Training of national auditors on cyber security
Videoconference, 3-5 April 2023 — The ECAC Secretariat conducted the fourth Best Practices for National Auditors – Cyber Security (basic) training course in April, with contributions from instructors from Germany and Poland. The course allowed national auditors from Sweden and Switzerland to develop their knowledge of cyber security measures aimed at protecting critical aviation systems and data from cyber threats.
Specific measures examined included Information Security Management Systems, security by design, supply chain security, access control, control of software, cyber security culture and training, personnel security, cyber-attack detection and response.
There was a particular focus during the course on reviewing best practices for inspecting/auditing the key cyber security measures in aviation. Participants also looked at common cyber threats, and potential cyber-attack scenarios against aviation entities’ critical systems and data.