Skip to main content

Cybersecurity

Protection for a safer future

Section backgroundSection background

Digital mobility has revolutionised the transportation sector. It helps us manage operations more efficiently, optimise processes, increase service capacity, and improve punctuality and maintainability while offering a better user experience with greater comfort and personalised services.

It also increases exposure to cyber threats, making it crucial to implement effective cybersecurity measures. We want our clients to feel secure in choosing us as their strategic partner in sustainable mobility, which is why CAF’s cybersecurity programme has been structured to cover all necessary aspects and key areas.

At CAF, information security is a priority. Our customers trust us to provide sustainable mobility solutions, so we are dedicated to protecting their personal and business data. We have robust technical and organisational measures to prevent, detect, and respond to any incident that may compromise the confidentiality, integrity, and availability of information. We also comply with current data protection regulations and conduct regular audits to ensure compliance with standards such as ISO 27001.

Information security

Cybersecurity is integrated into every stage of creating and delivering our products and services.

We adopt security by design as our working methodology and follow international standards, including IEC 62443 or TS 50701 in project management, product development, operation, and maintenance within the railway sector and UNECE R155/156 regulations for buses.

Security by design

We support our customers during the operation and maintenance of products throughout their entire lifecycle, offering cybersecurity monitoring and services, threat and vulnerability management, patch management, and incident monitoring and response. This ensures we meet our customers' expectations and comply with current regulations.

Cybersecurity monitoring and services

CAF promotes and encourages employee awareness and training in all areas and aspects of cybersecurity. The goal is not only to ensure CAF's cultural maturity level but also to support our clients in all project phases, from commercialisation to delivery and project maintenance.

Employee awareness and training

Cybersecurity has been integrated into CAF’s global innovation process. Keeping CAF’s cybersecurity offerings at the forefront of technology will enable our clients to ensure passenger safety and the operational efficiency of transport systems.

Innovation

By contributing our experience and knowledge, we aim to improve the safety and efficiency of railway systems. We believe that collaboration between the different actors in the sector is key to achieving regulatory harmonisation that benefits all users. CAF actively participates in the development of cybersecurity standards (TS 50701, IEC 63452) by attending working groups with various national and international stakeholders and organisations.

Collaboration