TRB Webinar: Effective Practices for the Protection of Transit Infrastructure from Cyber Incidents

TRB conducted a webinar on Tuesday, November 17, 2015 from 2:00 PM to 3:30 PM ET that presented material developed for the NCHRP Report 20-59(48): Effective Practices for the Protection of Transportation Infrastructure from Cyber Incidents. The project focuses on fundamental strategic, operational, and planning activities associated with transit control systems cybersecurity.

Participants must register in advance of the webinar, and there is no fee to attend this webinar. A certificate for 1.5 Professional Development Hours (PDHs) was provided to attendees who registered and attended the webinar as an individual.

This webinar intended to narrow the knowledge gap between cybersecurity specialists and transit operations managers by providing greater context and information regarding critical transit systems, security vulnerabilities of typical transit control systems, and effective countermeasures. This webinar also provided an overview of the nature of transit cyber events and their operational and safety impacts, including common vulnerabilities, a list of effective practices and recommended mitigation strategies, and effective decision making approaches for implementing cyber security in transit transportation systems.

This webinar supplements a webinar held by TRB on May 13, 2015 on Effective Practices for the Protection of Transportation Infrastructure from Cyber Incidents, which focused on highway-related cyber incidents.



Here are the slides from the presentation.


Webinar Presenters

• Ron Frazier, CASE
• Pat Bye, Western Management & Consulting, LLC
• Yuko Nakanishi, Nakanishi Research & Consulting, LLC

Moderator: David Fletcher, Western Management & Consulting, LLC


Webinar Outline

1. Introduction: What is Cybersecurity and Why It Matters to Transit Operations
2. Top Myths of Transportation Cybersecurity
3. Cyber Security Principles
4. Risk Management Principles and Risk Management Approaches
5. Plans and Strategies, Establishing Priorities, Organizing Roles and Responsibilities
6. Transit Operations Systems
7. Countermeasures: Protection of Infrastructure and Operations Systems
8. Training: Building a Culture of Cyber Security
9. Security Programs and Support Frameworks
10. Question and Answer Session

The first 60 minutes of the webinar will be for presentations and the final 30 minutes will be reserved for audience questions. The Registered Continuing Education Program (RCEP) categorizes this webinar activity as relating to health, safety, and welfare including core technical.


Learning Objectives
At the end of this webinar, participants were able to:

• Identify common cyber vulnerabilities of transit infrastructure, including those pertaining to various operations systems used in their organization
• Assess whether their Continuity and Disaster Management Plans adequately address cyber risks
• Recognize if transit systems have sufficient resources and training in place to:
1. Monitor operations systems
2. Identify intrusions and other cyber-events
3. Take effective countermeasures, and
4. Recover from serious cyber incidents

Registration Information
There is no fee to attend this webinar. After registering you will receive a confirmation email containing information about joining the webinar.


Professional Development Hour Information
A certificate for 1.5 Professional Development Hours (PDHs) was provided to Professional Engineers (PEs) who registered and attended the webinar as an individual. For groups, only the person that registers and attends the session will receive a PDH certificate.

Individuals registered as Florida PEs are no longer required to email TRB with your license number to report your attendance. Instead, please use your certificate that TRB provides through RCEP.net as verification of your attendance to the Florida Board of Professional Engineers.

Please check with your licensing board to ensure that TRB webinar PDHs are approved by your board.

This webinar was developed in March 2015. TRB has met the standards and requirements of the Registered Continuing Education Program (RCEP). Credit earned on completion of this program will be reported to RCEP by TRB. Certificates of Completion will be issued to individuals who register for and attend the entire webinar session. Complaints about registered providers may be sent to RCEP, 1015 15th Street, NW, 8th Floor, Washington, DC 20005. Website: www.RCEP.net.

Registration questions? Contact Reggie Gillum at RGillum@nas.edu.