Modern railway systems rely on complex signalling, communication, and control technologies to maintain safe train separation and efficient operations. These systems increasingly depend on software updates and cyber security measures to address emerging threats and vulnerabilities.
This episode explores a realistic scenario in which an emergency cyber security patch is deployed within an ETCS Level 2 signalling environment. While the update addresses a cyber security concern, incomplete safety validation results in unexpected operational behaviour that reduces train separation margins. Students examine the relationship between cyber security patching, safety assurance, and independent protection mechanisms, and learn why cyber security improvements must be evaluated alongside safety objectives.
Key Security-Informed Safety Lesson:
Improving cyber security does not automatically improve safety; operational changes require both security and safety assurance.
.