become a problem
Our rail cyber security service offers rail operators proactive defense against cyber security vulnerabilities in order to maintain availability, reliability, and safety of systems and protect the image of operators.
Knowledge-based: unique rail domain and cyber security expertise
Siemens Mobility combines domain know-how on rail systems with cyber security expertise. A cyber security pool of experts has access to constantly updated knowledge for rail and other industries as well as Siemens-own Computer Emergency Response teams (CERT teams).
Customer-specific: modular solutions that can be adapted to individual requirements
Our rail cyber security services are a modular service concept combinable to comply with customer requirements.
Seamless: comprehensive rail security concept without third-party involvement
Our rail cyber security services are an out of one hand offering seamless concepts. There is no need to involve third parties. Sensitive knowledge does not have to be handed over to others.