Cybersecurity for ITS Best Practices Development
State and Local transportation agencies are becoming increasingly aware of the risk that cyber threats pose to the safe and efficient operation of their systems. Unfortunately, their existing staff often lack the skills and training needed to address these risks and they have immense difficulty attracting cybersecurity professionals because they are unable to compete with salaries in the private sector. There is an immediate need for procurement practices that address cybersecurity services. Although public agencies often contract for cybersecurity services because they lack in-house resources, the management and staff often lack even the skills and training needed to ensure that they are contracting for the appropriate services from the private sector. This issue was raised by both public sector executives during the annual TRB meeting. This project will develop cybersecurity best practices for public sector transportation infrastructure owner/operators. This project will also develop support tool functions used when performing assessment of a transportation organizations cybersecurity status. The project will identify possible vulnerabilities that need to be addressed. The tool functions will be derived from the results of the NIST Cybersecurity Framework for Connected Vehicles, the Roadway Transportation System Cybersecurity Framework, and the NCHRP Cybersecurity of Transportation Systems Projects. This tool will enable the management and staff of State and local agencies to better assess risks; in particular to inform those decision-makers and project managers who may not have sufficient cybersecurity knowledge to understand their cybersecurity status or who may lack the necessary information needed to judiciously plan in risk mitigation investments.
-
Supplemental Notes:
- USDOT Research Hub DisplayID 157483
Language
- English
Project
- Status: Active
- Funding: $500000
-
Sponsor Organizations:
Intelligent Transportation Systems - Joint Program Office
, - Managing Organizations: Washington, DC United States
-
Project Managers:
Gregory, Joseph
- Start Date: 20210201
- Expected Completion Date: 20240114
- Actual Completion Date: 0
- USDOT Program: Cybersecurity for ITS
- Subprogram: Cybersecurity
Subject/Index Terms
- TRT Terms: Best practices; Computer security; Connected vehicles; Intelligent transportation systems; Risk assessment; State departments of transportation; Transportation departments
- Subject Areas: Administration and Management; Data and Information Technology; Highways; Security and Emergencies;
Filing Info
- Accession Number: 01864821
- Record Type: Research project
- Source Agency: Department of Transportation
- Files: RIP, USDOT
- Created Date: Nov 21 2022 4:26PM