Introduction
The programme “Developing Aviation Cybersecurity Procedures” develops professional practice in Aviation. It connects the subject with workplace challenges by examining existing evidence and practices and choosing methods appropriate to the organization and its available resources.
The learning progresses from information protection and incident response to maintenance planning, work orders, and execution measurement, with practical work on aviation operations, safety management, and service quality, procedure analysis and work simplification, occupational safety, risk assessment, and prevention. Participants prepare outputs to support workplace application and review the quality and results of implementation.
Learning objectives
- Assess information risks and select suitable preventive controls and a response plan in an application related to “Developing Aviation Cybersecurity Procedures”.
- Analyze an aviation or airport process and connect its safety to coordination, data, and controls.
- Redesign a procedure to reduce delays and rework while maintaining controls.
- Prepare a work risk assessment and prevention and response plan based on the hierarchy of controls.
- Build a maintenance plan and work order connecting asset criticality, resources, and documentation.
Learning areas
1. Information Protection and Incident Response
- Inventory assets, data, accounts, services, and their interdependencies, classifying sensitivity, criticality, and accountable owners.
- Analyze threats, vulnerabilities, and potential misuse, and identify necessary controls according to risks, resources, and applicable law.
- Review identity and access management, updates, backups, and logs, and identify evidence for verifying control effectiveness.
- Build a process for incident detection, classification, containment, escalation, and evidence preservation, specifying authorized internal and external communication.
- Conduct an exercise using authorized training data and an authorized training environment, and evaluate response and recovery times, lessons learned, and a gap remediation plan. The application examines a case related to “Developing Aviation Cybersecurity Procedures”.
2. Aviation Operations, Safety Management, and Service Quality
- Define the operation type, participants, and responsibilities of the operator, airport, maintenance, and ground services, referring to the relevant regulatory framework.
- Analyze work handovers, timing, information, and human factors, identifying error and coordination points affecting operational safety.
- Apply the concepts of safety policy, risk management, safety assurance, and safety promotion to a training case relevant to the subject.
- Select data and indicators for monitoring reliability, compliance, and service quality, checking data confidentiality and the validity of trend interpretations.
- Prepare an improvement or response scenario at the planning and simulation level, following operating manuals and recognizing that training does not authorize technical work.
3. Procedure Analysis and Work Simplification
- Define the procedure's start, end, owner, inputs, and outputs, and collect data on processing time, waiting, and rework.
- Map the actual workflow between roles, identifying approvals, handovers, bottlenecks, and duplicate data entry.
- Analyze the value added by each step and the controls it provides, and propose combining, removing, or running steps in parallel with reasons for the choice.
- Document the improved procedure with clear authorities, forms, timelines, and standards, and review its effects on beneficiaries and delivery teams.
- Test the procedure on a limited case, measure time, errors, and output quality, and document adjustments and the rollout plan.
4. Occupational Safety, Risk Assessment, and Prevention
- Identify task hazards, exposed people, and site conditions, gathering information from observations, records, and equipment instructions.
- Estimate the risk level and select appropriate controls from elimination, substitution, engineering controls, administrative controls, and personal protective equipment.
- Review work procedures, permits, isolation, communication, and supervision according to the task, and define responsibility for stopping unsafe work.
- Analyze an incident or near miss using facts and evidence, examining systemic causes and failed controls beyond blaming individuals.
- Prepare a tabletop emergency exercise and an inspection, awareness, and follow-up plan, assigning field execution to qualified personnel under approved procedures.
5. Maintenance Planning, Work Orders, and Execution Measurement
- Inventory assets and build a hierarchy, coding system, technical data, and maintenance history, classifying criticality by safety, service, and cost.
- Select a mix of preventive, condition-based, and corrective maintenance, connecting the decision to failure modes, data, and manufacturer instructions.
- Plan the work order's scope, resources, materials, time, isolation, and permits, and define readiness conditions before scheduling.
- Organize schedules, shutdowns, and equipment handovers between operations and maintenance, recording actual work, causes, parts, and time.
- Analyze backlog, recurrence, plan compliance, and reliability, and propose documented adjustments to maintenance tasks and their frequency.
Practical outputs
- An information asset and risk register, response plan, and recovery test.
- An aviation process map, risk register, and indicator and follow-up plan.
- An improved procedure map, service profile, and acceptance criteria for implementation.
- A task risk assessment and an inspection, training, and response plan.
- A maintenance plan, work schedule, work order card, and monitoring indicators.
Who should attend
- Engineers, technicians, supervisors and operations staff whose work relates to the programme subject.
- Managers and teams working in aviation, according to their practical responsibilities.
- Professionals responsible for applying the outputs of “Developing Aviation Cybersecurity Procedures” within their organizations.
Prerequisites
- Working familiarity with the programme field and the ability to discuss a professional case or challenge.
- Confirm the suitability of your experience and any specialist prerequisites with the Union before participation.
Conclusion
The programme “Developing Aviation Cybersecurity Procedures” brings together concepts, case review and a practical application. Participants prepare steps that can be adapted to their responsibilities and organizational resources, with an indicator to follow application and review results after returning to work.
Participation arrangements and any special requests are specified in the confirmation issued by the Union.