According to: Is the Transit Industry Prepared for the Cyber Revolution: Policy Recommendation to Enhance Surface Transit Cyber Preparedness report, only three-fifths of transit agencies in the U.S. have a cybersecurity preparedness plan.

Some 90 transit agencies were surveyed for the research done by Mineta Transportation Institute (MTI) at San Jose State University to assess the readiness of agencies to understand, mitigate, and respond to cybersecurity threats.

The U.S. Department of Homeland Security has previously designated the transportation system sector as one of 16 critical infrastructure sectors whose disruption would have a debilitating effect on the nation’s security.

The report found that most transit agencies, which fall within this sector, do not have many of the basic policies or personnel in place to respond to a cyber incident. For example, while73% of responding transit organizations feel they have access to information to help implement a cybersecurity preparedness program, only three-fifths have a cybersecurity response plan in place and 43 per cent do not find their plan sufficient. Thirty-six percent of respondents report not having a cyber disaster recovery plan and 67% do not have a cyber crisis communications plan.