Skip to content

Railway technology

IT security railway technology

Digitalisation in rail transport requires high IT security standards. TÜV NORD supports manufacturers and operators with testing and certification in accordance with international standards such as IEC 62443 - for safe and reliable railway operations.

Kontrollraum mit mehreren Monitoren zur Überwachung von Verkehrssystemen

Protection against cyberattacks in the rail sector

Modern trains are more complex than ever. On board, numerous systems, sensors, hardware and software are constantly exchanging data with each other. Formerly wired, data is now increasingly exchanged wirelessly via open networks or the internet.

Although this form of communication is efficient and flexible, unprotected it offers a large target for cyberattacks.

Cyberattacks not only cause considerable economic damage by disrupting freight and passenger transport, for example; if they target the safety functions of a railway system, they can even endanger human lives.

IT security is therefore essential to protect railway systems from data loss, sabotage and potentially life-threatening situations and to ensure the reliability of rail transport.

TÜV NORD is your reliable partner for securing your railway systems.

IEC 62443: key standard for IT security in railway technology

IEC 62443, the most important instrument for ensuring IT security, is an international series of standards that focuses on the protection of industrial automation systems (Industrial Control Systems, ICS) - and therefore also railway systems - against cyber threats.

The IEC 62443 standards are divided into several parts that cover different aspects of cyber security:

  • Basic concepts and models for ICS cyber security
  • System requirements for secure system integration
  • Component requirements for secure products

Standards for functional safety in the railway sector, such as DIN EN 50129:2019, DIN EN 50657:2017 or IEC 62443, also refer to IEC 62443 when it comes to implementing IT security requirements.

By applying IEC 62443, manufacturers, operators and system integrators can identify risks, implement appropriate protective measures and improve the resilience of their systems against cyber attacks.

TÜV NORD tests your railway systems for compliance and supports you in ensuring their availability, confidentiality and security.

Our services

  • Inspection according to IEC 62443-3-2:2020: Security risk assessment and system design
  • Inspection according to IEC 62443-3-3:2013 + COR1:2014: System requirements for IT security and security level
  • Inspection according to IEC 62443-4-1:2018: Life cycle requirements for secure product development
  • Inspection according to IEC 62443-4-2:2019: Technical safety requirements for components of industrial automation systems

Contact

We look forward to your inquiry!

TÜV NORD Mobilität

Railway technology