L2iQ was contracted by UGLRL to deliver a solution to enable remote control of train operations from
UGLRL’s new control centre. L2iQ delivered requirements, options analysis, and detailed design for the
solution, including ensuring cyber security risk was effectively managed in-line with Transport for NSW’s
cyber security requirements. As part of the solution, L2iQ proposed and designed a cyber
security network threat detection capability to ensure cyber security threats were able to be detected
and responded to in a timely manner.
The specific cyber security works included:
- L2iQ leading the cyber security design, including undertaking risk assessments aligned with IEC
- 62443 and development of the cybersecurity requirements specification
- Defined System Under Consideration (SuC)
- Identified relevant threats and vulnerabilities
- Facilitated initial and detailed risk workshops
- Produced cyber security requirements specification
Produced 62443 compliance tables (SL-T, SL-A) - Obtained concession approval from TfNSW for deviations from standard
- Field Testing Cyber Security Test Cases
- UAT Set to Work Test Report
- Commissioning UAT Test Case development, execution and report
- Cyber Security Monitoring Test Cases
- Cyber Incident Response Plan
- User Access and Account, Vulnerability & Patch, and malware Management Procedure
- Work Instruction and procedure development
- List of Technical Maintenance Plan (TMP) requirements for maintaining cyber security for the solution