Procedure

VN

Overview

This document applies to all processes related to the life cycle such as, for example, planning, development, system integration, testing, commissioning, operation, maintenance, and disposal of road traffic engineering systems consisting of road traffic signal systems as defined in DIN EN 50556 (VDE 0832-100), traffic management systems as defined by DIN VDE V 0832-400 (VDE V 0832-400) and their central control systems, as well as all elements connected to them via data transmission. It is also applicable to installations and systems that, in accordance with BSI-KritisV, fall under the "Intelligent Transportation System" category in the "Transport and Traffic" sector, provided that they are closely linked to road traffic signal systems or traffic management systems either from a technical or from a functional perspective. Road traffic engineering installations and systems used in tunnels as well as their control and management systems also fall within the scope of this document. The scope of this document covers the entire road traffic technology infrastructure in particular, including its control and management systems, as well as the interfaces to tunnel control systems. This includes the following: - the entire IT-supported decentralized and centralized control technology, as well as the IT systems deployed for their operation, such as programming and parameterization devices; - the entire network, telemetry, and remote control technology used for communication in control technology; - all operating systems, drivers, programs, and applications used on the aforementioned systems; - all associated processes; - all outsourced systems and services. This document is to be used in conjunction with DIN EN ISO/IEC 27001:2024-01, DIN EN ISO/IEC 27002:2024-01, as well as the industry-specific standards DIN EN 50556 (VDE 0832-100), DIN VDE V 0832-110 (VDE V 0832-110), DIN VDE V 0832-400 (VDE V 0832-400), and DIN VDE V 0832-500 (VDE V 0832-500). Further information and assistance can be found on the BSI website, for example in the form of guidance or FAQs. According to Section 8a Paragraph 2 of the BSI Act, this document may be used as an industry-specific security standard for the systems, applications, and components described in accordance with the Ordinance on the Determination of Critical Infrastructures Pursuant to the Act on the Federal Office for Information Security BSI-Kritis Ordinance - BSI-KritisV), Annex 7, Part 3, Column A, No. 1.4.2 "Traffic Control and Management Systems in Municipal Road Traffic" in order to comply with Section 8a Paragraph 3. This includes the obligation to deploy intrusion detection systems as described in Section 8a Paragraph 1a. For operators of critical infrastructure that fall within the scope of the German IT Security Act [BSIG] and who make use of this document, the requirements of Section 8a Paragraphs 1 and 3 of the BSIG shall be met only if this document is implemented as a whole. Facilities that are specific to tunnels, such as those for fire protection and emergency exit signage, are not dealt with in this document, although they may constitute part of a critical infrastructure in accordance with other provisions. This document cannot explicitly account for the specific or unique characteristics of individual operators; in accordance with Section 8a Paragraphs 1 and 3 BSIG, operators shall supplement this document independently in order to verify that the information security of their systems complies with the state of the art. Typical use cases include the protection of traffic lights and their components, such as detectors or signal transmitters; the protection of traffic computer centers and their networks and the integration and secure control of traffic management systems, such as gantry signs or variable message signs.

Responsible national committee

DKE/K 355 - Straßenverkehrs-Signalanlagen