Cybersecurity

Our nation’s transportation and water and wastewater infrastructure are increasingly reliant on digital technologies including those that interface with operational technology (OT) systems. As a result, the potential to exploit new vulnerabilities that will impact OT networks has escalated, necessitating an investment in cybersecurity to protect rail and transit, highways and bridges, autonomous and electric vehicles and water and wastewater facilities against a range of threats that have the capacity to significantly disrupt infrastructure.

STV’s Cybersecurity team is comprised of professionals with decades of experience securing critical infrastructure. More than just a cybersecurity consulting team, our specialists work regularly with engineers, planners and project delivery professionals who support the development of this infrastructure every day. This bench of expertise and these relationships gives us the ability to implement new projects or augment existing programs by providing clients services that include:

• Cybersecurity consulting and advisory services: providing strategic guidance, risk management advice and creating a cybersecurity roadmap that helps agencies prioritize investments, allocate resources effectively and address emerging cyber threats.
• Risk assessments: conducting comprehensive risk assessments that identify vulnerabilities, threats and potential impacts to rail and transit systems, infrastructure and operations.
• Governance, risk and compliance services: assisting rail and transit organizations in achieving compliance with industry-specific regulatory requirements and standards.
• Secure architecture and design: designing and implementing robust cybersecurity architectures including boundary defenses, network segmentation, privileged access management and other mitigation defined by regulatory bodies.
• Incident response planning: developing customized incident response plans and protocols to guide rail and transit organizations in effectively responding to and mitigating cyber incidents, minimizing downtime and restring operations swiftly.
• Cybersecurity training and awareness: providing training programs, workshops and tabletop exercises to education rail and transit personnel on cybersecurity best practices, threat awareness and incident response procedures.

Our team’s expertise in developing programs that address the requirements of the America’s Water Infrastructure Act of 2018, Public Health Security and Bioterrorism Preparedness and Response Act of 2002, Safe Drinking Water Act, Clean Water Act, Transportation Security Administration’s directives for surface transportation (passenger and freight rail), and emerging Federal Transit Administration and Federal Rail Administration advisories helps separate us other firms that are not familiar with the complexities of these policies and directives.