Cybersecurity Resilience Assessment Tool to Enhance Public Confidence in Transit

In 2021, the Federal Transit Administration (FTA) awarded the Rock Island County Metropolitan Mass Transit District (MetroLINK) a grant to develop a cybersecurity assessment tool to assess its cyber posture as part of FTA’s Public Transportation COVID-19 Research Demonstration Grant Program. The Cybersecurity Assessment Tool for Transit (CATT) and supporting documents were developed to assist MetroLINK and other small and mid-sized transit agencies in assessing their cyber preparedness and resilience. CATT is designed specifically for the cybersecurity needs of small to mid-sized public transit agencies. The goal of the tool is to onboard public transit organizations to develop and strengthen their cybersecurity program to identify risks and prioritize activities to mitigate them. The COVID-19 pandemic forced agencies to change how they operated, bringing in new technologies to manage critical operations and to facilitate remote work, many of which exponentially increased the number of threat vectors. In parallel, cyberattacks and network intrusions continue to proliferate. Recent incidents demonstrate that even small and mid-sized transit agencies are vulnerable to system disruptions due to cyberattacks. Prior to this project, no cybersecurity assessment tools had been developed specifically for the unique context and conditions faced by transit agencies.

• Record URL:
  • https://doi.org/10.21949/1527663
• Record URL:
  • https://rosap.ntl.bts.gov/view/dot/68850
• Corporate Authors:

  Max Cybersecurity

  Washington, DC  United States 

  Grayline Group

  Austin, TX  United States 

  Federal Transit Administration

  Office of Research, Demonstration and Innovation
  1200 New Jersey Avenue, SE
  Washington, DC  United States  20590

  Rock Island County Metropolitan Mass Transit District (MetroLINK)

  Moline, IL  United States 
• Authors:
  • Echols, Michael
  • Thomas, Brandon
  • Seckman, Kathryn
  • Belcher, Scott
• Publication Date: 2023-8

Language

• English

Media Info

• Media Type: Digital/other
• Edition: Final Report
• Pagination: 106p

Subject/Index Terms

• TRT Terms: Computer security; Disaster preparedness; Public transit; Risk assessment
• Subject Areas: Data and Information Technology; Planning and Forecasting; Public Transportation; Security and Emergencies;

Filing Info

• Accession Number: 01893263
• Record Type: Publication
• Report/Paper Numbers: FTA Report No. 0250
• Files: NTL, TRIS, ATRI, USDOT
• Created Date: Sep 15 2023 8:45AM