Skip to main content

Cybersecurity Awareness

Project tasks

  • PROSE presentation on the current state of the railway industry
  • PROSE presentation on the future development of the railway industry
  • In-depth discussion on TS 50701, security vs. safety and discussion on standards
  • Interactive brainstorming on the gap analysis
  • Consolidation of the results of the gap analysis and prioritisation
  • Analysis of the customer’s security documentation
  • Summary and definition of the next steps and goal

Our approach

The digital transformation of the rail industry is accelerating at an unprecedented pace. With increasing connectivity comes the urgent need to improve cybersecurity frameworks to ensure resilience against evolving threats. A recent industry workshop highlighted key findings on the current state of cybersecurity in railway systems and the expected regulatory changes that will shape the future.

Security in the railway sector has traditionally focused on protecting people and machines. However, cybersecurity has now become a critical factor in protecting IT systems, infrastructure and sensitive data. Despite their relevance, many existing railway standards provide only limited guidance on cybersecurity. Important standards such as EN 50126, EN 50716 and EN 50129 recognise security concerns but do not provide concrete measures. The IEC 62443 series, which emerged in the 2010s, has become a fundamental security framework, but its full integration into railway systems is still a work in progress.

A key challenge in cybersecurity is the human factor. Unclear role definitions in projects can lead to security risks – for example, through software updates that are implemented without sufficient validation and can compromise critical systems. Clear role definitions and structured safety processes are necessary to minimise such risks.

The future of railway safety will be shaped by new guidelines and harmonised standards designed to close existing safety gaps. Several regulatory developments will redefine safety requirements in the sector. The NIS 2 Directive obliges operators of critical infrastructure, including the railway industry, to take comprehensive cybersecurity measures. Companies in the supply chain will also have to prove their compliance in future.

The Cyber Resilience Act (CRA) places strict security requirements on manufacturers and suppliers of digital products, including railway technology. IEC 63452 is expected to become a global benchmark for cybersecurity in railway systems and combines elements from IEC 62443 and TS 50701 to create a standardised security framework. In addition, there is a trend towards common cybersecurity services – for example in the areas of authentication, logging and network security to ensure standardised protective measures for critical rail systems.

Customer benefit

Railway operators, manufacturers and suppliers must proactively adapt to these new regulations. Key recommendations include:

  • Identification and inventory of all assets (especially SW)
  • Conducting cybersecurity risk assessments to identify vulnerabilities
  • Establish clear security requirements for suppliers and ensure compliance throughout the value chain
  • Implementing security-by-design principles in the development of new products
  • Strengthen security incident response capabilities to effectively manage threats

By taking a proactive approach, the industry can ensure the safety, reliability and resilience of railway systems in an increasingly connected world.

  

Expert Consulting for the SJ High-Speed Train X2000 Upgrade

Customer: Swedish State Railwyas (SJ), Sweden

Project tasks

  • Upgrade of the drive system
  • Updating the Train Control and Monitoring System (TCMS)
  • Coordination and support for the modernisation of the exterior door system
  • Interior refurbishment of the passenger carriages
  • Test and verification

Our approach

​Swedish State Railways (SJ) is launching a comprehensive modernisation programme for its fleet of 36 X2000 passenger trains, which have been in service for over three decades. This extensive project includes a number of important modernisations designed to improve performance, reliability and passenger comfort. The scope of the modernisation includes a complete overhaul of the trains’ propulsion system to increase efficiency and reduce environmental impact. In addition, the Train Control and Monitoring System (TCMS) will be upgraded to the latest railway technology to ensure better operational control and safety. The refurbishment also extends to the exterior doors. In addition, the interior of the passenger coaches will be extensively renovated to provide a more comfortable and aesthetically pleasing travelling experience. These improvements are aimed at extending the service life of the trains and adapting them to current technical and ecological standards.

PROSE is playing a central role in the realisation of this ambitious project by consulting SJ and its suppliers with a range of services. Our approach is based on a comprehensive project management strategy that includes project coordination and technical planning. We are also involved in rigorous testing and inspection phases to ensure that all retrofits meet the stringent standards expected in modern passenger rail transport. Our team consists of experienced professionals with in-depth knowledge of railway systems who bring a wealth of knowledge and experience to the project. By integrating seamlessly with SJ’s operations, we facilitate effective communication and coordination between all stakeholders, proactively address challenges and ensure that project milestones are met efficiently. Our holistic approach ensures that from initial design to final implementation, every aspect of the project is handled with precision and care.

Customer benefit

By entrusting PROSE with this extensive modernisation project, Swedish State Railways (SJ) has gained access to a team of highly experienced experts with a deep understanding of the complexities of modernising outdated train fleets. Our involvement ensures the project runs smoothly and effectively, maximising the potential for on-time and on-budget delivery. Our expertise helps to anticipate potential issues and mitigate risks to ensure that the modernised trains meet current and future rail transport requirements. Immediate benefits for SJ include improved train performance and increased passenger satisfaction. Ultimately, this project supports SJ’s goals of improving operational efficiency and providing a superior travel experience, reinforcing the company’s reputation as a leader in sustainable and innovative rail transport solutions.

