Skip to main content
NEWAG electric locomotive supported by PROSE for TCMS cybersecurity assessment and approval.

TCMS cybersecurity assessment and approval

Customer: Newag, Poland

Project tasks

  • Supporting the customer throughout the V-model with a focus on cybersecurity
  • Assessing cybersecurity requirements relevant to the TCMS in accordance with IEC 62443 / TS 50701
  • Conducting high-level and detailed risk analyses, threat matrix assessments and CbC analyses
  • Defining security-related application conditions (SecRACs)
  • Supporting the assessment and approval process

Our approach

The cybersecurity assessment followed the methodology of IEC 62443 / TS 50701 and combined technical analysis, structured documentation and verification throughout the entire V-model. This ensured that cybersecurity aspects were integrated early into development, assessment and compliance activities.

The work included high-level and detailed risk analyses, threat matrix assessments, CbC analyses, SecRACs, and the development of the TCMS Technical Security Concept, covering network architecture, firewall configurations and system settings. In addition, incorporation of outcomes from external penetration tests have into the security concept have been made.

PROSE prepared the Security Case and supported the customer throughout the assessment and approval process. All analysis and evidence activities were consistently linked and documented in a traceable manner.

Customer benefit

NEWAG received structured support aligned with IEC 62443 / TS 50701 to address cybersecurity requirements during vehicle development and approval. Security risks could be identified and assessed at an early stage and addressed through appropriate technical and organisational measures.

The independent technical assessment also strengthened the evidence required for safety and cybersecurity compliance. By combining railway-system expertise with cybersecurity competence, PROSE helped ensure a consistent and traceable link between development, verification and approval activities.

 

Assessing locomotive compatibility on an SJ Rc6 electric locomotive in Sweden, showing roof-mounted pantographs and high-voltage equipment at a station platform.

Assessing locomotive compatibility under increased overhead line voltage

Customer: SJ AB, Sweden
End customer: Trafikverket, Sweden

Project tasks

  • Technical investigation
  • Documentation research
  • Identification of possible changes in locomotive high-voltage circuits
  • Cost estimation of the changes
  • Integration of the changes in the actual system

Our approach

PROSE began with a structured review of the Rc6 high-voltage system, analysing design documentation, component specifications, and historical modification records to establish the vehicle’s current technical baseline. Based on this analysis, we evaluated the impact of the increased maximum voltage on insulation coordination, component voltage margins, and protection systems. Where necessary, we developed alternative technical solutions to ensure compliance with the new operating conditions. Each option was assessed from both a technical and economic perspective, including feasibility, implementation effort, operational implications, and associated risks. The work was carried out in close dialogue with SJ as operator and Trafikverket as infrastructure owner to ensure transparency and alignment throughout the project.

Customer benefit

The customer gained a transparent and technically sound decision basis for operating the Rc6 fleet under increased overhead line voltage. Our independent assessment clarified voltage margins, component limitations, and protection requirements, creating full visibility of technical risks and modification needs.
By systematically comparing refurbishment scenarios, including cost and implementation implications, we enabled SJ and Trafikverket to prioritise measures based on safety, operational reliability, and long-term investment protection. With PROSE’s in-depth knowledge of Swedish rolling stock and infrastructure interfaces, the operators secured a technically robust and future-proof solution aligned with updated network standards.

 

Blue and red trains at a snowy outdoor station platform at night, illustrating rail coupler upgrade and electrical interface integration for snowblower wagon type B257

Coupler upgrade and electrical interface integration

Customer: MTR Tech AB, Sweden

Project tasks

  • Requirements capture and definition of electrical interface
  • Design review
  • Update of technical documentation
  • Verification of electrical connections and signal integrity
  • Official drawing release and configuration control
  • Coordination with MTR during implementation and validation

Our approach

PROSE contributed to the design definition of the new electrical interface and collaborated closely with MTR engineers during system implementation of the upgraded coupling system be-tween the Snowblower Wagon Type B257 and the C20 train.
While MTR carried out on-site installation and testing, we re-viewed, clarified, and consolidated the draft electrical updates and ensured that all connections and signal interfaces complied with safety and operational requirements.
The verified and approved information was issued as official electrical drawings, released under PROSE authorship and re-viewed by MTR engineers.
This cooperative approach ensured full traceability, correctness, and compliance with railway documentation standards.

