OT security for the railway, by people who have worked on it.

Signalling data networks, operational telecoms, traction power SCADA and control centres, secured to IEC 62443 without touching the safety case.

Discuss a rail requirement Who we are

What we do for rail

Four parts of the railway. What we do on each.

Signalling data networks

A resignalling or recontrol scheme needs a data network between the interlocking, the trackside equipment and the control centre.

Wedesign and check it, sign it off as the responsible engineer, and put the cyber requirements into the supplier contracts.
You geta signed-off network and a cyber security case that sits alongside the safety case.

Signalling network design and CRE

Operational telecoms

The telecoms network is being renewed and the signalling, SCADA, voice and CCTV it carries cannot stop.

Wedesign the new IP network around what is already there, including FTN and FTNx, and move the services onto it while they keep running.
You geta resilient network with each system kept separate, commissioned without an outage.

Operational IP/MPLS networks

Traction power SCADA

The electrical control room and the substations run on SCADA that is not separated from the rest of the network.

Wedecide how much protection each part needs and separate them in the network, so the SCADA system itself is not changed.
You geta separated estate, vendor access that is approved and recorded, and no change to the safety case.

Segmentation and hardening

Control centres and stations

A control centre renewal or a station programme adds new systems, and new links between the office network and operations.

Weput a controlled boundary between the two, give each system (CCTV, PA, customer information, access control) its own zone, and build the network management in from the start.
You geta control centre and stations connected to the business without being exposed to it.

Secure OT network architecture

How we work on the railway

Possessions, safety cases and type approval come first.

Site work is planned around possessions and isolations, under the infrastructure manager's rules.
We assess live signalling and SCADA networks by looking, never by scanning.
The safety case and vendor approvals are checked before any change, and cyber hazards go into the project hazard record.

Where we fit

Before, during and on site.

Before the project: an assessment of what is connected and exposed, and how much protection each part needs.
During design: the network design, checking and sign-off, with the cyber requirements written into the supplier contracts.
On site: the build, tested and commissioned in possessions, then handed over with the evidence.

Standards we work to on the railway: IEC 62443 · EN 50159 · EN 50126 / 50128 / 50129 · CSM-RA · NIS Regulations and the NCSC CAF · infrastructure manager telecoms and signalling standards

Resignalling, electrification, telecoms renewal or a regulator's letter?

Send the scope. An engineer who has worked on the railway will come back to you.

Discuss a rail requirement