{"id":30874,"date":"2024-03-22T20:29:15","date_gmt":"2024-03-22T10:29:15","guid":{"rendered":"http:\/\/www.vibewire.com.au\/?guid=1efd4f47f55da05b75574d39b79e9821"},"modified":"2024-03-22T20:29:15","modified_gmt":"2024-03-22T10:29:15","slug":"working-with-the-rail-industry-to-respond-to-cyber-security-threats","status":"publish","type":"post","link":"https:\/\/www.vibewire.com.au\/?p=30874","title":{"rendered":"Working with the rail industry to respond to cyber security threats"},"content":{"rendered":"

Working with the rail industry to respond to cyber security threats<\/span>
\n

Cyber security risks are a real and present risk for the rail industry, with potential safety implications clear. That\u2019s why the Office of Rail and Road (ORR) continues to work with industry to ensure it is properly equipped to assess, prevent and respond to cyber security threats and incidents.<\/div>\n
\n
Twitter<\/a>Linkedin<\/a>email<\/a><\/div>\n<\/div>\n
\n
Cover Image<\/div>\n
\n
\n
\n
Image<\/div>\n
\"Paul<\/p>\n<\/div><\/div>\n<\/article>\n<\/div><\/div>\n
\n
Body<\/div>\n
<\/div>\n<\/p><\/div>\n
\n
Components<\/div>\n
\n
\n
\n
\n
\n

ORR ensures the rail industry operates in accordance with health and safety laws to protect passengers, staff and the public from harm.\u00a0<\/p>\n<\/div>\n

\n

With new software-based systems introduced to help with the operation of the network, new risks have emerged. Duty holders should manage their systems so that software design, operation, maintenance and cyber security risk is overseen in the same way as any other safety risk.\u00a0 It should form part of their wider Safety Management System.\u00a0\u00a0<\/p>\n<\/div>\n

\n

Paul Appleton, Deputy Director for Railway Safety, recently spoke at a cyber security conference about the cyber security landscape in the UK rail industry, and ORR\u2019s action to help get the rail network prepared.<\/p>\n<\/div>\n

\n

ORR\u2019s cyber security capability<\/h2>\n<\/div>\n
\n

We are constantly monitoring emerging risks and are building ORR\u2019s capability in the Railway Safety Directorate to enable us to inspect and investigate railway companies in this area through developing an inspection tool and training our inspectors.\u00a0<\/p>\n<\/div>\n

\n

This tool covers these key areas: Leadership; Governance and Safety Management System\u200b; System Safety (Safety and Security) and Interfaces\u200b; Risk Assessment; System architecture \u2013 IT & OT; Supply chain; and Competence.<\/p>\n<\/div>\n

\n

The tool includes 63 underlying questions to ask duty holders and assess indicators of good and bad practice.\u202fWe are currently undertaking several inspections and expect to set out our findings in the Chief Inspector\u2019s annual report next summer.\u202fThe first test inspection on East Midlands trains, was in last summer\u2019s Chief Inspector\u2019s report<\/a>.\u00a0<\/p>\n<\/div>\n

\n

ORR now also has a dedicated Digital Safety specialist inspector. A key part of their role will be highlighting these present risks to the rail industry.\u00a0<\/p>\n<\/div>\n

\n

Next steps<\/h2>\n<\/div>\n
\n

We are working with industry and the Railway Safety and Standards Board (RSSB) to develop standards in this space, such as the RIS Client Safety Assurance of High Integrity Software-Based Systems for Railway Applications and the RSSB cyber security BowTie model that is being developed.\u00a0<\/p>\n<\/div>\n

\n

Although we haven\u2019t yet witnessed cyber security failures resulting in a rail incident we have seen them happen in other countries and industries \u2013 so it\u2019s important to ensure ORR and the rail industry is properly equipped to deal with threats as it would be with any other health and safety risk.\u00a0<\/p>\n<\/div>\n<\/div><\/div>\n<\/div><\/div>\n<\/p><\/div>\n

\n
Related links<\/div>\n
\n
Promoting health and safety<\/a><\/div>\n<\/p><\/div>\n<\/p><\/div>\n
\"Paul<\/p>\n<\/div>\n
Paul Appleton<\/div>\n
Deputy Director, Railway Safety<\/div>\n","protected":false},"excerpt":{"rendered":"

Working with the rail industry to respond to cyber security threats
\nFri, 22\/03\/2024 – 10:29<\/p>\n

22 March 2024<\/p>\n

Cyber security risks are a real and present risk for the rail industry, with potential safety implications clear. That\u2019s why the Off…<\/p>\n","protected":false},"author":13,"featured_media":1,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[],"tags":[],"class_list":["post-30874","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/wp\/v2\/posts\/30874","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=30874"}],"version-history":[{"count":5,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/wp\/v2\/posts\/30874\/revisions"}],"predecessor-version":[{"id":78337,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/wp\/v2\/posts\/30874\/revisions\/78337"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=\/"}],"wp:attachment":[{"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=30874"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=30874"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vibewire.com.au\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=30874"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}