Skip to main content

European data security agency focuses on public transportation cyber security

In the light of the trend towards smart cities, the European Union Agency for Network and Information Security (ENISA) has released a report on smart cities and their intelligent public transportation (IPT) systems. The report, Cyber Security and Resilience of Intelligent Public Transport, focuses on the protection of the assets critical to IPT in the context of smart cities. These assets are considered critical as they contribute to the normal operation of local public transport networks, including metr
February 15, 2016 Read time: 2 mins
In the light of the trend towards smart cities, the European Union Agency for Network and Information Security (ENISA) has released a report on smart cities and their intelligent public transportation (IPT) systems.

The report, Cyber Security and Resilience of Intelligent Public Transport, focuses on the protection of the assets critical to IPT in the context of smart cities. These assets are considered critical as they contribute to the normal operation of local public transport networks, including metro, buses, light rail and other modes of mass public transport found in smart cities.

It also gives an overview of the existing security measures, or good practice, that could be deployed to protect critical assets and ensure security of the IPT system, based on a survey and interviews of experts from the sector, municipalities, operators, manufacturers and policy makers.

The report makes recommendations for the European Commission (EU) and its member states, IPT operators and manufacturers of IPT systems, including:

The EU and its member states should promote an EU-wide public/private collaboration on IPT cyber security and facilitate the development of a common EU approach to IPT security, including the development of harmonised standards.

IPT operators should integrate cyber security, its strategy and risk management into their corporate governance and routinely re-evaluate their cyber security processes.

Manufacturers of IPT systems should develop products/solutions that match the cyber security requirements of IPT end-users, collaborate in the development of IPT-specific standards and apply them to IPT solutions and develop a trusted information sharing platform.

Related Content

  • February 1, 2012
    Include ITS in policy decisions from the start, not as an afterthought
    DG TREN's Fotis Karamitsos, on why the European Commission's new ITS Action Plan is looking to the past for future direction. The European Commission's (EC's) new Action Plan for the Deployment of Intelligent Transport Systems in Europe, which was announced as 2008 drew to a close, intends that transport and travel become 'cleaner; more efficient, including energy efficient; and safer and more secure'. At first sight, that wording might be interpreted as marking a significant policy shift within Europe, wit
  • May 6, 2020
    Don’t forget security threat, says Econolite
    A new level of communication is helping deliver on the promise of Vision Zero and a more sustainable future. But amid the promise, Econolite’s Sunny Chakravarty suggests we need to be mindful of the potential downsides in an age of mass connectivity
  • October 19, 2015
    Tighten up on cyber security before hackers infiltrate ITS infrastructure
    This year’s ITS World Congress in Bordeaux will have three sessions dedicated to cyber security and the issue will also be addressed under connected and automated vehicles categories. Jon Masters finds out why. American security researchers Charlie Miller and Chris Valasek attracted international press coverage recently when they demonstrated how they could hack into and take control of a vehicle from a remote laptop. While the implications are clearly serious for vehicle manufacturers, highway and transpor
  • June 2, 2022
    ITS European Congress 2022: mobility data
    Summit finds data is 'glue' between transport and mobility - but trust is absolutely vital too