Rail cybersecurity services
Up to 100 % system availability based on rail cyber security
Up to 100 % system availability based on rail cyber security
Download our White Paper
In this paper, we provide guidance based on NIST Cybersecurity Framework addressing the requirements within these security directives. Complete form to get this paper sent directly to your inbox.
Smart rail cybersecurity in a nutshell
Throughout the globe we see an increased demand for sustainable and efficient transportation, and as the world innovates, connecting people in a safe and secure way requires digitalization. Watch the video to learn about the difference between safety and security, and see how intelligent rail cybersecurity services protect both rail infrastructure and rolling stock.
Rail cybersecurity services for the digital rail world
Achieve higher availability and reliability
Gaps and vulnerabilities in cybersecurity can deteriorate availability and reliability of rail systems and endanger business objectives.
Comply with laws and regulations
Most countries have implemented cybersecurity strategies for critical infrastructures, including the rail sector.
Ensure safety by ensuring security
If it is not secure, it is unlikely to be safe. Security and safety are different concepts, but they correlate. If systems are unsecured, this may lead to safety events.
Protect your image and reputation
Image of rail operators can be harmed when cybersecurity vulnerabilities or attacks become public.
Together we ensure rail cybersecurity
Explore our rail cyber security services offering step by step
Assess the current situation and identify risks
The first step towards cybersecurity in railway systems is a precise status analysis.
Following the requirements specified in IEC 62443, we first determine and analyze the required scope for railroad infrastructure. In the next step, we develop the outline for an individual protection concept based on a questionnaire specifically adapted to your system configuration, a joint workshop, and a site inspection. This protection concept includes customized technical and process-related measures.
For rolling stock, we apply a risk analysis method that has been specially developed and tested for the railway industry. Again, we first determine the systems to be analyzed with you. On this basis we prepare a risk assessment that includes pragmatic technical concepts and process-related measures in a joint workshop.
Next, we determine and evaluate the individual risk potential of your system through intentional and transparent hacking attempts within the framework of a penetration test proven for railway systems. The outlined protection concepts as well as the results of the penetration test are the starting point for the next step: the implementation of necessary security measures.
Provide the utmost security
The assessment of possible risks and evaluation of required protective measures is followed by the implementation of your individual protection concept for cybersecurity. First of all, the protection concepts roughly outlined in the preceding step are described in detail for this purpose. Once all the necessary details have been defined, we implement project-specific technical measures, such as the hardening of systems, the execution of necessary updates and upgrades, and zoning, if that should be required. We will, of course, update the safety approval if necessary.
Always be alert and ready to react
Cybersecurity in railway systems can only be maintained permanently if the continually changing threat situation is constantly and closely monitored. That’s why we monitor data around the clock in real time. This enables us to immediately identify anomalies and possible new threats at any time. If the threat situation changes, we’ll inform you immediately with proactive threat reports that help you react appropriately and without delay. We also support you in the development of adequate responses to cyber security events.
Sensitivity for cybersecurity in railway operations
Just like in other industrial sectors, cybersecurity for railway systems ultimately stands or falls with the people behind the technology. That’s why we’ve developed a comprehensive range of customized training courses for rail operators. Our smart security experts raise your employees’ awareness of threats during the training sessions and convey consistent action strategies for the protection of your company and its systems.
In addition to the standard training courses that are available as Web-based online training or as classroom training at the Siemens Rail Academy, we also provide individual training courses tailored to your specific requirements.
