Global losses from rail cyber security incidents are estimated to cost billions of dollars every year. Increasingly complex software compatibility issues and deficiencies in current digital maintenance practices have led to urgent rail safety alerts being issued in the UK.

More than half of all cybersecurity incidents are caused by internal threats – whether from inadvertent poor practices (such as password sharing and human error) or malicious internal activity by employees.

​

Cyber vulnerabilities can be caused by poor password management, lack of network access control and authentication, and poor management of service laptops, which often run out-of-date security software.