Aviation cybersecurity training

Lesson 1 • Core Cybersecurity Concepts

Introduces the CIA triad, threat actors, and attack vectors as applied to aviation. Provides the vocabulary needed for all later technical and policy discussions.

Lesson 2 • Aviation's Digital Transformation

Maps the shift from analogue to networked aviation systems and the attack surface this creates. Grounds all subsequent threat analysis in real operational context.

Lesson 3 • Safety-Security Convergence

Explains how cyber incidents can trigger safety consequences in aviation, blurring traditional boundaries. Prepares learners to apply safety-case thinking to cybersecurity decisions.

Lesson 4 • Regulatory and Standards Landscape

Surveys international aviation cybersecurity frameworks, standards bodies, and compliance obligations. Enables learners to map their organisation's duties to recognised requirements.

Lesson 1 • Historical Aviation Cyber Incidents

Analyses documented incidents including GPS jamming, ransomware on airline systems, and ground network breaches. Extracts lessons that inform current defensive priorities.

Lesson 2 • Cyber Threat Intelligence Fundamentals

Introduces the intelligence cycle and how to consume, analyse, and share aviation threat data. Connects intelligence outputs to proactive defence planning.

Lesson 3 • Aviation-Specific Attack Vectors

Details attack paths unique to aviation: avionics buses, ADS-B spoofing, ACARS manipulation, and airport Wi-Fi. Links each vector to operational impact scenarios.

Lesson 4 • Emerging and Future Threats

Projects threat evolution driven by AI-enabled attacks, autonomous aircraft, and urban air mobility. Prepares learners to anticipate risks beyond current operational norms.

Lesson 1 • Wireless and Radio Frequency Security

Addresses security of VHF, satellite, Wi-Fi, and AeroMACS communications used in aviation. Covers detection and mitigation of RF-based attacks.

Lesson 2 • Airborne Network Architecture

Describes aircraft network domains: avionics, cabin, and maintenance, and their interconnections. Establishes the technical baseline for airborne security controls.

Lesson 3 • Network Segmentation and Zoning

Applies defence-in-depth through VLANs, DMZs, and data diodes in aviation contexts. Demonstrates how proper zoning limits lateral movement after a breach.

Lesson 4 • Secure Remote Access and VPN

Establishes secure remote access standards for maintenance crews, vendors, and operations staff. Prevents unauthorised access while maintaining operational flexibility.

Lesson 1 • OT and ICS Fundamentals in Aviation

Distinguishes OT from IT in terms of protocols, lifecycles, and safety constraints relevant to aviation. Establishes why standard IT security tools often fail in OT environments.

Lesson 2 • Avionics System Security

Examines security of flight management, navigation, and communication avionics systems. Covers certification constraints that shape what security controls are permissible.

Lesson 3 • OT Monitoring and Anomaly Detection

Deploys passive monitoring and behavioural baselines to detect anomalies in aviation OT networks. Avoids active scanning that could disrupt safety-critical processes.

Lesson 4 • Patch and Vulnerability Management for OT

Adapts vulnerability management processes to OT environments where downtime is operationally unacceptable. Introduces compensating controls when patching is not immediately feasible.

Lesson 1 • Identity and Access Management Principles

Covers identity lifecycle, role-based access control, and federation across aviation organisations. Establishes the governance model that underpins all access decisions.

Lesson 2 • Data Classification and Handling

Establishes a data classification scheme for flight data, passenger information, and operational records. Drives appropriate encryption, retention, and sharing controls.

Lesson 3 • Encryption and Cryptographic Controls

Applies encryption to data at rest, in transit, and in avionics communications. Addresses key management challenges in distributed aviation environments.

Lesson 4 • Third-Party and Vendor Access Control

Manages access granted to MRO providers, ground handlers, and software vendors. Prevents supply chain compromise through rigorous vendor access governance.

Lesson 1 • Risk Assessment Methodologies

Compares qualitative and quantitative risk assessment approaches adapted for aviation cyber risk. Selects the appropriate method based on asset criticality and data availability.

Lesson 2 • Asset Identification and Criticality

Builds a comprehensive aviation asset inventory and assigns criticality ratings based on safety impact. Prioritises security investment towards highest-consequence assets.

Lesson 3 • Cyber Risk Governance Structures

Designs governance frameworks including risk committees, ownership assignments, and reporting lines. Embeds cybersecurity accountability into aviation organisational structures.

Lesson 4 • Continuous Risk Monitoring

Establishes key risk indicators and automated monitoring to maintain current risk posture visibility. Enables timely escalation when risk thresholds are exceeded.

Lesson 1 • Recovery and Lessons Learned

Restores aviation systems safely after a cyber incident while validating integrity before return to service. Converts incident findings into measurable security improvements.

Lesson 2 • Aviation-Specific Forensics

Applies digital forensics techniques to avionics data recorders, ground systems, and network logs. Preserves evidence integrity while maintaining operational continuity.

Lesson 3 • Incident Response Playbooks

Develops scenario-specific playbooks for ransomware, ADS-B spoofing, and insider threats in aviation. Reduces response time and decision errors during high-stress incidents.

Lesson 4 • Security Monitoring and Detection

Deploys SIEM, IDS, and aviation-specific monitoring tools to detect threats across IT and OT domains. Establishes detection coverage aligned with the highest-priority threat scenarios.

Lesson 1 • Cybersecurity Metrics and Reporting

Defines meaningful metrics that communicate security posture to technical teams and executive leadership. Drives data-driven decisions and demonstrates programme value.

Lesson 2 • Strategic Roadmap and Investment Planning

Builds a multi-year cybersecurity roadmap prioritised by risk reduction value and operational feasibility. Justifies security investment to finance and executive stakeholders.

Lesson 3 • Cybersecurity Programme Design

Structures a comprehensive aviation cybersecurity programme from policy through technical controls. Aligns programme scope with organisational size, risk appetite, and regulatory obligations.

Lesson 4 • Supply Chain Cybersecurity Management

Extends security governance to OEM suppliers, MRO providers, and software vendors across the aviation supply chain. Reduces third-party risk through contractual and technical controls.