OT Cyber Security in Rail: Protecting Signalling, Control Systems and Rolling Stock

Why Rail OT Cyber Security Has Unique Characteristics

Rail operational technology — signalling systems, train management systems, level crossing controllers, passenger information systems, and rolling stock software — has safety-critical characteristics that create cyber security requirements that go beyond standard IT or even industrial OT security. A compromised signalling system is not just a business continuity risk — it is a safety risk. This safety dimension imposes additional requirements on change management, testing, and recovery that do not apply in most other OT environments.

NIS2 classifies rail as an essential entity sector, imposing the Directive's most demanding security requirements on train operating companies, infrastructure managers, and rolling stock operators above the Directive's size thresholds. The ORR has signalled growing attention to cyber security as a component of its safety and operational oversight of UK rail operators.