• Transportation Cybersecurity Assessment Form

    Use this form to assess cybersecurity readiness, controls, and risk across transportation systems, operations, and connected assets.

  • Organization and Assessment Context

  • Assessment Date*
     - -
    2 digit month, 2 digit day, 4 digit year

  • Asset and System Inventory

  • Asset and System Inventory*
  • System Criticality*
  • Internet Connectivity*
  • Remote Access Enabled*

  • Security Controls and Governance

  • Cybersecurity policies documented and approved*
  • Asset management process in place*
  • Access control enforced for systems and data*
  • Multi-factor authentication enabled for critical access*
  • Password hygiene requirements enforced*
  • Patch management process regularly applied*
  • Vulnerability scanning performed on a regular schedule*
  • Network segmentation implemented to limit lateral movement*
  • Endpoint protection deployed and centrally managed*
  • Encryption, backup, restore testing, vendor risk management, and security training are established*

  • Incident Readiness and Response

  • Is there a documented incident response plan for cyber incidents?*
  • Ransomware preparedness status*
  • Date of last tabletop exercise
     - -
    2 digit month, 2 digit day, 4 digit year

  • Threats, Gaps, and Improvement Priorities

  • Top cyber threats affecting operations*
  • Should be Empty:
Select theme: