Background An aviation cyber security portfolio SITA's cyber security journey SITA & Airbus join forces to tackle the threat

1. Cyber Security
Michael.schellenberg@sita.aero

2. A 360° Approach Enabling cyber resilience
Threats + Risks
CYBERCRIME WILL COST BUSINESSES
OVER $2 TRILLION BY 2019
Juniper Research, 2015
HACKERS BOMBARD AVIATION SECTOR
WITH OVER 1,000 ATTACKS PER MONTH
IN 2016
European Aviation Safety Agency, 2016
SITA has been
mandated by its
members to support
the Air Transport
Industry in
addressing cyber
security challenges
CRITICAL BUSINESS PROCESSES
AND AVIATION IT ASSETS
UNDERSTANDING
STRATEGIC COLLABORATION
& PARTNERSHIPS
AVIATION SECURITY STANDARDS
AND REGULATIONS KNOWLEDGE
MULTIPLE EXPERIENCES
ENABLING REPLICATION &
CUSTOMIZATION
SITA’s aviation-tailored
service
Risk MitigationBusiness Impact
REPUTATION & SAFETY
& RELIABILITY AT RISK & CYBER RESILIENCE
BACKGROUND

3. Develop the institutional
understanding to manage
cybersecurity risk to systems,
assets, data, and capabilities
Identify aviation Cyber risks
Mitigate potential business
impacts of an incident or
eventually a crisis.
React for Business safeguard
Tailored detection solutions
and scenario to the aviation
sector.
Detect Industry specific attacks
Risk mitigation controls and
safeguard tailored to the Air
Transport context and
constraints.
Protect Aviation critical assets
AVIATION
CYBER
SECURITY
RESILIENCE
Aviation industry has become increasingly digital
As more devices and control systems are connected online, more vulnerabilities appear
AN AVIATION CYBER SECURITY PORTFOLIO

4. Identify aviation Cyber risks
React for Business safeguard
• Perimeter Security & End Point
• Identity and Access
• CyberSecurity Awareness & Training
• Risk, Maturity & Compliance
Assessment
• Cyber Security Transformation
• Vulnerability Assessment &
Penetration Testing
• Incident Response
• Crisis Management
• Compromise Assessment
• Aviation SOC Services
• End Points & Industrial Control Systems
monitoring
• Contextual Threat Intelligence
Aviation industry has become increasingly digital
As more devices and control systems are connected online, more vulnerabilities appear
AN AVIATION CYBER SECURITY PORTFOLIO
Protect Aviation critical assets
Detect Industry specific attacks
AVIATION
CYBER
SECURITY
RESILIENCE

5. 20172016 TODAY
assessment , market study , partner landscape
+
PROTECT
+60 customers
Incident
Response &
consulting
#1 Cyber
symposium
Portfolio
board approval
Several Cyber
consulting & incident
response engagement
sold & delivered
1st SOC
reference
#2 Cyber
symposium
Consulting practice &
extended partnership
…more to
come
Aviation
SOC
SITA’S CYBER SECURITY JOURNEY
AVIATION
CYBER
SECURITY
RESILIENCE

6. SITA & AIRBUS JOIN FORCES TO TACKLE THE THREAT
A first Aviation SOC* Made Specific to our industry
Attacks are more and more sophisticated and industry
tailored
Passenger Check
In and Boarding
Baggage
Handling
Air Traffic Management,
Navigation Aids and
Approach
Entertainment
Systems
(Aircrafts)
Communications
Systems
Common-Use
Passenger Processing
Systems
Access Control
Systems
Airport Resource
and Infrastructure
Management
Systems
The SOC is in charge of rapid security incidents
detection and appropriate reaction, enabled by a
knowledge of the environment
SCADA Systems
Enabling unique benefits
More effective detection Better Incident management Real compliancy achievement
*SOC:SecurityOperationsCenter
it is a control
tower to detect
attacks…
…and a team
ready to respond
Loyalty prog.

7. A 360° Approach Enabling cyber resilience
What is your Cyber Security maturity level?
What is your cyber risk appetite?
Discover the other SITA Cyber Security solutions
GDPR compliance, aircraft cyber security framework, loyalty prog compromise assessment, etc
Act now to reduce your Cyber Risk exposure !
VISIT us @ the expert corner/booth
THIS WAS ONLY A VERY SHORT PREVIEW
Contacts: CyberSecurity@sita.aero
Vivien.Eberhardt@sita.aero

8. DISCLAIMER
Any use, republication or redistribution of this content is
expressly prohibited without the prior written consent of the
Author. Permission to copy and reproduce content may be
granted by the author, at their discretion, and by request
only.
Source: presentation of Michael Schellenberg, SITA
at the 2017 SITA Air Transport IT Summit, Brussels.
2017 Air Transport IT Summit