Scientific paper ID 2566 : 2024/3

The article discusses the importance of cybersecurity in the rail sector. The integration of digital technologies exposes the sector to a multitude of cyber threats, necessitating proactive and robust security measures. The rail sector faces significant financial risks from cyber threats, including direct costs from service disruptions and recovery efforts, as well as indirect costs like reputational damage and loss of public trust, that can have lasting effects, reducing passenger confidence, and potentially leading to a decline in ridership, which in turn affects revenue and the financial stability of rail operators. Guided by European Unity Agency for Cybersecurity (ENISA) report and the Directive on measures for a high common level of cybersecurity across the European Union (NIS2 Directive) strategic investments in cybersecurity are the key to addressing these vulnerabilities. Cybersecurity should be viewed as a critical tool for ensuring the security of efficient rail operations. Proactive investments in cybersecurity can help prevent major financial losses from cyber incidents and enhance the sector`s defenses against evolving threats. Cost-benefit analysis of cybersecurity investments in the rail sector is presented in the article and a formula for calculating the return on investment of cybersecurity investments is proposed.