China: Entry into force with grace period of Cybersecurity Measures for Railway Critical Information Infrastructure

On 17 December 2023, provisions of the Cybersecurity Measures for Railway Critical Information Infrastructure were partially implmented. The measures aim to strengthen the security of the railway critical information infrastructure by establishing a network security monitoring and early warning system, and they mandate regular network security inspections and testing. They further strengthen the responsibility of operators, and mandate the improvement of cybersecurity measures such as passwords and of railway key information infrastructure.