Member

The rail sector must already comply with the Network and Information Systems Regulations 2018, and the Government will continue to monitor GBR’s cyber security position. The Government’s cyber action plan published earlier this year also sets clear expectations about how public sector bodies should manage cyber risk and resilience, including through stronger accountability and support. The Government and the ORR will review the business plan to ensure these actions and principles are embedded in GBR’s activities.