Customer benefit

​The customer gained a reliable and standardised coupling solution that reduced manual work in demanding winter conditions. The upgraded interface improved operational efficiency by ensuring full mechanical and electrical com-patibility between the snowblower wagon and the C20 fleet. Independent engineering review by PROSE ensured high quality and compliant documentation, providing confi-dence in the safety and integrity of the system. The result is a future-ready solution that supports safe, efficient, and well-documented winter operations.

 

 

Cybersecurity Awareness

Project tasks

  • PROSE presentation on the current state of the railway industry
  • PROSE presentation on the future development of the railway industry
  • In-depth discussion on TS 50701, security vs. safety and discussion on standards
  • Interactive brainstorming on the gap analysis
  • Consolidation of the results of the gap analysis and prioritisation
  • Analysis of the customer’s security documentation
  • Summary and definition of the next steps and goal

Our approach

The digital transformation of the rail industry is accelerating at an unprecedented pace. With increasing connectivity comes the urgent need to improve cybersecurity frameworks to ensure resilience against evolving threats. A recent industry workshop highlighted key findings on the current state of cybersecurity in railway systems and the expected regulatory changes that will shape the future.

Security in the railway sector has traditionally focused on protecting people and machines. However, cybersecurity has now become a critical factor in protecting IT systems, infrastructure and sensitive data. Despite their relevance, many existing railway standards provide only limited guidance on cybersecurity. Important standards such as EN 50126, EN 50716 and EN 50129 recognise security concerns but do not provide concrete measures. The IEC 62443 series, which emerged in the 2010s, has become a fundamental security framework, but its full integration into railway systems is still a work in progress.

A key challenge in cybersecurity is the human factor. Unclear role definitions in projects can lead to security risks – for example, through software updates that are implemented without sufficient validation and can compromise critical systems. Clear role definitions and structured safety processes are necessary to minimise such risks.

The future of railway safety will be shaped by new guidelines and harmonised standards designed to close existing safety gaps. Several regulatory developments will redefine safety requirements in the sector. The NIS 2 Directive obliges operators of critical infrastructure, including the railway industry, to take comprehensive cybersecurity measures. Companies in the supply chain will also have to prove their compliance in future.

The Cyber Resilience Act (CRA) places strict security requirements on manufacturers and suppliers of digital products, including railway technology. IEC 63452 is expected to become a global benchmark for cybersecurity in railway systems and combines elements from IEC 62443 and TS 50701 to create a standardised security framework. In addition, there is a trend towards common cybersecurity services – for example in the areas of authentication, logging and network security to ensure standardised protective measures for critical rail systems.

Customer benefit

Railway operators, manufacturers and suppliers must proactively adapt to these new regulations. Key recommendations include:

  • Identification and inventory of all assets (especially SW)
  • Conducting cybersecurity risk assessments to identify vulnerabilities
  • Establish clear security requirements for suppliers and ensure compliance throughout the value chain
  • Implementing security-by-design principles in the development of new products
  • Strengthen security incident response capabilities to effectively manage threats

By taking a proactive approach, the industry can ensure the safety, reliability and resilience of railway systems in an increasingly connected world.

  

Expert Consulting for the SJ High-Speed Train X2000 Upgrade

Customer: Swedish State Railwyas (SJ), Sweden

Project tasks

  • Upgrade of the drive system
  • Updating the Train Control and Monitoring System (TCMS)
  • Coordination and support for the modernisation of the exterior door system
  • Interior refurbishment of the passenger carriages
  • Test and verification

Our approach

​Swedish State Railways (SJ) is launching a comprehensive modernisation programme for its fleet of 36 X2000 passenger trains, which have been in service for over three decades. This extensive project includes a number of important modernisations designed to improve performance, reliability and passenger comfort. The scope of the modernisation includes a complete overhaul of the trains’ propulsion system to increase efficiency and reduce environmental impact. In addition, the Train Control and Monitoring System (TCMS) will be upgraded to the latest railway technology to ensure better operational control and safety. The refurbishment also extends to the exterior doors. In addition, the interior of the passenger coaches will be extensively renovated to provide a more comfortable and aesthetically pleasing travelling experience. These improvements are aimed at extending the service life of the trains and adapting them to current technical and ecological standards.

