Critical Infrastructure has become increasingly vulnerable to cyber attacks. Electrical grids, water supplies, dams, airports, and rail and transit systems are all operated through the use of industrial control systems, like SCADA. Disruptions to these systems from cyber intrusions create potential safety and security issues, as well as expose our financial systems to fraud and more nefarious issues, such as ransomware.

Our surface transportation systems are no exception. Our bridges, tolls, variable message signs, highway cameras, and traffic signal systems all have vulnerabilities. Our tunnel systems are exposed to disruption due to loss of control of ventilation fans, water pumps, and lane control systems. As transportation professionals, we need to be aware of these risks and vulnerabilities to help prevent cyber attacks and mitigate successful cyber attacks.

This event will provide attendees with a professional overview of cyber informed engineering in a transportation context. Suitable for practicing transportation planners, engineers, operators, and administrators, this event will discuss risks and vulnerabilities and the role of our professions in helping to prevent or mitigate the potential impacts. This event will not make anyone into a cyber expert. Rather, the aim is to raise awareness, so we make smart decisions when we plan, design, and operate transportation systems.

DECIDE Exercise 

The purpose of this exercise is to improve strategic communication, compliance, risk, and overall resilience in the area of Transportation safety.

This exercise is designed to simulate realistic scenarios that focus on capabilities to detect, identify, protect, respond, and recover from an attack. The most difficult challenge in cybersecurity is the ever-evolving nature of security risks themselves. Traditionally, organizations and the government have focused most of their cybersecurity resources on perimeter security to protect only their most crucial system components and defend against known threats. Today, this approach is insufficient, as the threats advance and change more quickly than organizations can keep up with. As a result, this exercise will encourage more proactive, collaborative, and adaptable approaches to cybersecurity.