1. Home
2. Ideas
3. CAV-Specific Cyber Security Framework

CAV-Specific Cyber Security Framework

• Jun 26, 2026

Research Description

What are the critical gaps in translating broad smart city and OT security frameworks into operational procedures for safety-critical transportation networks, and how can they be mitigated?

What we hope to learn: Research is needed to bridge the gap between traditional information system-based cybersecurity framework and the challenges faced by industrial control and operational technology systems operating in a ground transportation safety environment. The gap needs to be closed at a level of detail comparable to SP800-53.

Review existing frameworks and explore other risk methodology and determine the suitability to task. Examples include but not limited to: • NIST SP800-82 • INL’s Consequence-Driven Cyber-Informed Engineering (CCE) • CISA Smart Cities guidelines • SAHARA

Additional Supporting Information

Benefits: A common security framework for CAV that can be used by OEM and IOO to establish common security expectations between private/public partners.

This does not have to be a new framework, it can be: • Guidance assembled from multiple established sources. • Modification of existing Guidance/Standards • Brand new standards that co-exist with existing guidance.

Benefits can include: • Policies guidance • Refine availability performance Goals • Refine operational KPIs

---

Submitted By

Jim Katsafanas

Michael Baker International

412-269-4635

Attachments