Develop ITS Cybersecurity Control Sets.

The goal of this project is to develop additional Cybersecurity Control Sets to support the ITS Cybersecurity Framework Profile (ITS Profile). The ITS Profile provides a risk-based approach for managing cybersecurity activities, reducing cyber risk, and protecting the ITS ecosystem. The ITS control sets are a complement to the Profile that is intended to  help identify security requirements when acquiring or developing ITS Systems or equipment. In the ITS Profile project a reference implementation of a control set was developed for the Advanced Traffic Controller. This project will work with SMEs to develop additional control sets that address additional service packages from the ITS Architecture. Although ITS control sets can be developed for internal use, they are typically developed by a community that spans organizations and include individuals with expertise specific to a given control set topic. ITS control sets are best when developed and used in the context of the ITS Profile. Doing so contributes to overall enterprise risk management and informed risk management decisions throughout an organization.  The project will use the ITS Control Set Template, which provides instructions on how to identify vulnerabilities and threats specific to ITS physical objects. Developers of ITS control sets must assess the risk to the physical object by considering the potential impact caused by a relevant threat source exploiting a vulnerability.
 

• TBD