The risk that information security in railway systems will be compromised by cyberterrorism or other incidents, affecting railway operations and related services. Measures include risk assessments specific to railway systems, audits and the implementation of EDR.