 

 

Design and authorisation strategy for a rail-bound maintenance machine

Customer: SCHÖMA, Germany

Project tasks

  • Vehicle authorisation strategy
  • Design assurance (Systems Engineering)
  • Concept development
  • Technical evaluation of offers and technical coordination with suppliers
  • Project management

Our approach

SCHÖMA plans to develop a proven, powered, three-part rail-bound maintenance machine with cab, loading platform and crane called HERO. SCHÖMA needs support in developing the authorisation strategy to fulfil the EN 14033 standards and in defining the design process including verification and validation.

PROSE developed the decision-making basis for the authorisation process enabling a defined combination of the three vehicles of the working machine to be approved and the verifications and evidence according to EN 14033 to be provided. PROSE also supported SCHÖMA in the budget planning phase of the development of the HERO work machine in the evaluation of supplier offers for systems and components such as the power train, braking system, power generation, train protection (ETCS) and heating, ventilation and air conditioning (HVAC). In addition, PROSE defined the design phases and the design assurance process according to the systems engineering methodology to ensure a defined and structured design process.

Customer benefit

PROSE has structured and optimised SCHÖMA’s development process by systematically applying the system engineering methodology. This approach has not only minimised development risks associated with costs and timelines but has crucially enhanced the predictability and likelihood of obtaining the necessary authorisation.

 

          

Program Management ATO Sector Program

Customer: BLS Netz AG, Dr. Florian Kappler, Switzerland

Project tasks

  • Program Management
  • Project Planning
  • Coordination among all Swiss ATO projects
  • Leading the marketing team to develop and maintain the ATO website
  • Quarterly reporting to the steering board (railway undertakings, infrastructure managers and industry)
  • Coordination with stakeholders, such as the national authority BAV, as well as the industry
  • Supporting specific ATO projects with technical-, operational- and business advisory

Our Approach

In May 2022, the Federal Office of Transport called on the rail sector to align and better coordinate future ATO activities within the Swiss rail sector.

PROSE was commissioned to manage the programme for all Swiss ATO projects. In close cooperation with the ATO core team, PROSE established regular monthly exchanges and jointly identified and developed central cross-cutting topics.

In addition, PROSE also led the communication team and worked with this team to develop and maintain the ATO industry website (https://voev.ch/ato). Furthermore, PROSE initiated an ATO-related conference day that invited and actively involved the industry in ATO developments.

Customer benefit

With PROSE as a partner, the customer benefits from comprehensive expertise in the areas of on-board signalling, ETCS and ATO, both on the line and on the vehicle side. An entrepreneurial approach, in-depth technical knowledge and market knowledge are essential for a successful programme design in the first year.

The customer does not need to develop its own project-specific management resources, as PROSE, as an independent consultant, coordinates the related interests of all project managers.

 

   

Corrosion repair

Project tasks

  • Creating a CAD model of the carbody from a set of drawings
  • Creation of an FE model of the carbody
  • Strength assessment of the condition without corrosion
  • Consideration of corrosion damage in the calculation model
  • Analysis and determination of minimum wall thicknesses
  • Specification of measures for corrosion repair
  • Preparation of drawings to document the repair solution

Our Approach

Corrosion damage to the lower structure of the carbody was discovered during the planning of conversion measures on dining carriages. The wagons are welded steel constructions from 1990 and due to the advanced age of the vehicles, the operator did not have any CAD models or strength documents. PROSE was commissioned to assess the utilisation of the carbody in terms of strength. First in their original, corrosion-free state and then considering the identified corrosion damage. Additionally, we were asked to develop solutions to prolong the service life of the vehicles.

In a first step, a CAD model was created from the set of drawings. This model then served as the basis for creating the Finite Element (FE) model, which embodies the target condition of the carbody structure. A subsequent strength analysis then showed how many theoretical reserves the structure still had.

In the next step, the FE model was updated to include corroded areas, and the calculations were repeated. In this way, the effect of corrosion on the structural strength of the carbody could be determined and evaluated.

Using an iterative approach, a maximum corrosion depth could be determined for the damaged areas. For areas where it was foreseeable that the corrosion would penetrate too deeply, repair solutions were also developed, which included welding in new profiles, and their strength was verified.

Customer benefit

Thanks to PROSE’s work, the customer now has access to a CAD model of the carbody. The strength analysis has enabled the determination of minimum wall thicknesses for vehicle areas typically affected by corrosion, which the customer can use to evaluate the extent of corrosion damage. For areas where corrosion has penetrated too deeply, the customer now possesses localised repair solutions. This can significantly extend the service life of the vehicles.

