India stands at 69.7 million passengers in 2023-24, recording 22.5 per cent year-on-year growth. This surge in air traffic calls for the need to adopt digital advancements to enhance efficiency progressively. As integration of technology in various areas requires data sharing there may be potential risks of severe cyber threats.
This has led organisations like IATA and ICAO to introduce aviation cybersecurity strategies. Many regulatory authorities are also developing aviation safety plans as a strategic priority. For instance, the European Union Aviation Safety Agency (EASA), in its European Plan for Aviation Safety (EPAS), has focused on pilot programmes and training to counter cybersecurity threats.
In India, the Bureau of Civil Aviation Security (BCAS) has also launched a Cyber Crisis Management Plan (CCMP) to address cyber-attack scenarios. It has also issued specific guidelines for the protection of sensitive data. Besides accessing passenger information, cyber-attacks can also seriously affect airline operations. Hackers can take over flight control systems, manipulate operations, disrupt schedules, cause flight cancellations, and even sabotage the entire aviation system.
“The global aviation sector functions based on seamlessly efficient systems and data exchange that transcends borders. For enhanced cybersecurity, this global framework must be strengthened by coordinated efforts of various stakeholders. A comprehensive approach focusing on collaboration at the national and international levels could help tackle cybersecurity threats more effectively,” says Jaideep Mirchandani, the group chairman of global aviation major Sky One.
Mirchandani believes that one of the focus areas of the cybersecurity framework could be formulating policies and procedures to monitor and analyse critical systems constantly.
“Through constant monitoring, operators can quickly detect potential issues, mitigate risks, and respond promptly to any security threats, ensuring the protection and stability of systems. A network segmentation policy could also limit the potential damage of a cyberattack by preventing it from spreading across the entire network. Airlines should also strictly implement access control measures to prevent unauthorised persons from stealing data or gaining control over systems,” adds Mirchandani.
He says that cybersecurity policies should be formulated with great technical expertise and farsightedness because any inadequacies could lead to significant consequences.
“With every new technological advancement, cyber attackers also find new ways to exploit them for malicious purposes. Hence, there is a need for continuous adjustment and responsiveness to new challenges and threats. Cooperation and coordination between various regional regulatory bodies, governments, air carriers, technical companies, and cybersecurity experts is crucial. By working together and pooling resources, the stakeholders across the world can devise a cohesive cybersecurity strategy,” concludes Mirchandani.
