The goal of this project is to enhance Metra's cybersecurity and implement Metra’s cybersecurity
strategy. The objectives of this strategy are to implement vulnerability risk management, institute patch
automation, establish security operations sharing, and counter emerging threats through detection and
response.
This project will fund the purchase and installation of equipment and software for scanning,
prioritization, and remediation of vulnerabilities. This also includes the purchase of hardware and
software for multiple networks and segments including IT systems, positive train control (PTC),
SCADA infrastructure, and signal, telecom, and camera networks. The purchased equipment will cover
vulnerability scanning and prioritization, patch automation and remediation, Security Information and
Event Management (SIEM), and endpoint detection and response (EDR).