NIST releases a new draft cybersecurity framework for systems that never stop moving

NIST’s NCCoE released a draft Transit Cybersecurity Framework Community Profile (open for public comment through February 23, 2026) to help transit agencies map cybersecurity activities to NIST Cybersecurity Framework 2.0. The guidance recommends prioritizing defensive measures for systems that affect passenger safety and service continuity (for example signaling, train control, dispatching, and communications), stresses cross-sector collaboration, and offers scalable actions tailored to agencies of different sizes and resource levels as they transition from legacy to more digital operations.