3rd General Assembly of the ER-ISAC Meetings (UPDATE)

The European Union Agency for Cybersecurity, ENISA, co-hosted the 3rd General Assembly of the European Rail Information Sharing and Analysis Centre (ER-ISAC) across two days, on the 26^th of June and on the 14^th of July. The two events were virtual and closed to the public.

ENISA has played a significant role in supporting the ER-ISAC from the start. ENISA is currently working closely with members of this ISAC on a study to assess the cybersecurity posture of the rail sector. The study will highlight current practises as well as the sector’s main cybersecurity challenges.

The two ER-ISAC meetings allowed IT professionals from 40 organisations in the rail sector to discuss cybersecurity issues and developments.

The June meeting included a series of presentations by partners of the ISAC on projects that enhance the rail sector’s cybersecurity procedures across Europe. Railway operators shared good practices and policy developments. The International Union of Railways (UIC) presented a welcome speech and reflected on the importance of cybersecurity in the sector. Additionally, as an invited guest, EUROCONTROL provided insights on threat intelligence in the aviation sector.

The July meeting, held earlier today, allowed IT professionals in the rail sector to further develop the conversation about cybersecurity issues, as well as discuss the ISAC’s roadmap of activities and current rail cybersecurity research & innovation initiatives.

The meeting included presentations by partners of the ISAC. The Directorate-General for Mobility and Transport (DG MOVE) showcased the upcoming transport cybersecurity toolkit. The European Railway Agency (ERA) presented future developments on Control Command and Signalling (CCS) architecture and on interoperability. UNIFE, which represents European train builders and rail equipment suppliers, shared its vision on cybersecurity. Alstom and Siemens covered topics of information sharing, and training and awareness, respectively.

ISAC members also shared good practices. Deutsche Bahn discussed forensic analysis and the CENELEC technical specification 50701 on cybersecurity for the rail sector. Infrabel coordinated a closed-door session of information exchange among ISAC members.

Further Information

For more information on ENISA’s work in this area please visite the Information Sharing and Analysis Centers (ISACs) webpage

For questions related to the press and interviews, please contact press (at) enisa.europa.eu.