In a study conducted in late 2021, we examined new technologies for our client, the German Center for Railway Research, and identified their potential to transform this sector.
For the study, cybersecurity decision-makers at more than 60 companies in Germany, Austria, and Switzerland were surveyed. The first part of the survey focused on the current state of cybersecurity at each company. The second part asked about the use of new technologies within the companies, as well as their potential and risks. The result is an assessment of a total of 12 new technologies in the rail sector, accompanied by in-depth expert interviews.
Cloud services are on the rise
Cloud services, such as Software-as-a-Service, which are already well established in other sectors, will have a major impact on the rail sector over the next two years. According to the study, the potential of this technology is considered to be wide-ranging. Simple use cases, such as cloud-based file versioning and the “single source of truth,” are particularly highlighted. In particular, the flexibility of cloud solutions was cited as a key advantage in the survey. For example, data centers no longer need to be operated in-house; monitoring for malfunctions no longer relies on hardware purchased specifically for that purpose within the company itself and can be easily scaled up as needed.
The Internet of Things and cloud computing show great potential
In addition to cloud services, other technologies were examined.
The Internet of Things (IoT) and cloud computing were both expected to have a significant impact in the coming years. The potential of the Internet of Things, for example, is considered to be great because it can be used as an enabler for predictive maintenance. Data from the cab, tires, or brakes can be collected and processed to optimally counteract wear and tear or install replacement parts at the right time. However, this requires the ability to store large amounts of data, which is why cloud services are a natural fit here as well.
The use of technologies such as blockchain and fiber optics in the rail sector, however, remains unclear.

Blockchain is a ledger of information that is cryptographically hashed and authenticated and managed within a network of participants. It is based on cryptographic proof, which allows two parties to interact with each other without the need for a third party.
Cloud computing provides resources—such as infrastructure, applications, or services—via the Internet. Cloud computing makes it possible to integrate complex or innovative IT infrastructures into companies, even on short notice.
Cloud services are infrastructures, platforms, software, or technologies that are hosted by a third-party provider and made available to potential users via the Internet. Well-known services include IaaS, PaaS, SaaS, and Function-as-a-Service.
The Internet of Things (IoT) is a self-configuring wireless network in which sensors and actuators are connected to the Internet or to other systems. In the IoT, any number of objects can be managed and monitored. In addition, the data can be used in other applications.
The risk of cyberattacks must be taken into account
Of course, every new technology brings not only opportunities but also risks. As a critical infrastructure sector, the rail industry is particularly cautious, and changes must be carefully considered. At the same time, the rail industry must promote innovation and put it into practice. This is the only way to attract customers.
The study “Security and Planned Technology Deployment” also assessed the risks associated with new technologies. Technologies such as the Internet of Things and cloud computing were found to pose particularly high risks. These technologies should not be implemented without first ensuring that the necessary expertise has been built up within the company. Thus, while both technologies are viewed as having great potential, they also pose an enormous security risk if implemented.

According to the respondents, fiber optics pose the lowest cybersecurity risk. The reason for this is that fiber optics have virtually no vulnerabilities and cannot be hacked. Consequently, it is a technology that can be put to good use and is already widely adopted by many companies. However, the potential for innovation with this technology has essentially been exhausted.
To grow, a balance must be struck between security and innovation
Cybersecurity is a top priority and should be treated as such. It’s worth investing in this area and establishing yourself as an innovative yet secure company.
Before new technologies are introduced in the company, a security expert should be consulted to professionally assess the situation and identify potential security vulnerabilities.
An iterative approach is recommended for the successful implementation of new technologies. For example, a cross-functional team comprising experts from related technology fields can experiment with the new technology so that it can be tested within a defined framework.
Only once the issues have been resolved and the tests have yielded positive results should the new technology be rolled out more widely within the organization—through employee training and the establishment of an in-house network of experts.
The study evaluates and ranks other technologies based on their critical importance and potential. It also examines the state of cybersecurity in the rail sector across various subsectors, such as rail transport and infrastructure companies. You can view the full study here.












