< Back
cybersecurity for transportation
Watch the replay

Tags:

Transport Detect and respond
17 July 2025

Webinar Replay: How Cybersecurity Keeps Ground Transportation Running on Time

Cyber threats in the transportation sector are growing more sophisticated each year. In this exclusive Thales webinar, discover how a proactive cybersecurity strategy helps rail, metro, and other ground transport operators stay operational, resilient, and compliant.

The Cybersecurity Landscape in Ground Transportation

Ground transportation is facing a paradigm shift. The increasing digitization and connectivity of infrastructure — from mainline and metro signalling to SCADA systems and passenger services — have expanded the attack surface exponentially.

Operators must now manage:

  • Rising system complexity across both legacy and modern equipment

  • High interconnectivity between internal and external actors

  • Exposure to OT-specific attacks such as ransomware, DoS/DDoS, and supply chain intrusions

  • Stringent regulatory requirements, including NIS2, IEC 63452, and CLC TS 50701

What You’ll Learn in the Webinar

1. Understanding the Challenges

  • Why it's increasingly difficult to “keep the trains running on time”

  • The safety, reliability, and resilience stakes of cybersecurity in rail operations

  • Operational Technology (OT) vs. Information Technology (IT): a clash of speeds and standards

2. Latest Cyber Threats and Tactics

  • Ransomware remains the #1 threat in the rail sector (45% of incidents)

  • Growing risk of SCADA intrusions and IoT device compromises

  • AI as a weapon: Attackers now use generative AI for phishing, brute force, and social engineering

3. How to Respond Effectively

  • From a tool-based to a service-based security model

  • The need for integrated IT/OT detection & response platforms

  • Aligning with new standards like IEC 63452, which secures embedded transportation systems

In-Depth Use Case: Infrabel’s Cybersecurity Transformation

Belgian railway operator Infrabel partnered with Thales Cyber Defense Solutions to strengthen its cybersecurity posture across critical OT systems.

Key Objectives

  • Ensure regulatory compliance with NIS2 and upcoming railway-specific standards

  • Centralize detection and response across multiple environments

  • Build a 24/7 Security Operations Center (SOC) capable of handling IT, OT, and IoT threats

Actions Taken

  • SOC Deployment: First industrial-grade SOC fully operational and tailored to rail sector needs

  • Integrated Operations: Thales teams embedded within Infrabel’s security function for real-time support and long-term maturity growth

  • Threat Detection Factory: Use of advanced tools including Kafka-based data pipelines, detection-as-code, and custom analytics

  • Governance & Compliance: Dozens of audits, risk analyses, and continuous improvement activities driven by Thales consultants

  • Incident Response Readiness: Daily triage and threat hunting, with rapid escalation capabilities and deep forensic capabilities

Why Choose Thales for Transportation Cybersecurity?

With over 6,000 cyber experts, 33,500 R&D engineers, and a global presence across 148 countries, Thales is uniquely positioned to:

  • Deliver IT/OT-integrated detection and response through 9 global SOCs

  • Support compliance with NIS2, IEC 63452, and other critical standards

  • Provide deep industry-specific intelligence and 24/7 protection

  • Implement proven tools for real-time monitoring, incident response, and SOC orchestration

  • Offer dedicated consulting, penetration testing, and red team services


Watch the Webinar Replay

Ready to go deeper? Access the on-demand version of our webinar and learn how to build a resilient, compliant, and cyber-secure transportation infrastructure.

👉 Watch the Replay Now