Strengthening Asset Management, Security in Rail Transport

As railways embrace digital transformation, the industry faces unique security challenges. Tom Remberg, CISO of Bane Nor, the agency responsible for Norway’s railway infrastructure, shared strategies to mitigate risks associated with digital change in the rail sector. IT-OT convergence requires a robust approach to cybersecurity, focusing on asset management and infrastructure protection.

See Also: OT/IoT Security Report – A Deep Look Into the ICS Threat Landscape

Understanding the different layers of infrastructure and ensuring strong segmentation between them is crucial to protecting sensitive OT networks against unauthorized access, Remberg said.

Asset management poses a unique OT security challenge, especially given the dispersed and varied nature of railway assets.

“We are able to automatically discover when some assets are installed into that infrastructure and the environment, which is a really key part,” he said. This proactive approach is part of Bane Nor’s broader strategy to maintain the integrity and security of the railway’s operational technology infrastructure.

In this video interview with Information Security Media Group, Remberg discussed:

• Integrating IT and OT for enhanced operational efficiency;
• Managing cybersecurity risks in an evolving digital landscape;
• Strategically protecting critical OT assets to ensure operational continuity.

Remberg previously served as group CISO at Intertek and vice president and head of security governance at Telenor Group. Prior to that, he worked as a director at PwC, specializing in strategic information security management. Remberg has managed several complex projects to implement and improve companies’ information security management systems.