Increasing digitisation in the rail sector poses new challenges for manufacturers, operators and system integrators – including in terms of IT security and the interactions between the systems' IT security and functional safety. TÜV SÜD now provides IT security services for electrical signalling systems, as one of the first suppliers worldwide.
TÜV SÜD's IT security services for electrical signalling systems are based on the IEC 62443-4-1 and IEC 62443-3-3 standards, the rail-specific EN 50159 standard and the pre-standard DIN VDE V 0831-104. “The international standard IEC 62443 establishes security measures for industrial automation systems,” explains Dr Thomas Störtkuhl, Team Manager Industrial IT-Security at TÜV SÜD Rail GmbH. The IEC 62443 standard pursues a risk-based approach, which starts with identifying security-relevant high-risk vulnerabilities and then goes on to develop effective security measures. “Our risk assessments combine proven generic methodologies with rail-specific threat scenarios, damage classes, probabilities of occurrence or security levels”, explains Dr Störtkuhl. This enables vulnerabilities to be identified and the actual security levels of rail infrastructure and systems to be determined.
The TÜV SÜD Rail experts document and evaluate the identified vulnerabilities and nonconformities with the relevant IT security standards. Using these results as a basis, they create a prioritised action plan that describes the relevant risks, defines appropriate security measures and determines the residual risk. “Such an action plan and implementation of the protective measures defined therein effectively minimise existing security risks, thereby reducing the probability of system failures and financial loss.“
Partner of the rail industry for more than 50 years
For 50 years the Business Unit Rail has ensured safe, reliable and available systems and processes in rail transport, benefiting from the experience of its extensive international network of recognised experts. Its subsidiaries include SIGNON, TÜV SÜD Danmark and TÜV SÜD Nederland. The experts at Business Unit Rail support manufacturers, operators and authorities from the design phase, installation and placing into service up to operation of rolling stock and its removal from service.
Further information is available at www.tuv-sud.com/rail.
Press-contact: Dr Thomas Oberst