SCHUTZWERK Wins Two Framework Contracts with Deutsche Bahn for IT and OT Security Testing

We are pleased to announce that SCHUTZWERK has successfully competed in two parallel EU-wide tender processes conducted by Deutsche Bahn and has been selected for both multi-year framework contracts. The first framework contract covers comprehensive penetration tests across various domains including networks, IT infrastructure, web applications, mobile applications, and APIs. The second framework contract focuses on specialized security assessments in the field of Operational Technology (OT) and embedded systems. Being selected as one of the few service providers successful in both tenders highlights our comprehensive expertise in both IT and OT security areas.

Deutsche Bahn: Critical Infrastructure with High Security Requirements

Deutsche Bahn AG, as a federally owned mobility and transport company with over 200,000 employees, is one of Europe’s largest transportation and logistics enterprises. With a rail network of approximately 33,400 kilometers and more than 40,000 train journeys daily, the railway is an important component of Germany’s critical infrastructure.

In recent years, Deutsche Bahn has invested heavily in the digitalization of its infrastructure. The “Digital Rail Germany” program focuses on digitalization, automation, and artificial intelligence as core elements of the railway strategy. This progressive networking of IT and OT systems requires high security standards and continuous cybersecurity monitoring.

Competitive Tenders: SCHUTZWERK Convinces Through Broad Expertise

The awarding of both framework contracts followed rigorous and detailed selection processes as part of parallel EU-wide tenders. The technical capabilities, experience, and qualifications of applicants were thoroughly examined in each case. SCHUTZWERK’s selection for both challenging tenders confirms our exceptional breadth and depth of expertise in the field of cybersecurity - from classical IT systems to complex OT environments.

Comprehensive Security Services for Complex Requirements

As part of the partnership, SCHUTZWERK will provide a broad spectrum of specialized security services:

• Comprehensive Penetration Tests : Simulation of realistic attacks on IT systems and networks to identify vulnerabilities before they can be exploited by actual attackers

• Specialized OT and Embedded Security Analyses : Assessment of industrial control systems and critical infrastructure components essential for smooth railway operations

• Vulnerability Analyses and Risk Assessments : Systematic identification and prioritization of security risks in complex IT and OT environments

• Web Application Security Assessments : Testing of the numerous customer-facing applications and internal tools of Deutsche Bahn

• Cloud Security Assessment : Testing of cloud environments and services for configuration vulnerabilities and security risks

Challenges of Digitalization in the Railway Sector

Deutsche Bahn is driving digital transformation in the transportation sector. This evolution is part of the company’s comprehensive digitalization strategy and presents new cybersecurity challenges for railway operations.

Projects such as automated train control (ETCS), networked railway stations, and digital customer services create continuously evolving requirements for IT and OT security. As a critical infrastructure operator, Deutsche Bahn must meet specific security standards. The complex infrastructure includes:

• Digital control and safety technology for train traffic
• Networked signal boxes and signaling technology
• Automated operating systems for railway stations and logistics centers
• Customer-oriented digital services and payment systems

These systems must be protected against various cyber threats. Particularly dangerous are targeted attacks on critical infrastructure, which could have significant impacts on the availability and safety of the railway system. As connectivity increases, so does the attack surface, making regular security assessments even more important.

SCHUTZWERK: Specialist in Security Testing of Critical Infrastructure

Our experience in technical and conceptual security testing of complex systems and critical infrastructure makes SCHUTZWERK a suitable partner for Deutsche Bahn. With our team of offensive IT security experts, OT specialists, and embedded security professionals, we identify vulnerabilities and provide well-founded recommendations for improving security.

In the field of OT and embedded security, where industrial control systems and critical infrastructure are the focus, we contribute specialized testing expertise that is important for assessing the security of railway systems.

Sustainable Mobility in Daily Business Operations

The collaboration with Deutsche Bahn has special significance for us, as railways also play an important role in our day-to-day business. Many SCHUTZWERK employees are enthusiastic train users and choose the train as their preferred means of transport for travel to clients, project assignments, or events whenever possible and practical.

“As a co-founder of SCHUTZWERK, I have traveled hundreds of thousands of kilometers by train between our locations in Ulm and Hamburg and to our clients in recent years. I am very pleased that we can now actively contribute to the security of this infrastructure that is so important for Germany,” explains Jakob Pietzka, co-founder and one of the managing directors of SCHUTZWERK.

Together for a Secure Digital Future

For us the collaboration between SCHUTZWERK and Deutsche Bahn goes beyond a mere service contract. It represents a joint commitment to the security of a significant infrastructure in Germany and contributes to the mobility of people and the transport of important goods.

We look forward to the challenges and opportunities of this partnership and are proud to contribute to the secure digital transformation of Deutsche Bahn.