CEO Review and Comment
| Title | Category | Working Group | Abstract |
|---|---|---|---|
| Withdrawal of “Development and Implementation of a Security and Emergency Preparedness Plan (SEPP)” | Security and Emergency Management | Infrastructure & Systems Security Working Group | This recommended practice describes the process by which a Security and Emergency Preparedness Plan (SEPP) may be developed, implemented and evaluated. A SEPP establishes a comprehensive, systematic management structure to safeguard personal security of passengers, employees and members of the public, as well as for the protection of physical assets and other property. The SEPP also is designed to foster a culture of security by assigning responsibility and accountability for security. This document is being sunset because it is obsolete. It is now best practice to have safety and emergency management-related policies in a separate document from security-related policies that may contain security-sensitive information (SSI). The current best practices are reflected in other APTA Recommended Practices. |
| Sensitive Security Information Policy | Security and Emergency Management | Infrastructure Security Working Group | This document establishes minimum standards for handling sensitive security information (SSI) in a transit agency environment. |
| Evacuating People with Disabilities from Transit Vehicles and Systems | Security and Emergency Management | Security and Emergency Management Working Group | This recommended practice provides information, considerations and recommendations to help public transportation and first responder agencies advance planning, response and recovery activities associated with evacuating people with disabilities from transit vehicles and systems. |
| Operational Technology Cybersecurity Maturity Framework Part 2: OT-CMF Tactical Guidance for Implementing and Maturing Operational Technology Rail Cyber Systems | Security and Emergency Management | Transit Cybersecurity Working Group | This document provides tactical and strategic guidance for implementing the APTA Operational Technology Cybersecurity Maturity Framework (OT-CMF) across transit agency environments. It serves as the practical companion to APTA SS-CCS-RP-006-23, “Operational Technology Cybersecurity Maturity Framework (OT-CMF) Overview,” enabling agencies to translate maturity framework principles into measurable, sustainable progress. Developed for agencies at all stages of cybersecurity development, this guidance is designed to help transit teams launch, assess and evolve operational technology (OT) cybersecurity programs tailored to the complex realities of public transportation systems. |