Annika DEGEN
Expert Guidance on the Implementation of the Cyber Resilience Act in Mainline and Urban Railways
Summary
Developed jointly with CER and UNIFE, alongside UITP as part of the Cybersecurity Rail Sector Group, this document aims to provide sector-specific guidance to support the implementation of Regulation (EU) 2024/2847 – the Cyber Resilience Act (CRA) – by establishing a common understanding tailored to the rail environment.
As a highly regulated sector, rail industry already integrates cybersecurity across its systems, continuously adapting to its specific operational realities and evolving challenges.
With the EU Cyber Resilience Act set to become fully applicable in December 2027, new complexities are emerging.
This Expert Guidance complements the regulatory framework by clarifying its application and supporting effective implementation.
