As the railway seeks to harness the benefits of digitalisation and the Internet of Things, the links between information technology and operational technology become ever-more intertwined. However, these trends are completely redefining the railway security environment as systems become vulnerable to new types of threats. Keith Barrow assesses how the industry is responding to the cybersecurity challenge.