Course Name:
Airlines and Airports Cybersecurity
Date:17/09/2024 - 19/09/2024
Location:Amman
Conducted By:
RTC
How Will I Benefit?
Participants will learn about:
- The cyber threat landscape affecting ATI.
- What are the key cyber risks affecting airlines and airports.
- How to build their organization’s cyber risk profile, which methodologies and tools to use.
- How to build an Information Security Management system to continuously monitor and improve their cybersecurity level.
- Key cybersecurity regulations at international and regional level, with a focus on GDPR.
Who Should Attend?
- Airline and airport security management.
- Airline and airport managers.
- IT developers.
- IT service provider
Course Contents:
Day 1
- Morning: Introduction to ATI cyber threat landscape. Focus on key hacker groups targeting the ATI industry. Airlines business process, Aircraft e-enablement and airports business processes cyber risk.
- Afternoon: How to assess your organization’s threat profile?
- Overview of cyber risk assessment methodologies (ISO 27005, EBIOS, alignment with ISO 31000) Overview of GRC tools (Archer, etc.(.
- Demo/examples of risk management tools.
- Exercise and case study of an airline: Building your airlines cyber risk dashboard.
Day 2
- Morning: Key concepts of an ISMS: What is an ISMS? Why do organizations need an ISMS. Key components of an ISMS. Overview of ISMS certification requirements/readiness.
- Afternoon: Deep dive into ISO 27002 controls and case study. The session will end with an 1 hour quiz.
Day 3
- Morning: International Regulations on cybersecurity and data protection
- Overview of existing and upcoming cybersecurity regulations with an international and regional Focus.
- Focus on GDPR: How to protect your passenger and employee data within an airline or an airport? What Impact on key business areas within the organization such as Customer, HR and IT.
- Afternoon: Adaptation of NIST cybersecurity framework for airlines and airports. Focus on detection of cyber attacks. The session will end with a video of SITA’s cybersecurity Community Threat Center (a free SITA service), and how SITA is helping the community to address ATI specific cyber attacks.
Fees
Members:USD
1000
Non Members:USD
1150