Skip to main content

European data security agency focuses on public transportation cyber security

In the light of the trend towards smart cities, the European Union Agency for Network and Information Security (ENISA) has released a report on smart cities and their intelligent public transportation (IPT) systems. The report, Cyber Security and Resilience of Intelligent Public Transport, focuses on the protection of the assets critical to IPT in the context of smart cities. These assets are considered critical as they contribute to the normal operation of local public transport networks, including metr
February 15, 2016 Read time: 2 mins
In the light of the trend towards smart cities, the European Union Agency for Network and Information Security (ENISA) has released a report on smart cities and their intelligent public transportation (IPT) systems.

The report, Cyber Security and Resilience of Intelligent Public Transport, focuses on the protection of the assets critical to IPT in the context of smart cities. These assets are considered critical as they contribute to the normal operation of local public transport networks, including metro, buses, light rail and other modes of mass public transport found in smart cities.

It also gives an overview of the existing security measures, or good practice, that could be deployed to protect critical assets and ensure security of the IPT system, based on a survey and interviews of experts from the sector, municipalities, operators, manufacturers and policy makers.

The report makes recommendations for the European Commission (EU) and its member states, IPT operators and manufacturers of IPT systems, including:

The EU and its member states should promote an EU-wide public/private collaboration on IPT cyber security and facilitate the development of a common EU approach to IPT security, including the development of harmonised standards.

IPT operators should integrate cyber security, its strategy and risk management into their corporate governance and routinely re-evaluate their cyber security processes.

Manufacturers of IPT systems should develop products/solutions that match the cyber security requirements of IPT end-users, collaborate in the development of IPT-specific standards and apply them to IPT solutions and develop a trusted information sharing platform.

Related Content

  • Sampo Hietanen’s mobility mission
    June 17, 2016
    For a decade Sampo Hietanen harboured a vision of an alternative form of mobility, now as CEO of MaaS Finland he is putting theory into practice. Sampo Hietanen has become the embodiment of Mobility as a Service (MaaS) – a concept he created 10 years ago while working for Finnish civil engineering giant Destia. “I had been working with the mobile sector on traffic information and started thinking what will happen when this becomes bigger,” he says.
  • Need for secure approach to connected vehicle technology
    January 7, 2013
    Accidental or malicious issue of false messages to connected vehicles could result in dire consequences, so secure systems of authentication and certification are likely to be necessary, write Paul Avery and Sandra Dykes. Connectivity among vehicles in urban traffic systems will provide opportunity for beneficial impacts such as congestion reduction and greater safety. However, it also creates security risks with the potential for targeted disruption. Security algorithms, protocols and procedures must take
  • How can your business plan for the worst?
    May 12, 2022
    Covid and extreme weather events have recently shown that disruption to our lives and daily routines can come suddenly, and on a staggering scale. Roger Leyland of ISN Solutions outlines what can be done to ensure continuity for agencies and businesses
  • Changing roles in data collection for traffic management
    January 23, 2012
    Transport for Greater Manchester's David Hytch discusses the evolving roles of the public and private sector in managing and disseminating data. Data services for traffic management were once the sole preserve of public sector organisations, they being uniquely placed and equipped for the work involved. Now, though, this is changing. There is even a presumption in some countries that the private sector will take a greater, if not actually a lead, role in the provision of information for transport management