By implementing the recommendations given in Part 2, authorities will better understand and be able to significantly reduce the cyber security risks facing their smart streets. However, it should be noted that many cyber security challenges exist at an industry level and cannot be effectively addressed by individual authorities. Greater standardisation is required around security approach and security requirements in the smart streets and smart cities areas. At the moment, schemes such as Traffic Open Products and Specifications (TOPAS) cover specifications and product approval for smart streets technologies. However, no such scheme currently considers cyber security, leaving authorities and system integrators to have to formulate their own, potentially non-standard security requirements. The same can be said about system security. A standard system of systems reference architecture for the smart streets ecosystem, subject to an industry-level generic security risk assessment based on IEC 62443 would greatly help bring authorities and suppliers on the same page regarding security requirements.

Case Study 2 – A Secure Transport Payment Service