November 2022 - 20
Cybersecurity
Transit agencies that implement
the OT-CMF will realize
alignment with these goals with
the following five objectives:
* Establish a common cybersecurity
language to enable communication
between the leadership
and stakeholders.
* Create a consistent approach for
maturing control systems' cybersecurity
programs.
* Develop a common understanding
of control systems' cybersecurity
best practices.
* Enable organizations to develop
data-driven risk prioritization.
* Define a path to optimize cybersecurity
investments and
increase cyber resilience.
The CCSWG looked to industry
standards and found that
five levels of maturity existed.
The OT-CMF isn't just a tool for
large transit agencies. It was designed
with the perspective that
all organizations must start to develop
a cyber-maturity program
from where they are now, so a " 0 "
level of maturity was created to
credit organizations for what they
are currently doing to meet security
requirements. The CCSWG
calls it the on-ramp. A description
of the six maturity levels follows:
* Level 0 Baseline (On-Ramp) -
Establish a foundation and implement
minimum OT-CMF
recommended controls.
* Level 1 Initiate - OT-CMF recommended
controls are adopted
without formal processes or
documentation.
* Level 2 Planned - Establish security
roles and responsibilities
and a risk management program
with documented policies, procedures,
and processes with Key
Risk Indicators (KRI) and Key
Performance Indicators (KPI)
aligned with the OT-CMF.
* Level 3 Operational - All OTCMF
recommended controls
have been documented, implemented,
and assessed at least annually.
An improvement plan is
reviewed and updated annually
to enhance the efficiency and
effectiveness of controls.
* Level 4 Managed - Continuous
monitoring and improvement
have been put in place to manage
the controls using automated
tools and technologies that respond
and adapt to the changing
threat landscape.
* Level 5 Optimized - Full automation
of monitoring and
response using technological
advances (A.I.) that continuously
increases efficiency, performance,
and real-time reporting.
At this point, the reader may
ask, " How many agencies are at a
Level 5 or even Level 4? " And the
answer is probably none. Those
For more information, visit www.MassTransitmag.com/10064948
20 | Mass Transit | MassTransitmag.com | NOVEMBER 2022
2211MASS_Avail Technologies.indd 1
10/25/22 2:18 PM
http://www.MassTransitmag.com/10064948
http://www.MassTransitmag.com
November 2022
Table of Contents for the Digital Edition of November 2022
Editor’s Notebook
People & Places
Best Practices: Data Management
Best Practices for Cybersecurity
2022 Transit Safety & Security Report
GCRTA’s five areas of concentration for a robust DBE program
Mixed Fleets: The future of microtransit and paratransit
Beyond Carbon Reduction: Electric Buses Provide Resilience for Climate Emergencies
Products
November 2022 - 1
November 2022 - 2
November 2022 - 3
November 2022 - 4
November 2022 - 5
November 2022 - Editor’s Notebook
November 2022 - 7
November 2022 - People & Places
November 2022 - 9
November 2022 - 10
November 2022 - 11
November 2022 - 12
November 2022 - 13
November 2022 - Best Practices: Data Management
November 2022 - 15
November 2022 - Best Practices for Cybersecurity
November 2022 - 17
November 2022 - 18
November 2022 - 19
November 2022 - 20
November 2022 - 21
November 2022 - 2022 Transit Safety & Security Report
November 2022 - 23
November 2022 - 24
November 2022 - 25
November 2022 - 26
November 2022 - 27
November 2022 - GCRTA’s five areas of concentration for a robust DBE program
November 2022 - 29
November 2022 - 30
November 2022 - 31
November 2022 - Mixed Fleets: The future of microtransit and paratransit
November 2022 - 33
November 2022 - 34
November 2022 - 35
November 2022 - Beyond Carbon Reduction: Electric Buses Provide Resilience for Climate Emergencies
November 2022 - 37
November 2022 - 38
November 2022 - 39
November 2022 - Products
November 2022 - 41
November 2022 - 42
November 2022 - 43
November 2022 - 44
https://www.nxtbook.com/endeavor/masstransit/february-2023
https://www.nxtbook.com/endeavor/masstransit/december-2022-january-2023
https://www.nxtbook.com/endeavor/masstransit/november-2022
https://www.nxtbook.com/endeavor/masstransit/september-october-2022
https://www.nxtbook.com/endeavor/masstransit/july-august-2022
https://www.nxtbook.com/endeavor/masstransit/june_2022
https://www.nxtbook.com/endeavor/masstransit/april-may_2022
https://www.nxtbook.com/endeavor/masstransit/march_2022
https://www.nxtbook.com/endeavor/masstransit/february_2022
https://www.nxtbook.com/endeavor/masstransit/at-the-show-2021
https://www.nxtbook.com/endeavor/masstransit/december-2021-january-2022
https://www.nxtbook.com/endeavor/masstransit/november-2021
https://www.nxtbook.com/endeavor/masstransit/september-october_2021
https://www.nxtbook.com/endeavor/masstransit/july-august_2021
https://www.nxtbook.com/endeavor/masstransit/mass_transit_june_2021
https://www.nxtbook.com/endeavor/masstransit/aprilmay2021
https://www.nxtbook.com/endeavor/masstransit/december2020january2021
https://www.nxtbook.com/endeavor/masstransit/november2020
https://www.nxtbook.com/endeavor/masstransit/septemberoctober2020
https://www.nxtbook.com/endeavor/masstransit/julyaugust2020
https://www.nxtbook.com/endeavor/masstransit/june2020
https://www.nxtbook.com/endeavor/masstransit/aprilmay2020
https://www.nxtbook.com/endeavor/masstransit/Mass_Transit_March_2020
https://www.nxtbook.com/endeavor/masstransit/february2020
https://www.nxtbook.com/endeavor/masstransit/december2019january2020
https://www.nxtbook.com/endeavor/masstransit/november2019
https://www.nxtbook.com/endeavor/masstransit/Mass_Transit_September_2019
https://www.nxtbook.com/endeavor/masstransit/julyaugust2019
https://www.nxtbook.com/endeavor/masstransit/2019railproductguide
https://www.nxtbook.com/endeavor/masstransit/june2019
https://www.nxtbook.com/endeavor/masstransit/2019busandparatransitproductguide
https://www.nxtbook.com/endeavor/masstransit/aprilmay2019
https://www.nxtbook.com/endeavor/masstransit/march2019
https://www.nxtbook.com/endeavor/masstransit/february2019
https://www.nxtbookmedia.com