EUROPEAN CIVIL AVIATION CONFERENCE - CONFÉRENCE EUROPÉENNE DE L'AVIATION CIVILE

New best practices course on cyber security

28-30 June 2021 - National security inspectors and auditors from the Icelandic Transport Authority (ICETRA) and the Transport Competence Agency of Lithuania attended a Best Practices for National Auditors – Cyber Security (Basic) training course held virtually in June. This new ECAC training course was designed to strengthen participants’ understanding of cyber threats to civil aviation and cyber security measures in aviation, in order to include this component in their national compliance monitoring activities.

Cyber threat actors, possible cyber-attack scenarios on critical aviation systems and the key elements of cyber risk management were presented during the training. The participants acquired a basic understanding of cyber security organisational measures and the protection measures to be implemented by operators and entities to mitigate cyber risks. These included security by design, supply chain security, network separation and access control, amongst others. Particular attention was paid to inspecting these measures using the recommended approach. Two additional courses will be delivered in July and one in August.