Transportation Cybersecurity Incident Response and Management Framework: Cybersecurity Incident Exercise Summary Report

Federal Highway Administration;Intelligent Transportation Systems Joint Program Office2021PDFTech ReportRamon, Marisa CDodson, Austin TSouthwest Research InstituteCambridge Systematics, Inc.United States. Federal Highway Administration. Office of OperationsUnited States. Department of Transportation. Federal Highway AdministrationUnited States. Department of Transportation. Intelligent Transportation Systems Joint Program Office (ITSJPO)United States. Department of Transportation. Federal Highway AdministrationUnited StatesTransportationComputer securityData protectionDetection and identificationRisk managementTransportationCyber ResilienceCybersecurity incidentFHWA-JPO-21-850DTFH61-16-D-00051December 2020 \u2013 May 2021As part of the 2017 United States Department of Transportation (USDOT) Federal Highway Administration (FHWA) Roadway Surface Transportation Cybersecurity Framework project with Institute of Transportation Engineers (ITE), gaps were identified regarding the sharing of information amongst transportation stakeholders such as Infrastructure Owner Operators (IOOs) and municipal transportation agencies. FHWA now seeks to address some of these deficits by using previously improved procedures to conduct a cybersecurity incident exercise. As part of this process, this Incident Exercise Summary focuses on detailing the results of the completed Cyber Incident Exercise and using collected data to compare proposed protocols against traditional processes.120