Standardization of cybersecurity of operational technology systems on railways

Abstract

Railways consist of multiple control systems, such as operation management, signaling, and power, which are spread over extensive areas along railway lines to ensure safe and efficient operations. Recently, there has been an increasing threat to the cybersecurity of these control systems, necessitating countermeasures. In the railway sector, a new international standard is being developed, based on the existing IEC 62443 series for general control systems, but tailored to the specific needs of railways. This paper provides an overview of control systems in the railway sector, the necessity of cybersecurity measures, and the efforts of various countries. It also outlines the international standardization of cybersecurity for railway control systems and discusses the significance of promoting international standardization within Japan's railway industry.