Increased awareness of the importance of rail cyber security, and new regulatory pressures, has led the rail industry to incorporate more comprehensive cyber security requirements in new rolling stock and system tenders. 

​

Rolling stock procurements historically did not specify explicit cyber security requirements or, if cyber security requirements were in place, they were at a level that would be deemed insufficient today.  The level of security engineering on legacy rolling stock remains weak, and their cyber risks are often still overlooked or misunderstood.