ITS Cybersecurity Profiles and Control Sets

The goal of this project is to develop additional Cybersecurity Control Sets to support the ITS Cybersecurity Framework Profile ITS Profile. The ITS Profile provides a risk based approach for managing cybersecurity activities, reducing cyber risk, and protecting the ITS ecosystem. The ITS control sets are a complement to the Profile that is intended to help identify security requirements when acquiring or developing ITS Systems or equipment. This activity expands beyond the initial highway based traffic control device approach and addresses the full complement of ITS applications and services.
In the ITS Profile project a reference implementation of a control set was developed for the Advanced Traffic Controller. This project will work with SMEs to develop additional control sets that address additional multimodal service packages from the ITS Architecture. The project will use the ITS Control Set Template, which provides instructions on how to identify vulnerabilities and threats specific to ITS physical objects. Developers of ITS control sets must assess the risk to the physical object by considering the potential impact caused by a relevant threat source exploiting a vulnerability.