U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Transit Cybersecurity Framework (CSF) Community Profile

Public transportation, or transit, provides an important service for communities across the U.S., transporting people to work, school, healthcare facilities, and other destinations.  According to the American Public Transportation Association 2023 Q4 Public Transportation Ridership Report, U.S. public transportation delivered more than 6 billion trips in 2019. The U.S. transit system today relies on multiple modes of transportation, many of which have undergone significant technological transformation over the last 30 years. These changes are resulting in new cybersecurity risks.

Development of a Transit Profile

Today’s transit systems rely extensively on technology solutions – both information technologies (IT) to manage the systems and resources as well as operational technologies (OT) to directly support operational requirements. The transit industry has experienced an increase in cyberattacks in both frequency and severity in recent years. This increase underscores the need for robust and standardized cybersecurity measures and proactive strategies to mitigate the risk of these attacks. The NCCoE is working in collaboration with industry and federal agencies to create a CSF Community Profile to help transit agencies protect their most critical operations.
Status: Reviewing Comments

The public comment period has closed for the initial public draft of NIST Internal Report (IR) 8576, Transit Cybersecurity Framework Community Profile. We are currently reviewing the comments received. Thank you to everyone who shared their feedback with us.

NIST IR 8576 ipd Transit Cybersecurity Framework Community ProfileWeb Version NIST IR 8576 ipd Transit Cybersecurity Framework Community Profile

Join the Community of Interest

Employee speaking on video call with colleagues on online briefing with laptop at home

A Community of Interest (COI) is a group of professionals and advisors who share business insights, technical expertise, challenges, and perspectives to guide NCCoE projects. COIs often include experts, innovators, and everyday users of cybersecurity and privacy technologies. Share your expertise and consider becoming a member of this project's COI. 

Tell us about yourself