What This Means for Transport Operators

For procurement and technical teams evaluating onboard digital solutions, IEC 62443-4-1 certification translates into concrete, practical benefits:

• Confidence in a secure solution. Every product and update running on our platform - from connectivity gateways to passenger information systems - is built through a process independently audited and validated. You can be confident the solution you operate is secure.

• Aligned security processes. Our certified Secure Product Development Lifecycle means we can connect our security processes directly with yours, making joint risk management simpler.

• Simplified supply chain due diligence. Instead of running extensive in-house security assessments of our development practices, you now have independent, third-party-verified evidence - reducing both effort and risk in supplier onboarding.

• Audit-ready documentation. Under NIS2 and the Cyber Resilience Act, you may need to demonstrate the security posture of your supply chain to national authorities. Our certification is formal documentation you can reference directly in compliance audits.

• Greater safety for end users. Because security is built into the product lifecycle rather than added afterwards, the passengers and staff who rely on these systems every day benefit from a safer, more resilient service.

• Future-proofing. As regulatory requirements tighten, the gap between certified and uncertified suppliers will widen. Working with a certified partner today means less disruption as compliance demands evolve.

What This Means for Our Solutions

Passengera's platform spans connectivity and edge computing, passenger experience, and operations and safety - all running on hardware deployed in trains, metro cars, buses, vessels, and autonomous vehicles. This is inherently critical infrastructure, where a cybersecurity incident is not merely an IT problem - it can directly impact passenger safety, service continuity, and operator reputation.

The IEC 62443-4-1 certification applies across our Secure Product Development Lifecycle, which means every product and update we ship is produced through an independently audited and validated process, built around the security capabilities our customers rely on daily, including:

• Secure boot and secure update

• Encrypted communications

• Access control and authentication

• Vulnerability and patch management

• Secure end-of-life decommissioning

“Cybersecurity in transport is not a feature you can add at the end - it has to be the foundation. Achieving IEC 62443-4-1 certification is a formal confirmation of what we have been building into our engineering culture for years. For our customers, this is a concrete guarantee that we are a responsible long-term technology partner.”

- Jaromír Tejkl, Product Manager, Passengera

Why This Matters Now

This certification comes as the European regulatory environment tightens for public transport operators and their technology suppliers. The NIS2 Directive expands cybersecurity obligations for operators of essential services, including supply chain security - our certification gives operators documented evidence that their onboard digital supplier meets internationally recognized secure development standards. The EU Cyber Resilience Act introduces mandatory secure development lifecycle requirements for products with digital elements, and IEC 62443-4-1 aligns directly with what it expects. For railway-specific deployments, CLC/TS 50701 draws heavily on the IEC 62443 framework, so operators pursuing that compliance benefit from working with a supplier already inside the same standards family.

Looking Ahead

This certification represents a milestone, not a finish line. We have an active plan to keep extending and continuously improving the security of our solutions - including pursuing further certifications within the IEC 62443 family - and will keep working closely with our customers as NIS2, CRA, and sector-specific frameworks evolve.