Schweizerische Bundesbahnen

Schweizerische Bundesbahnen (SBB) operates as the national railway company of Switzerland, providing core passenger and freight transport services across the country. Its public-facing digital offerings include mobile timetable information and online ticket purchasing, which constitute key channels for customer interaction. The organisation's scope is defined by its federal mandate, positioning it as the central entity for rail-based mobility within Switzerland's transportation infrastructure. SBB's services are integral to both daily commuter travel and long-distance logistics, serving the general public and commercial clients. The company maintains a critical role in the national infrastructure, with its operational continuity directly impacting public mobility and economic activity. Its digital platforms extend the physical rail network into the online sphere, facilitating journey planning and fare transactions. As a federal enterprise, SBB's activities are inherently tied to national transport policy and public service obligations. The breadth of its service portfolio underscores its position as the backbone of Swiss rail transport, with a market presence that is essentially nationwide. The organisation's operational model combines scheduled train services with supporting digital tools to manage passenger flow and ticketing.

SBB demonstrates a defined operational resilience, as evidenced by its ability to maintain train services and core staff and passenger safety during significant cyber incidents, while specific online channels faced temporary disruption. The company handles sensitive operational data, including error logs and business correspondence, which are processed for analysis, sometimes via third-party providers. Its security protocol includes mandatory employee password resets following security events and the filing of criminal complaints with authorities. SBB engages in collaborative incident response with external partners and federal authorities, indicating an established regulatory and procedural framework for cyber threats. The organisation's approach to cybersecurity involves both internal measures and formal cooperation with state entities, reflecting its status as a critical national infrastructure operator. Data stewardship is a noted competency, with breaches involving stored operational data rather than direct customer information in reported cases. SBB's response to attacks prioritises service continuity for physical operations while securing digital assets and complying with legal reporting requirements. This dual focus on operational stability and data protection characterises its cyber defence posture. The company's structure as a federal railway implies direct accountability to the Swiss government, influencing its security investments and incident disclosure practices. Its handling of third-party data vulnerabilities highlights an awareness of supply chain risks within its IT ecosystem.