# Transportation OT cybersecurity

> Signaling, traffic management, tunnel ventilation and terminal automation for rail, transit, highway, port and airport operators. The systems move people and cargo on a fixed schedule, and they are increasingly connected to reach it.

Canonical: https://blackbirdcyber.com/sectors/transportation  
Blackbird Cyber · https://blackbirdcyber.com/ · sales@blackbirdcyber.com

## The exposure — A signal fault stops the whole line.

Transit and port networks grew by bolting remote access onto field equipment spread across miles of right-of-way. Wayside cabinets, traffic controllers and crane PLCs often sit on flat networks reachable from the business side.

Regulations and guidance: TSA SD-1582, NIST SP 800-82, IEC 62443.

- Wayside and roadside cabinet access control
- Segmentation between operations and passenger or tenant networks
- Vendor remote access to signaling and terminal systems

## Typical topology

A representative control network for transportation operators, by Purdue level:

- L3.5 · DMZ: Operations DMZ
- L2 · HMI: Control center HMI
- L2 · SCADA: Traffic / signal SCADA
- L2 · Historian: Event historian
- L1 · PLC: Interlocking PLC
- L1 · RTU: Wayside RTU
- L1 · Safety: Train protection
- L0 · Process: Signals · switches · gates · cranes

Exposed path: vendor VPN → L2 · Historian (Event historian).

## Where we start — Recommended engagements for transportation operators.

- [OT Cyber Audit](https://blackbirdcyber.com/capabilities/ot-cyber-audit): A site-level assessment of control system exposure, ranked by consequence.
- [OT Network Architecting](https://blackbirdcyber.com/capabilities/ot-network-engineering): Segmented control networks designed and built to keep the process running.