The Challenge
UGL Regional Linx needed to enable remote control of train operations from a new control centre located at Orange NSW. Introducing remote control into a safety-critical rail environment meant cyber security risk had to be managed to Transport for NSW’s stringent requirements — and proven compliant before go-live.
The Solution
L2iQ was engaged to deliver an end-to-end secure remote train control solution, owning the cyber security design from requirements and options analysis through to detailed design and commissioning. A central feature was a network threat detection capability, proposed and designed by L2iQ, enabling cyber threats to be detected and responded to in a timely manner.
What L2iQ Delivered
| Design & risk– Led cyber security design (IEC 62443) – Defined System Under Consideration – Identified threats & vulnerabilities – Facilitated initial & detailed risk workshops – Cyber security requirements specification – 62443 compliance table (SL-T, SL-A) – TfNSW concession approvals for deviations – Network threat detection design | Test & commission– Field testing cyber security test cases – UAT Set to Work Test Report – Commissioning UAT test cases – Commissioning UAT test report – Cyber security monitoring test cases | Operate & maintain– Cyber Incident Response Plan – User Access & Account Mgmt Procedure – Vulnerability & Patch Mgmt Procedure – Malware Management Procedure – Windows PC Local Log Review work instructions – TMP cyber security maintenance requirements |
The Outcome
L2iQ delivered a secure, remotely operable train control solution that met TfNSW’s stringent cyber security requirements, with compliance demonstrated against IEC 62443 and deviations formally agreed with the end customer. UGLRL was equipped with the threat detection capability, test evidence and operational procedures needed to sustain a strong cyber security posture well beyond go-live.