North American airline enhances cyber program

The challenge

A large international airline operator in North America wanted to be prepared for the growing number of cyber attacks targeting airlines. Shareholders were concerned about the potential impact of these attacks and demanded preventive measures. The airline also faced challenges due to advanced aircraft connectivity, which introduced cybersecurity concerns that required specialized processes. Additionally, the airline had increasing business dependencies on Electronic Flight Bag (EFB), further highlighting the need for robust cybersecurity measures. Internal communication challenges between the IT and Operations departments further complicated the situation.

Boeing approach

To address these challenges, our Aviation Business Solutions IT and Cybersecurity consultants took the following approach:

• Evaluated the critical business functions for e-Enabling to identify potential vulnerabilities.
• Conducted an Aviation Cyber Security Framework Assessment to assess the airline's current security measures and identify areas for improvement.
• Evaluated the incident response and recovery plan by function to ensure effective response to cybersecurity incidents.
• Delivered multiple cybersecurity "attack and defend" simulations tailored to specific business functions to test the airline's preparedness and identify areas for improvement.
• Completed an industry-standard risk assessment to identify potential risks and vulnerabilities.
• Provided near-term and long-term recommendations to enhance the airline's cybersecurity posture.
• Completed a cyber gap analysis to identify any gaps in the airline's cybersecurity measures.
• Conducted a return on security investment analysis to assess the effectiveness and cost-efficiency of the implemented security measures.

Results

The implementation of Boeing's cybersecurity program yielded the following results:

Overall, Boeing's comprehensive approach to airline cyber security helped the North American operator mitigate risks, enhance security measures, and ensure the safety and reliability of its operations in the face of growing cyber threats.