VRE Contract

RPI Group was competitively awarded a contract to perform a risk and security assessment of the Virginia Railway Express (VRE) bandwidth and network infrastructure, develop a plan to optimize and enhance VRE’s critical network infrastructure, and provide security training for VRE’s end users.

VRE began operations in 1992 and carries an average of approximately 19,000 weekday trips on two (2) lines. In January 2014, VRE’s Operations Board adopted System Plan 2040 which calls for expansion of service, requiring the addition of railcars, expansion of station and yard facilities, as well as expanding operations to meet the goal of doubling ridership by 2040.

The primary mission of VRE is to provide commuter-oriented passenger rail service between outlying suburbs and the Washington-Arlington-Alexandria urban core. Some tourists and “day-trippers” also ride the trains. The service is heavily oriented towards that core area in the morning peak and in the opposite direction in the evening peak.

A risk and security assessment of this scope and magnitude had never been undertaken by VRE.  The purpose of the assessment was to examine VRE’s current capabilities to prevent, detect, absorb and respond to all identified risks, and analyze the findings against current industry standards and best practices. RPI Group evaluated VRE’s Cybersecurity risk from the perspective of process, people, and technology.

Craig Hartburg, the Director of Operations & Security at RPI Group states, ‘“We are excited about the opportunity to serve alongside of VRE to protect and improve their network which is a critical part of the Virginia transportation infrastructure.”