Chuck Weissman, chair
The Control and Communications Cyber Security Work Group develops APTA standards for rail system control and communications security.
The Control and Communications Security Work Group that began its work in 2007 published Part-1 of the APTA Recommended Practice “Securing Control and Communications Systems in Transit Environments” in 2010 (APTA RP-CCS-1-RT-001-10).
Part-1 is an introductory guide for transit agency cyber-security and is focused on general principles such as describing transit system networks, organizing a cyber-security program, and performing a cyber-security risk assessment. Part-1 is limited in its cyber-security scope and it does not address the specific use of cyber protection technologies for prevention of attacks once cyber risks are identified.
Current project: Part-2 will focus on defining and applying security controls applied to high risk/consequence and vital systems (safety-critical signaling systems, etc) and medium risk/consequence systems (SCADA such as traction power systems etc), while laying out these security controls in the context of a transit agency security plan.
For more information contact:
APTA Staff Advisor
Kevin Dow
Phone: 202.496.4831
Email: kdow@apta.com