Zoning and Conduits for Railways
This document gives guidance on building zones and conduits for a railway system. To do so, first the methodology is described. This approach is based on the recently published CENELEC Technical Specification 50701 (CLC/CLC/TS 50701:2021). The approach is complemented with additional practical information and hints on how to make the implementation of zoning easier for a railway operator. It gathers the experience of the European Railway Information Sharing and Analysis Center and its members, i.e. European infrastructure managers and railway undertakings. Each of the steps of the zoning process is explained in detail. The document shows what standards are required in each step and what processes should be performed. Additionally, the document discusses the documentation that should be created during each step and guidance in the form of a ‘cookbook’ is given. During the zoning process, zoning models are developed over three iterations: 1. “Proposal railway zoning model”: it is used in the first steps, ranging from first collecting information and designing initial zones (ZCR 1) up to the stage where zones, conduits, communication lines and security levels (SL) get verified briefly for the first time (ZCR 3). The proposal zone model is generic. It can be aligned with but need not fit the corporate structure. 2. “High-level railway zoning model”: it contains a concrete and defined risk verified architecture (ZCR 4) and is implemented via cybersecurity measures (ZCR 5). The company specific high-level zone model should be orientated to the corporate structure. 3. “Final railway zoning model”: it is a detailed and verified version of the high-level model, reflecting the corporate structure within all zones, conduits and communication lines, the SL ZC and other information (ZCR 6 to ZCR 7). At the end of this document, the phases after zoning is complete are discussed, i.e. Migration (ZCR 8) and Operation (ZCR 9). Finally, the issue of legacy systems is commented on briefly.
- Record URL:
-
Availability:
- Find a library where document is available. Order URL: http://worldcat.org/isbn/9789292045715
-
Supplemental Notes:
- © European Union Agency for Cybersecurity (ENISA), 2022.
-
Corporate Authors:
European Union Agency for Cybersecurity
, -
Authors:
- Helmut, Klarer
- Schlehuber, Christian
- Publication Date: 2022-2
Language
- English
Media Info
- Media Type: Digital/other
- Features: Figures;
- Pagination: 59p
Subject/Index Terms
- TRT Terms: Computer security; Conduits; Railroads; Risk assessment; Specifications; Zoning
- Identifier Terms: European Rail Infrastructure Managers; Information Sharing and Analysis Centers
- Geographic Terms: Europe
- Subject Areas: Data and Information Technology; Law; Planning and Forecasting; Railroads; Security and Emergencies;
Filing Info
- Accession Number: 01852255
- Record Type: Publication
- ISBN: 9789292045715
- Files: TRIS
- Created Date: Jul 21 2022 11:32AM