E DIN VDE V 0831-105 VDE V 0831-105:2023-10

This document is applicable to safetyrelated electrical, electronic and programmable electronic (E/E/PES) systems including subsystems and equipment for electrical railway signalling systems.
This document describes activities and methods with the aim of specifying a procedure for handling IT security vulnerabilities and incidents. Risk-based statements on implementation times for measures are also specified for this purpose.
This document is applicable to the assessment and handling of risks arising from IT security threats as a result of security gaps. It does not address vulnerabilities in functional security or physical access. It also does not address vulnerabilities caused solely by the fact that, in the case of time-limited documents which were the basis for bringing the system into operation, expired. Suitable processes for the timely extension / renewal of these bases are to be defined elsewhere.
Only the basic steps are explained, the details must be regulated in the applied guidelines and processes at the operator / manufacturer.