Chief executive leadership of transportation agencies have placed substantial emphasis on the protection of IT systems against cyber threats. Less focus has been devoted to the risks to operational technology (OT) and equipment or in protecting transportation business operations.
The TRB National Cooperative Highway Research Program's NCHRP Web-Only Document 355: Cybersecurity Issues and Protection Strategies for State Transportation Agency CEOs seeks to mitigate that imbalance, especially as physical OT assets become increasingly connected through electronic networks and managed remotely by software. Volume 2, Transportation Cyber Risk Guide consists of a high-level framework to assess cyber risk; identifies strategies for preparing for, preventing, and managing cyber incidents; and links transportation asset classification with cyber risk. Details of the research project that developed this guide are available in NCHRP Web-Only Document 355: Cybersecurity Issues and Protection Strategies for State Transportation Agency CEOs, Volume 1: Project Summary Report.
Supplemental to the document is a presentation of an overview of the research.
National Academies of Sciences, Engineering, and Medicine. 2023. Cybersecurity Issues and Protection Strategies for State Transportation Agency CEOs: Volume 2, Transportation Cyber Risk Guide. Washington, DC: The National Academies Press. https://doi.org/10.17226/27035.
Chapters | skim | |
---|---|---|
Front Matter | i-v | |
Summary | 1-1 | |
1. Introduction | 2-3 | |
2. Guide Concepts | 4-7 | |
3. Transportation Cyber Risk Guide | 8-21 | |
4. Proposed Levels of Cybersecurity Capability | 22-23 | |
5. Conclusion | 24-26 |
The Chapter Skim search tool presents what we've algorithmically identified as the most significant single chunk of text within every page in the chapter. You may select key terms to highlight them within pages of each chapter.