Transportation Management Center Information Technology Security

2019Final ReportChu, JimmyPDFTech ReportFHWA-HOP-19-059DTFH61-16-D-00051Information technologyComputer securityTraffic control centersIntelligent transportation systemsCybersecurityInternetTraffic Management CentersStandardsTechnologyUnited StatesUnited States. Federal Highway Administration. Office of OperationsToppen, AlanChambers, JonCiccarelli, ArmandGomez-Martin, LauraDaywalt, ChrisBerger, KodiUnited States. Federal Highway Administration. Office of OperationsKimley Horn and AssociatesCambridge Systematics, Inc.Chu, JimmyFederal Highway AdministrationCybersecurity is a growing concern worldwide. Over the past several years, much focus has been placed on critical infrastructure providers and their ability to implement cybersecurity in order to continue providing critical services. Traffic Management Centers (TMCs) and Intelligent Transportation Systems (ITS) infrastructure leverage modern communications systems to support transportation management and operations. As a result, TMCs and ITS devices no longer function as closed systems, thus increasing the risk of cyber threats to these transportation facilities and infrastructure. This report has been developed based on best practices within the industry to reflect the reality within TMCs, while pushing for improvements where necessary with a primary focus on the NIST (National Institute of Standards and Technology) Cybersecurity Framework and CIS (Center for Internet Security) Top 20 Controls. Through this report, TMCs will gain insight into basic practices that serve as a starting point or baseline for organizations with limited resources and cybersecurity expertise, as well as guidelines for TMCs looking to increase their system maturity.88