Severity: High New document Global Action required
IEC publishes FDIS for railway cybersecurity standard IEC 63452:2026
Original title: Railway applications - Cybersecurity
- Published
- Source: webstore.iec.ch
- Effective
- Not stated
- Deadline
- Framework: IEC 62443
- IEC 62443-2-1:2024 (most recently revised part) source
- in 4 days
- IEC 61508-1:2026 FDIS: Third edition of general requirements for functional safety of E/E/PE safety-related systems, with new provisions on AI, human factors, and security
Why it matters
IEC has released the Final Draft International Standard IEC 63452:2026 for railway cybersecurity, available for purchase during its voting period (2026-10-30 to 2026-12-11), with the final publication included automatically upon purchase. The standard establishes a consistent framework for managing cybersecurity across all railway application types — covering rolling stock, fixed installations, and operational management systems. Compliance teams should note that the document addresses cybersecurity management, zoning, risk management, supply chain controls, assurance, and lifecycle requirements including legacy systems. It also provides guidance on coordinating cybersecurity activities with RAMS processes and clarifies the relationship between cybersecurity and safety.
What to do
IEC 63452:2026 requires railway system operators and duty holders to implement cybersecurity management, zoning, risk management, supply chain controls, and assurance measures across rolling stock, fixed installations, and operational systems.
This change concerns a paid standard. The text of the standard is not reproduced here — only the fact of the change, its date and a link to the publisher.
AI-assisted summary of the official document; the official text prevails. Not legal advice.