Course Description
As railways digitalise — CBTC, ETCS, connected rolling stock, remote condition monitoring — they inherit the cyber risk of any connected industrial system, but with the safety consequences of a railway. CENELEC TS 50701 and its successor IEC 63452 provide the sector's dedicated cyber security framework, and compliance is increasingly a contractual requirement.
This course develops a practical understanding of railway cyber security. Participants learn the rail threat landscape, the TS 50701 / IEC 63452 framework and its relationship to IEC 62443, zones and conduits, risk assessment, security requirements and design, and the critical interface between cyber security and railway safety assurance.
What you will achieve
By the end of this training course, participants will be able to:
- Explain the cyber threat landscape for railways
- Understand the TS 50701 and IEC 63452 framework
- Relate rail cyber security to IEC 62443
- Apply zones and conduits to railway systems
- Conduct railway cyber security risk assessment
- Define security requirements and design measures
- Understand the interface between cyber security and safety
- Address cyber security across the system lifecycle
How the course is delivered
The course combines the railway cyber security framework with practical risk assessment and zoning exercises. Participants work through zones and conduits, risk assessment and requirement definition using realistic railway system scenarios.
The programme emphasises the safety-security interface that makes railway cyber security distinct from general IT or even general OT security.
Designed for
This training course is ideal for:
- Rail systems, signalling and OT engineers
- Cyber security professionals in transport
- Safety and assurance engineers
- Infrastructure managers and operators
- Anyone responsible for railway cyber security
Daily programme
- The rail cyber threat landscape
- Why rail is different: safety and cyber
- Digitalisation and the attack surface
- Introduction to TS 50701 and IEC 63452
- Relationship to IEC 62443
- Zones and conduits in railways
- System definition and boundaries
- Security levels
- Railway cyber risk assessment
- Threat modelling
- Security requirements
- Security design and controls
- The safety-security interface
- Verification and validation
- Security across the lifecycle
- Incident response, workshop and review
Certification & accreditation
BII Certificate of Completion
BII Certificate of Completion Upon successful completion, participants receive a BII Development Institute Certificate of Completion with a unique reference code that is independently verifiable. Our certificates are recognised internationally and reflect successful completion of your chosen programme.
