access, authentication, cybersecurity, information security, passwords, risk management

Summary

In the computing environments needed by today’s transportation-related organizations, there is increasing complexity that requires several approaches to authenticate and authorize individuals, devices and services to perform functions and activities. This document defines sufficient practices for the various business cases that transit agencies, suppliers and partners must address. This may be an identity access management approach—although role-based access and other access and authentication methods may be involved in the discussion.