Summary
Key results
End-to-end threat modeling and risk assessment aligned with ISO/IEC 62443 and TS 50701
Cybersecurity Management Plan and Secure Software Development Lifecycle (SSDLC) established for embedded devices
Digital security as a prerequisite for modern rail systems
With growing automation in rail and tighter integration of industrial networks, train control systems are increasingly exposed to cyber threats. In an industry built on precision and reliability, even a minor security gap can lead to data loss, communication outages, or disruption of safety-critical functions. Lotus Wireless – delivering solutions for axle detection and counting systems – set a goal to reach the highest level of compliance with key security standards (including TS 50701, ISO/IEC 62443, and EN 50126) and embed a “secure by design” culture.
The organization needed a partner not only to execute detailed threat modeling and risk assessment, but also to design concrete security countermeasures and implement cybersecurity governance across the full product lifecycle – from concept through maintenance. The decision to partner with Sii Poland was strategic: to bring expertise in cybersecurity, embedded engineering, and compliance with rigorous railway standards, while accelerating certification and enabling faster international deployments.
Threat modeling, countermeasures, and a full security program
Sii Poland assembled a multidisciplinary team of security architects, embedded engineers, and compliance specialists to design and implement a comprehensive cybersecurity architecture for a railway safety system.
Work began with full threat modeling aligned with TS 50701 and ISO/IEC 62443, including identification of assets, functions, data flows, entry points, and potential attack vectors. The team performed both high-level and detailed risk assessments, creating a threat map and assigning security levels to zones and communication channels. Based on these findings, Sii designed security countermeasures spanning hardware and software layers, including:
- Secure boot and secure updates (secure boot, secure install, secure update) for three microcontroller families, including TI Secure Boot, STM32 Secure Boot, and MCUBoot
- Encryption and protection of data stored on devices
- User authentication and authorization, with mechanisms to detect unauthorized access
- Monitoring and response capabilities, including anomaly detection and security event handling
- Secure communication and secure operations – protecting transmission channels, service processes, and manufacturing workflows
Next, Sii developed a Cybersecurity Management Plan and implemented an SSDLC to ensure continuous security control throughout the product lifecycle. The plan covered implementation scheduling, roles and responsibilities, resource allocation, and mechanisms for ongoing monitoring and improvement. Assumptions and controls were validated through penetration testing, confirming resilience against the identified threats.
By combining software engineering, embedded systems, and cybersecurity expertise, Sii Poland delivered complete implementation documentation enabling certification and continued evolution of the solution in mission-critical environments.
Durable resilience and certified security for embedded systems
Sii Poland’s work gave the client full control over the security of embedded infrastructure required in railway safety solutions. The implemented cybersecurity management plan and tailored countermeasures ensured alignment with international standards and paved the way for certification at the level expected by transport operators.
With SSDLC-aligned processes in place, Lotus Wireless can now develop products in a true “secure by design” model – balancing security, efficiency, and innovation. The initiative strengthened not only device protection but also R&D capabilities, enabling Lotus Wireless teams to independently scale and improve future products in line with rising cybersecurity requirements across the railway industry.