China: Implemented Cybersecurity Measures for Railway Critical Information Infrastructure

On 1 February 2024, the Cybersecurity Measures for Railway Critical Information Infrastructure entered into full force after the grace period for implementation ended. The measures aim to strengthen the security of the railway critical information infrastructure by establishing a network security monitoring and early warning system, and they mandate regular network security inspections and testing. They further strengthen the responsibility of operators, and mandate the improvement of cybersecurity measures such as passwords and of railway key information infrastructure.