Overview

A foundational course in aviation cybersecurity for those with a leadership background in security, cybersecurity, safety, or technical management responsibilities. This course aims to equip aviation professionals with a foundational understanding of cybersecurity and its ever-growing importance in the aviation industry. By integrating aviation knowledge with cybersecurity concepts, participants will explore how these domains interact and impact flight operations. The course delves into various aspects, including the technological underpinnings of aviation systems, the connection between cybersecurity and safety, and the methods used by attackers. Ultimately, the goal is to provide participants with the knowledge to identify critical systems, navigate regulatory considerations, and implement effective cybersecurity practices within their organizations.

 

Who should attend?

• Mid-level management to C-level executives at airlines
• Airport operators
• Regulatory Compliance personnel
• Air Navigation Services personnel
• Technical Staff and Cybersecurity Professionals
• Aviation industry professionals with an interest in cybersecurity
  
  

Course Structure

The EagleVision (virtual) synchronous course is delivered over two weeks, with 3-4 of the following modules being covered each weekday:

• Module 1: The History of Cybersecurity, Fundamental Concepts, and Terminology
• Module 2: How Technology Underpins All Aviation
• Module 3: Why Cyber-Adversaries Attack - Types and Tools of Cyber Adversaries
• Module 4: How Adversaries Attack and Pulling it all Together - Technology as an Attack Surface
• Module 5: Defining Cybersecurity Objectives in Aviation and the Critical Aviation Elements
• Module 6: How to Identify and Scope Cybersecurity Critical Systems within Aviation
• Module 7: Cybersecurity Risk
• Module 8: Understand the Regulatory and Legal Considerations of Aviation Cybersecurity
• Module 9: Cybersecurity Governance and Oversight - Developing a Cybersecurity Program
• Module 10: Developing a Cybersecurity Budget - Cybersecurity Culture
• Module 11: Developing a Cybersecurity Program Workshop Part I
• Module 12: Developing a Cybersecurity Program Workshop Part II
• Module 13: Managing Supply Chain Risk, the Role of Contracts and Third-Party Audits
• Module 14: Information Sharing
• Module 15: Personnel, Staff Training, Recruiting and Retaining
• Module 16: Organizational Resilience and Incident Response
• Module 17: Aviation Operating Systems
• Module 18: Identity and Asset Management
• Module 19: Data Security
• Module 20: System Security
• Module 21: Resilient Systems Part I
• Module 22: Resilient Systems Part II
• Module 23: Vulnerability Management
• Module 24: Incident Management
• Module 25: Tabletop Exercise Part I
• Module 26: Tabletop Exercise Part II
• Module 27: Building an Aviation Cybersecurity Strategy
• Module 28: The Future and Wrap-Up

 

Key Learning Outcomes

Upon the completion of this course, participants will be able to

1. Apply cybersecurity concepts to the aviation industry.
2. Analyze cybersecurity actors and behaviors in the aviation environment.
3. Evaluate risk and threat levels of the cybersecurity domain.
4. Interpret cryptographic and encryption requirements of the aviation environment.
5. Diagram cybersecurity infrastructure and its impacts on traditional avionics.
6. Classify avionics and cybersecurity assets within legal and governmental policy frameworks.
7. Anticipate how future changes in the cybersecurity domain will impact flight operations.

 

Course Delivery

The course is delivered in a blended modality that uses EagleVision and Canvas to deliver the curriculum in a virtual classroom, providing a campus learning experience from anywhere.

• EagleVision: A technology that combines web video conferencing with a virtual learning environment to enhance real-time collaboration, allowing you to communicate directly and instantly with professors and classmates during scheduled meetings.
• Canvas: An educational platform designed with the online teaching and learning experience in mind, is a cloud-based system that is viewable on any web browser, computer, or mobile device and allows for engagement and collaboration through video, audio, integrated media recorder, text, and discussion boards at whatever time you chose.

This course is delivered over ten days, with EagleVision sessions held Monday to Friday from 8:00 am to 12:00 pm Eastern Standard Time (UTC -4) and some online Canvas activities taking place throughout the two weeks.  The dates and times of the next session are shown below in the Session Information section.