Strengthening Cyber Resilience Across Illinois Transit Agencies

This white paper documents the Illinois Department of Transportation (IDOT) Cyber Resilience Pilot, an initiative designed to improve cybersecurity readiness among six small, rural, and mid-sized transit agencies. Building on the 2020 and 2025 Mineta Transportation Institute (MTI) studies—which found that many agencies lacked basic cybersecurity hygiene and were unlikely to close gaps without mandates and funding—the Pilot tests a practical, lower-cost alternative: group-based assessments, shared tools, and ongoing coaching. The Pilot demonstrated, on a small scale, the positive impact that a structured, collaborative approach can have on improving cybersecurity in the transit sector. In six months, the six Illinois transit agencies moved from minimal cyber preparedness to taking concrete steps that reduce their vulnerability to attack, such as establishing incident response plans, training staff, and implementing essential technical safeguards. The results also show that assessments alone are insufficient; leadership engagement, the designation of a “cyber-resilience quarterback” (coach), and a collaborative approach are critical to making cost-efficient, measurable progress. The Pilot marks a proactive step toward modernizing cybersecurity in public transportation and demonstrates that even with limited budgets, strategic collaboration can yield substantial dividends in resilience and risk reduction to protect the nation’s critical infrastructure.