Railway OT Segmentation: When a Network Change Opens the Boundary

A small network change can leave a railway engineering link functional while weakening its security boundary. Explore configuration drift, segmentation and the limitations of periodic audits in OT. The episode examines how teams can verify the intended boundary after maintenance. Related CUP episodes: Railway Patch Management: When an Update Stops the Network Railway Cybersecurity Patches: When the Safety Case Must Be Revisited Legacy Railway Security: Patching and Validation Constraints OT Time Synchronization Security: When the Clock Lies Railway Cybersecurity: Why Attack Detection Does Not Prove Safety Railway API Security: When Authenticated Data Contradicts Reality Legacy Railway OT: Reducing Risk When You Cannot Harden the Asset Legacy Railway Cybersecurity: Why Policy Is Not Enough Frauscher FDS102: Securing Railway Diagnostic Access FRMCS Security: Why a Mobile Network SLA Is Not a Safety Case