PROSE is playing a central role in the realisation of this ambitious project by consulting SJ and its suppliers with a range of services. Our approach is based on a comprehensive project management strategy that includes project coordination and technical planning. We are also involved in rigorous testing and inspection phases to ensure that all retrofits meet the stringent standards expected in modern passenger rail transport. Our team consists of experienced professionals with in-depth knowledge of railway systems who bring a wealth of knowledge and experience to the project. By integrating seamlessly with SJ’s operations, we facilitate effective communication and coordination between all stakeholders, proactively address challenges and ensure that project milestones are met efficiently. Our holistic approach ensures that from initial design to final implementation, every aspect of the project is handled with precision and care.

Customer benefit

By entrusting PROSE with this extensive modernisation project, Swedish State Railways (SJ) has gained access to a team of highly experienced experts with a deep understanding of the complexities of modernising outdated train fleets. Our involvement ensures the project runs smoothly and effectively, maximising the potential for on-time and on-budget delivery. Our expertise helps to anticipate potential issues and mitigate risks to ensure that the modernised trains meet current and future rail transport requirements. Immediate benefits for SJ include improved train performance and increased passenger satisfaction. Ultimately, this project supports SJ’s goals of improving operational efficiency and providing a superior travel experience, reinforcing the company’s reputation as a leader in sustainable and innovative rail transport solutions.

 

 

Process for managing component reverse engineering

Customer: AB Transitio, Sweden

Project tasks

  • Develop a reverse engineering process
  • Ensure parts availability
  • Address business aspects

Our Approach

AB Transitio owns and leases out various EMU and DMU fleets in many regions of Sweden. For rolling stock owners, the lack of documentation and obsolescence, which can occur for different reasons, is a common challenge. Through this project, AB Transitio aims to establish a standardised process and methodology for managing specific cases of obsolescence using reverse engineering. The above-depicted process defines the general tasks, requirements, and responsibilities for handling reverse engineering cases, regardless of who operates and maintains a particular fleet.

PROSE has extensive experience in reverse engineering, safety management and vehicle acceptance procedures. Based on this expertise, we have developed a step-by-step process for the reverse engineering of parts, systems or components. This process ensures that all relevant standards and regulations are complied with. The result is a financially sound, maintainable and sustainable solution that ensures the vehicle can be maintained, repaired and overhauled throughout its life cycle.

Customer benefit

Reverse engineering plays a crucial role in fleet management and ensures sustainable, stable, and long-term maintenance of the fleet. By applying the methodology and process developed by PROSE, customers have access to parts and components that are available for maintenance, repair, or overhaul throughout the vehicle’s lifetime. This process also takes into account the commercial aspects of each case and ensures that the organisation carrying out the work has the necessary skills and expertise.

 

 

Authorisation Support – Repainting of ET425.5 EMUs

Customer: Transdev Hannover GmbH, Germany

Project tasks

  • Project management
  • Requirements capture
  • Authorisation support
  • Communication with NoBo and DeBo
  • Preparation of evidence and admission documents
  • Preparation of a change notification

Our Approach

Transdev Hannover GmbH changed the existing colour scheme of 13 EMUs of the type ET425.5 from the Deutsche Bahn “Verkehrsrot” to the Transdev branding in blue and white. PROSE supported with authorisation management concerning TSI LOC&PAS, TSI PRM and German NNTR as well as requirements capture and evidence documents. The main obstacle was to find a way to establish the evidence documents of the fire protection as no spare parts existed to conduct the necessary experiments.

Due to the great experience and good networking within the industry, it was possible to agree on a feasible way of proving fire protection with the assessment bodies as early as the tendering phase. In combination with the close support of the customer in every phase of the project, loops or lengthy discussions could be avoided.

Customer benefit

PROSE led Transdev Hannover through the authorisation process including communication with the assessment bodies and project management. This ultimately resulted in the timely submission of the documents and rapid final processing by the national safety authority (EBA) including the final “Go”.

 

 

QA of suppliers and production for driver’s desk refurbishment in C20 Metro

Project tasks

  • Quality assurance of sub-suppliers
  • Supervision of prototype phase
  • First class installation
  • Delivery inspections

Our Approach

PROSE have worked closely with the suppliers from an early phase in the development process to ensure a smooth transition from development through prototype to the production ramp-up phase and to ensure stable quality throughout the serial production.

