Rail cyber security training and consultancy
Challenge
Siemens Mobility Technologies (Beijing) Co., Ltd is currently developing a TBDS system - a set of auxiliary maintenance systems for Siemens’ classic Trainguard MT (TGMT) signalling product.
From analysis of the operation logs and events from both on-board and trackside signalling equipment, TBDS will help technicians assess and resolve system faults and thus improve TGMT’s maintainability.
It was determined that the TBDS system should be developed to cyber security Level 3 (SL3) and, in particular, in compliance with IEC62443-3-3 and other national regulations such as GB/T 28448.
To support the project, Siemens sought external expertise in rail cyber security practices to deliver training sessions on IEC62443, as well as provide technical consultancy services throughout the development phase.
Approach
Our experts are providing bespoke on-site training sessions focusing on IEC 62443-3-3, but also extending across other relevant aspects such as:
- General introduction (background, NIST CSF, IEC62443, TS 50701, ISO 27000, GB/T 28448 etc.)
- IEC 62443-3-2
- IEC 62443-3-3
- IEC 62443-4-1
- IEC 62443-4-2
In addition, at Siemens’ request, our teams are providing expertise to help the project team respond to cyber security-related problems as they emerge throughout the development phase.
Results
Around 30 members of the Siemens project team participated in the training, including design engineers, software specialists, Verification & Validation engineers, and information security engineers.
The course guided the team through all key aspects of the IEC62443 standard, including the architecture requirement, the security level, the criteria of independent Security assessment against IEC62443-3-3, as well as the overlaps and differences between IEC 62443 and other related standards.
Furthermore, the Siemens team are continuing to benefit from regular access to specialist support via a cost-effective model of bi-weekly consultancy sessions that are frequently delivered remotely.