Rail cybersecurity

Delivering cybersecurity solutions for complex OT environments.

keeping on track. STAYING AHEAD OF TSA SECURITY DIRECTIVES

Cybersecurity for Rail
Control systems in critical infrastructure are high-risk targets for attack and exploitation. We understand the unique challenges that Operational Technology (OT) presents when implementing a cybersecurity strategy. We offer programmatic assessment and program development to support a variety of standards and frameworks such as TSA (SD) 1580-21-01, (SD) 1582-21-01, TS 50701, NERC CIP, NEI 08-09, NIST CSF, API 1164 and US DoD CMMC regulatory requirements.

IMPLEMENTING A CYBERSECURITY INCIDENT RESPONSE PLAN (IRP)

FoxGuard provides professional services to assist with Cyber Incident Response Plan (IRP) creation, implementation, and execution. Our services help build the elements of an actionable IRP. We work within your existing tooling or technologies and when needed we can help you evolve your threat protection capabilities. FoxGuard offers vulnerability detection, network intrusion, and antimalware, to effectively mitigate and remediate incidents.

COMPLETEING A CYBERSECURITY VULNERABILITY ASSESSMENT (CVA)

FoxGuard offers services to plan, conduct, and review a cybersecurity vulnerability assessment. The assessment provides critical insight into real-time IT/OT environments and allows for more accurate decision-making and responses to vulnerabilities. FoxGuard gives you the feedback needed to focus on the cybersecurity posture of the platforms in your specific environment. We have a complete and comprehensive suite of products to solve the cybersecurity needs of critical infrastructure organizations where IT and OT converge. With a complete vulnerability assessment from FoxGuard decisions can be made to implement controls, update policy, improve threat detection and develop future mitigation strategies.

one source. many solutions.

FoxGuard has proven excellence in not only meeting compliance requirements but also solving functional issues and security vulnerabilities. We have a complete and comprehensive suite of products to solve the cybersecurity needs of critical infrastructure organizations where IT and OT converge.

Ask us about our other cybersecurity products.

PATCH MANAGEMENT | INTEGRATED SECURITY SOLUTIONS | ENGINEERING & FIELD SERVICES

TSA COMPLIANCE BURDEN
Rail customers need to be able to understand, plan for and implement mitigation for the new TSA Security Directives.

– Designate a Cybersecurity Coordinator to work with TSA
– Report Cybersecurity incidents to CISA
– Develop a Cybersecurity Incident Response Plan (IRP) to reduce the risk of an operational disruption
– Complete a Cybersecurity Vulnerability Assessment (CVA) to identify potential gaps or vulnerabilities in their systems

The Transportation Security Administration announced Security Directives (SD) 1580-21-01 and 1582-21-01 with effective dates of December 31, 2021. All these requirements have a maximum current implementation deadline of July 31, 2022. The Cybersecurity Vulnerability Assessment is required to be completed and a mitigation plan submitted by March 31, 2022