Customer benefit

By improving the supplier delivery early in the project, the customer could benefit from minimizing quality issues just before the start of production. PROSE’s wide range of available services helped the customer in many stages of the project.

 

Maintenance plan for a maintenance shop of the Swiss Federal Railways

Customer: Swiss Federal Railways (SBB) Passenger Division, Switzerland

Project tasks

  • Creation of maintenance plan

Our Approach

​PROSE developed the plan in close cooperation with SBB’s responsible persons. The understanding of the maintenance shop in Basel gained from past assignments and experience with other maintenance facilities helped ensure efficient project implementation.

Customer benefit

SBB received a production concept that describes the interaction of the production resources in the context of the business process model to enable an in-depth understanding of the site within SBB. The target group of the production concept includes the management personnel at the site, partner organisations within and outside the site, the management of SBB Passenger Traffic Production and the facility management.

Development of rail operation and technology strategy 2050

Customer: Rhätische Bahn AG, Switzerland

Project tasks

  • Strategy development
  • Analysis and conception
  • Stakeholder management & methodology
  • Project management, incl. Stakeholders, Communication and Change-Management

Our Approach

Due to the technology’s long life cycle and high investment volume, investments in railway technology require a comprehensible focus and demonstrable benefits. In collaboration with the RhB specialists, PROSE developed an operational target picture and operational use cases for the year 2050 based on the identified challenges of daily operations. Based on this target picture, the benefits created by technology and target systems are clearly identified, and the technology strategy can be aligned with the fulfilment of the target picture.

Based on the operational target picture, the ACTUAL system architecture and the known life cycles were recorded with the RhB experts. Based on the information on the current situation, PROSE was able to develop a proposal for the TARGET system architecture, including migration planning and implementation concepts.

With the help of modern methods and targeted workshops, PROSE and RhB achieved the project goal in a very short time and presented the first results to the strategic steering committee.

Customer benefit

RhB benefited from the PROSE experts’ overall system knowledge and technical expertise in railway operations & automation. In combination with the methodical and analytical approach of the PROSE project team, RhB was able to develop and discuss initial approaches for the implementation of the strategy across all areas. This includes, for example, a migration map with the life cycle of systems and vehicles to identify possible migration windows for the systems, the visualisation of the operational target processes with the target degree of automation and possible implementation variants on the RhB route network.

   

Fire Safety Assessment and Consulting

Project tasks

  • Consultancy
  • Development and creation of fire protection concepts
  • Development and creation of evacuation concepts
  • Analyses of fire protection requirements
  • Compilation of required fire protection test reports
  • Communication with authorities, manufacturers and testing laboratories
  • Integration of fire safety systems
  • Preparation of approval documents relevant to fire protection

Our Approach

PROSE analyses the given situation and develops solutions that meet the applicable fire protection requirements. To this end, PROSE advises the customer and identifies various solutions in order to find an efficient way of achieving the required fire protection for railway vehicles in accordance with EN 45545. Our experts calculate the thermal load of the vehicle during the design and propose measures for its reduction.

Customer benefit

The customer benefits from our many years of experience in the field of fire protection for all types of rail vehicles in accordance with EN 45545, including not only advice but also the creation of concepts, the preparation of the necessary fire protection certificates, contact with manufacturers of fire protection-compliant components and communication with approval authorities. The aim is to place fire protection suitable vehicles into service.

Grand-Tour luxury train maintenance plan

Customer: Arlington Fleet France, France

Project tasks

  • Project management
  • Maintenance management
  • Homologation support

Our Approach

The “Le Grand Tour” project is creating a luxury cruise train in France, using refurbished coaches from Deutsche Bahn. Arlington Fleet France (AFF) is overseeing the project, using existing maintenance data from DB and new system designs.

In the first phase, PROSE formalised existing data from Deutsche Bahn, which is crucial for creating the maintenance plan. Now, in the second phase, we’re taking the lead in drafting the maintenance plan and the Maintenance Documentation File, ensuring compliance with homologation requirements for seamless introduction and operation on the French network.

Customer benefit

Based on PROSE’s extensive experience, the entire maintenance plan was created by integrating the existing and newly added systems. This allows the customer to have a solid maintenance file for the train approval and the vehicle authorisation and, subsequently, to plan future maintenance operations.

    

info@prose.one

 

Our solutions
© PROSE. All rights reserved
Disclaimer    Privacy Policy