Videoconference, 21-23 November 2023 — The ECAC Secretariat, with contributions from cyber security experts from Poland, Switzerland and the United Kingdom, organised a training session in November dedicated to inspecting and auditing cyber security in aviation. Eight aviation security auditors from the Netherlands, Portugal and Serbia participated in this online Best Practices for National Auditors – Cyber Security (basic) course.
The course aimed to empower participants with a deeper comprehension of cyber threats impacting civil aviation. This included insights into cyber threat actors, potential threat scenarios, and fundamental components of cyber risk management. Through a combination of theoretical presentations, discussions, and virtual activities, participants gained foundational knowledge about organisational measures concerning cyber threats. This encompassed protective measures to be adopted by operators and entities in addressing cyber threats, covering aspects such as security by design, supply chain security, access control, fostering a cyber security culture, cyber incident detection and response, among others.
Additionally, the training encompassed best practices for preparing more effectively for inspecting or auditing cyber security measures within aviation and for conducting on-site inspections/audits.