Adapting railway sector to repel cyber threats: A critical analysis

Given the unique challenges facing the railway industry, cybersecurity is a crucial issue that must be addressed proactively. This paper aims to provide a systematic review of cybersecurity threats that could impact the safety and operations of rolling stock, the privacy and security of passengers and employees, and the public in general. The systematic literature review revealed that cyber threats to the railway industry can take many forms, including attacks on operational technology systems, data breaches, theft of sensitive information, and disruptions to train services. The consequences of these threats can be severe, leading to operational disruptions, financial losses, and loss of public trust in the railway system. To address these threats, railway organizations must adopt a proactive approach to security and implement robust cybersecurity measures tailored to the industry’s specific needs and challenges. This includes regular testing of systems for vulnerabilities, incident response plans, and employee training to identify and respond to cyber threats. Ensuring the system remains available, reliable, and maintainable is fundamental given the importance of railways as critical infrastructure and the potential harm that can be caused by cyber threats. • The railway industry has undergone a significant digital transformation, with a growing reliance on computer-based technology to operate and maintain rail networks • The railway industry is highly vulnerable to cybersecurity threats, which can have severe consequences for safety, operations, and the economy • Given the unique challenges facing the railway industry, cybersecurity is a crucial issue that must be addressed proactively. • Railway organisations must conduct comprehensive risk assessments and maintain an up-to-date inventory of vulnerabilities and threats across their systems. • A robust cybersecurity framework should be developed and adhere to established standards and guidelines, such as those provided by industry bodies and national agencies.