Rail cybersecurity is no longer a niche topic or a purely regulatory exercise. It has become an integral part of system design, assurance, testing, and acceptance. This professional program is designed to help experienced practitioners bridge the gap between railway engineering and cybersecurity - not in theory, but in real projects. Featuring exercises that you can reuse in your future work.
Across rail projects, assessments, and standardization activities, the same challenges appear again and again:
- Lack of understanding how to handle cybersecurity requirements from customers
- Cybersecurity requirements that exist on paper, but are not verifiable
- Deliverables that appear complete, but do not create confidence during FAT/SAT
- Traceability that links documents, but not decisions or implementations
- Security treated as an add-on rather than an engineering discipline
- Teams struggling to interpret and apply standards consistently
These issues are rarely caused by bad intentions. They are usually the result of missing cross-domain understanding and a lack of practical guidance on how cybersecurity should be engineered throughout the lifecycle. This program was created to address exactly that gap.
This is not a generic cybersecurity training. The program focuses on:
- Engineering logic instead of checklists
- Lifecycle thinking instead of isolated activities
- Practical application instead of theoretical compliance
- Understanding “why” decisions are made - not just “what” is written
Participants work through realistic scenarios, typical pitfalls, and concrete examples drawn from real rail projects. The goal is not to create cybersecurity specialists in five days - but to enable professionals to apply cybersecurity competently and confidently within railway engineering contexts.
Participants will learn how to:
- Apply cybersecurity as an engineering discipline across the rail lifecycle
- Interpret standards such as TS 50701 (IEC 63452) and IEC 62443 in real projects
- Define meaningful, verifiable, and testable security requirements
- Build credible evidence and artefacts for later assessment and homologation
- Prepare cybersecurity aspects for FAT, SAT, and acceptance
- Identify typical pitfalls early - before they become costly project issues
- Bridge the gap between railway engineering, safety, and cybersecurity
This program is designed for professionals who carry real responsibility in rail and critical infrastructure projects, including:
- Rail engineers
- Cybersecurity engineers and specialists
- Cybersecurity managers
- Technical and system managers
- Assessors and auditors
- Project leads and technical authorities
The program assumes basic familiarity with either railway engineering or cybersecurity. It is not an introductory course.
The program is developed and delivered by Christian Schlehuber, a senior rail cybersecurity engineer and program lead with extensive international delivery experience across operators, OEMs, and infrastructure projects.
His background combines:
- Lead cybersecurity roles on international rail programs in multi-billion USD CAPEX environments
- FAT/SAT/SIT & acceptance management experience
- Worked with operators, OEMs, suppliers, and assessors
- Leadership roles in rail cybersecurity standardization activities (TS 50701 ecosystem)
The program reflects lessons learned from real projects - not academic examples.
- Live, instructor-led virtual classroom
- Interactive discussions and Q&A
- Practical examples and realistic scenarios
- Focus on reasoning, decisions, and engineering trade-offs
- Exercises will create deliverables that can be used in later real work
- Limited cohort size to allow meaningful exchange
Participants are encouraged to relate the content to their own project contexts.
The following artifacts among others will be provided to the participants/used in the practical work:
-
TS 50701-aligned templates:
- Cybersecurity Management Plan
- Asset register
- Risk register
- Railway-specific threat catalogue
- IRA / DRA Template
- Zoning diagram template
- Requirements matrix
- Cybersecurity Case
- Evidence checklist
What you will be able to do after this program
- Lead a TS 50701-compliant cybersecurity workflow end-to-end
- Defend your security decisions in audits and assessments
- Produce acceptance-ready evidence packages for assessors, customers, and technical authorities
- Reduce rework before FAT/SAT
- Align engineering, safety, and cybersecurity teams on one lifecycle workflow and evidence baseline
- Translate TS 50701 expectations into supplier deliverables and verification steps
Focus: real deliverables, assessment readiness, and defensible engineering decisions - not just theory.
- Day 1 - Foundation: Rail meets Cybersecurity: scope, systems, lifecycle, roles, interfaces, methodologies
- Day 2 - TS 50701 Deep Dive & Governance: workflow, CSMP structure, evidence logic
- Day 3 - Security Concept & Risk Assessment: assets, threats, IRA/DRA reasoning, zoning
- Day 4 - Security Requirements & Engineering: verifiable requirements, traceability, supplier interfaces
- Day 5 - Assurance, Testing & Real-World Practice: cybersecurity case, FAT/SAT readiness, mock assessment
A detailed syllabus can be provided on request.
The first cohort will take place 23–27 March 2026. If you are interested or would like to discuss whether the program is a good fit for you or your organization, please get in touch directly.
Choose a scheduled delivery below, or request a private cohort for your organisation (onsite or virtual).
Live, instructor-led virtual classroom covering the full TS 50701 engineering workflow - from baseline and governance to risk, requirements, and acceptance-ready evidence.
- Hands-on templates: CSMP, asset & risk registers, zoning, requirements, evidence checklist
- Continuous case study to produce coherent artefacts across all days
- Designed for stakeholder-facing delivery and acceptance discussions
Next cohort: 23–27 March 2026
If your preferred date is not listed yet, contact us to reserve a slot for your team.
Delivered onsite or as a private virtual cohort, tailored to your target system, project phase, and acceptance requirements - ideal for aligning multiple stakeholders on one approach.
- Programme-specific scope, artefacts, and documentation structure
- Reusable templates aligned with railway lifecycle and supplier collaboration
- Optional focus: FAT/SAT/SIT evidence, supplier management, assurance & acceptance readiness
Tell us your target system and project phase, and we will propose a tailored agenda.