 

          

Authorisation Support – Repainting of ET425.5 EMUs

Customer: Transdev Hannover GmbH, Germany

Project tasks

  • Project management
  • Requirements capture
  • Authorisation support
  • Communication with NoBo and DeBo
  • Preparation of evidence and admission documents
  • Preparation of a change notification

Our Approach

Transdev Hannover GmbH changed the existing colour scheme of 13 EMUs of the type ET425.5 from the Deutsche Bahn “Verkehrsrot” to the Transdev branding in blue and white. PROSE supported with authorisation management concerning TSI LOC&PAS, TSI PRM and German NNTR as well as requirements capture and evidence documents. The main obstacle was to find a way to establish the evidence documents of the fire protection as no spare parts existed to conduct the necessary experiments.

Due to the great experience and good networking within the industry, it was possible to agree on a feasible way of proving fire protection with the assessment bodies as early as the tendering phase. In combination with the close support of the customer in every phase of the project, loops or lengthy discussions could be avoided.

Customer benefit

PROSE led Transdev Hannover through the authorisation process including communication with the assessment bodies and project management. This ultimately resulted in the timely submission of the documents and rapid final processing by the national safety authority (EBA) including the final “Go”.

 

 

QA of suppliers and production for driver’s desk refurbishment in C20 Metro

Project tasks

  • Quality assurance of sub-suppliers
  • Supervision of prototype phase
  • First class installation
  • Delivery inspections

Our Approach

PROSE have worked closely with the suppliers from an early phase in the development process to ensure a smooth transition from development through prototype to the production ramp-up phase and to ensure stable quality throughout the serial production.

Customer benefit

By improving the supplier delivery early in the project, the customer could benefit from minimizing quality issues just before the start of production. PROSE’s wide range of available services helped the customer in many stages of the project.

 

Maintenance plan for a maintenance shop of the Swiss Federal Railways

Customer: Swiss Federal Railways (SBB) Passenger Division, Switzerland

Project tasks

  • Creation of maintenance plan

Our Approach

​PROSE developed the plan in close cooperation with SBB’s responsible persons. The understanding of the maintenance shop in Basel gained from past assignments and experience with other maintenance facilities helped ensure efficient project implementation.

Customer benefit

SBB received a production concept that describes the interaction of the production resources in the context of the business process model to enable an in-depth understanding of the site within SBB. The target group of the production concept includes the management personnel at the site, partner organisations within and outside the site, the management of SBB Passenger Traffic Production and the facility management.

Development of rail operation and technology strategy 2050

Customer: Rhätische Bahn AG, Switzerland

Project tasks

  • Strategy development
  • Analysis and conception
  • Stakeholder management & methodology
  • Project management, incl. Stakeholders, Communication and Change-Management

Our Approach

Due to the technology’s long life cycle and high investment volume, investments in railway technology require a comprehensible focus and demonstrable benefits. In collaboration with the RhB specialists, PROSE developed an operational target picture and operational use cases for the year 2050 based on the identified challenges of daily operations. Based on this target picture, the benefits created by technology and target systems are clearly identified, and the technology strategy can be aligned with the fulfilment of the target picture.

Based on the operational target picture, the ACTUAL system architecture and the known life cycles were recorded with the RhB experts. Based on the information on the current situation, PROSE was able to develop a proposal for the TARGET system architecture, including migration planning and implementation concepts.

With the help of modern methods and targeted workshops, PROSE and RhB achieved the project goal in a very short time and presented the first results to the strategic steering committee.

Customer benefit

RhB benefited from the PROSE experts’ overall system knowledge and technical expertise in railway operations & automation. In combination with the methodical and analytical approach of the PROSE project team, RhB was able to develop and discuss initial approaches for the implementation of the strategy across all areas. This includes, for example, a migration map with the life cycle of systems and vehicles to identify possible migration windows for the systems, the visualisation of the operational target processes with the target degree of automation and possible implementation variants on the RhB route network.

   

Centralising the ICN tilting train maintenance – Variant study for maintenance work in a short shop

Customer: SBB Passenger Traffic, Switzerland

Project tasks

  • Project management
  • Variant assessment
  • Operating and production concept
  • Compilation of profitability calculation

Our Approach

Together with various SBB organisations and several specialist planners (L2A Architekten AG, Technisches Büro K.N.O.L.L. GmbH, Wiederkehr und Villiger AG and Fahrgrund AG), 12 variants were developed in the greater Biel area and evaluated operationally, technically, and economically. Planning documents, a cost estimate, a possible schedule, and the corresponding application documentation for the decision-making process within SBB were prepared for the best variant. In addition, a recommendation was made for further procedures, including the risk assessment for the subsequent phases.

Customer benefit

With the wealth of experience of the people involved, the possibilities at the Biel site could be quickly and efficiently identified and evaluated. The option of additional roof work was subsequently integrated due to the consideration of the entire production concept.

 

© PROSE. All rights reserved