Question to the Department for Transport:

To ask the Secretary of State for Transport, what steps National Rail is taking to ensure the adequacy of cyber security at train stations.

The government is committed to working with Network Rail and train operators to enhance cyber security and resilience across railway stations and the wider rail network. Within Network Rail and train operating companies there are dedicated security teams, whose job it is to monitor systems and networks to deter, detect and respond to cyber threats and recover systems should a cyber incident occur, getting them up and running again as quickly as possible.

DfT is committed to improving the management of cyber risks within the rail industry and provide greater protection to the travelling public by improving the understanding of cyber risk. DfT continues to work with Operators of Essential Services (OES) who are regulated through the Network and Information Systems (NIS) Regulations 2018, to ensure the UK’s most critical businesses are compliant with the necessary cyber regulations to safeguard the British public and businesses against the growing cyber threat.