The Silent Threat

Cyber-attacks are often considered a silent threat to organizations as they do not always come together with visible physical attacks. With reports from the European Aviation Safety Agency recording over 1000 cyber-attacks each month on aviation systems, it is undeniable that this silent threat is a significant one that cannot be overlooked.

Admittedly, it is difficult to detect a cyber-attack as they can come from any one of multiple entry points and it can take months before a breach is detected. This breach could result in malware being installed on airport systems, loss or compromise of sensitive data. Breaches could come from external attackers or even malicious employees, so airports cannot afford to let their guard down at any time and need to have a robust cyber security programme in place.

Prevention testing and training

It may seem counterintuitive for airports to want to attack their own networks, but it is only through exercises like this that airports can learn about their own vulnerabilities and move ahead of cyber-attackers to close up potential entry points. These penetration tests would also aid the airport in ensuring that all stakeholders are following the prescribed SOP and that they are not vulnerable to attack.

Similarly, planning a phishing simulation exercise for airport employees will also raise their level of awareness when it comes to suspicious emails. As employees take part in these exercises, they will learn how to identify suspicious emails and how to highlight these attempts at a breach. With this culture of security being built at the airport, the chances of a breach due to negligence will be reduced.

Assessing risk and implementing cybersecurity frameworks

Before putting a cybersecurity framework in place, airports need to first conduct a risk assessment to understand key areas which would be vulnerable to attack and key infrastructure that could potentially cripple airport operations in the case of downtime as the result of an attack. A risk assessment would also be critical in determining the areas which are in most urgent need of cybersecurity protection.

Airports that have yet to fully implement cybersecurity frameworks should make the move to do so as soon as possible. Just because they have not yet faced a major cyber-attack does not mean that there will be no attack in the future. Constant vigilance is important to ensure that airport systems are not compromised. Based on the risk assessments that have been conducted, airports should be able to determine the best framework to suit their needs.

Learn more at the 3rd Cyber Security for Airports Summit about how you can shore up cyber defences at your airport!

Join airport operators, aviation authorities and air navigation service providers as they share on how they are managing the most pertinent cyber security risk challenges and issues.

Taking place from 18th to 21st June 2019 in Singapore, this summit brings together various global perspectives to look into the current cybersecurity challenges that the airports industry is currently facing. From IoT, IT network infrastructure, stakeholder and vendor management to instilling a culture of security among your staff, this summit has invaluable opportunities for you to hear from industry experts.

What are you waiting for? Visit the event website or email enquiry@equip-global.com to learn more and join us at the summit!