No experience in in-car safety is required. However, some knowledge of automotive infrastructure is desirable. If remote :

• Stable internet access via Ethernet or Wi-Fi with a good data rate (1.2 Mb/s minimum downstream is recommended).

• A PC / MAC with the Teams tool installed and unrestricted access to the internet.

This course is aimed at people working in the railway environment and in particular those involved in projects including digital aspects and automated data processing systems. It can be given to people with no prior knowledge of cybersecurity or from the world of railway safety.

The objective of this training is first to inculcate the basics and fundamental principles of cyber security and then to develop the Technical Specification 50701 specific to cyber security in railway projects.

Expert in railway cybersecurity.

• PowerPoint presentation
• Interactive web platform (Klaxoon)

Evaluation at the beginning and end of the course, quiz…

A training certificate complying with the provisions of Article L.6353-1 paragraph 2 is issued to the trainee.

5 working days before the start of the course (if OPCO funding)

INTRODUCTION TO CYBER SECURITY

• Vocabulary and definition
• Understanding the need and how it changes over time
• The notion of “attack surface”

LEGAL, REGULATORY, AND NORMATIVE ASPECTS

• The different organizations
• NIS 2 Directive
• Initiatives at the European and international levels

FUNDAMENTALS OF CYBERSECURITY

• Security, safety and cybersecurity
• How to protect data
• Value of our data

CYBERSECURITY RISK

• Definitions and concepts
• New technologies, new threats
• Risk analysis

THE CYBERSECURITY MARKET

• The price of data
• Bug bounty

CYBERSECURITY BY DESIGN

• Case studies
• 12 cybersecurity principles

TS 50701

• TS 50701, what, who, how?
• Modelling and mapping
• Life cycle of a system
• Cybersecurity activities during a cybersecurity life cycle
  • Concept
  • Definition of a system
  • Simple and detailed risk analysis
  • Specifications
  • Cybersecurity architecture
  • Integration
  • Validation & Acceptance
  • Operation, maintenance and monitoring
  • Decommissioning

• Date sur demande, toute l'année (Remote learning)