MARVIN MUHUMUZA
Director, Cybersecurity Risk Management
Washington Metropolitan Area Transit Authority
Washington, DC
Cyber Risk Is Now Service Risk
When digital systems fail, passengers experience delayed trains, unavailable fare systems, disrupted communications, inaccurate arrival information, or reduced operational visibility. Riders may never see a cybersecurity dashboard, but they immediately notice when service reliability is affected.
Modern transit systems rely on interconnected digital environments spanning both traditional information technology (IT) and operational technology (OT). Signaling systems, Positive Train Control (PTC), dispatch centers, fare collection platforms, passenger information systems, vehicle telemetry, and cloud-based applications all contribute to delivering reliable service. As these systems become more connected, transit agencies are inheriting a new category of operational exposure: cyber-physical risk.
The industry’s challenge today is not only protecting technology. It is building resilient operations that can continue delivering safe and reliable service during digital disruption.
