26. As digital technologies evolve, dutyholders must:

• Continually review their digital risk exposure;
• Share learning from incidents and near-misses;
• Strengthen and maintain digital competence across technical and safety disciplines; and,
• Improve resilience and recovery planning;
• Embed digital safety risk management throughout the supply chain and the life of the system;
• Ensure effective assurance processes and governance arrangements are in place to control these risks; and,
• Embed security and safety by design into new systems.

27. ORR will continue to use a combination of proactive inspection, investigation, stakeholder engagement and regulatory intervention where necessary to support continuous improvement in digital safety management across the rail industry.