Scene 1

Scene 2

AVIATION SECURITY CULTURE AND AWARENESS PROGRAM

PROGRAM OBJECTIVES To ensure the relevant personnel at airports are aware of threats to civil aviation, insider threats and implement the aviation security preventive and reporting measures through the application of the relevant competencies required for aviation personnel at airports.

Scene 3

Scene 4

1. Threat to Aviation Security 2. Insider Threat 3. Security Culture and Awareness 4.  Basic  B ehaviour detection methods.

Scene 5

Scene 6

Module Objectives Explain the importance of understanding the threat   Describe the nature of the threat to civil aviation Acts of unlawful interference Characteristics of offenders

Scene 7

Nature Of Threats In Aviation International Civil Aviation Organisation (ICAO) describes the Nature of the Threat to Civil Aviation as: Sabotage of aircraft Sabotage of airport Hijacking of aircraft on the ground or in flight, and Armed attacks on/off airport facilities

Scene 8

Understanding threats to Civil Aviation It is  i mpossible  to put in place 100% security to counter every threat By identifying level of existing threat it is possible to develop counter-measures under normal situations Security measures must be flexible to meet changes in threat

Scene 9

Individual Offenders Characters Criminals, refugees, psychotics Limited resources Limited technical expertise Unpredictable Objective Monetary gain, criminal Personal Political asylum Group Offenders Characters Considerable resources Extensive technical expertise Special training Objective Political

Scene 10

Threat to Aviation Security  Hijacking Techniques

1. Smuggling of weapons onboard Concealment in hand baggage Collusion with airport or airline staff Armed assault 2. Terrorist groups Organized with high visibility Command through flight deck  Defined objectives 3. Individuals Less organized Confused objectives/Unpredictable  behaviour

Scene 11

Sabotage General definition: An act or omission, intended to cause malicious or wanton destruction of property, endangering or resulting in unlawful interference with international civil aviation and its facilities

Scene 12

Threat to Aviation Security Sabotage techniques

1 .  Devices Explosive Incendiary 2.  Triggers Timers Pressure-sensitive devices 3.  Means Devices in checked baggage Collusion with airport or airline employees Subterfuge through unsuspecting dupe Suicide bombers

Scene 13

Target for Sabotage Airport Vulnerable Points  Runways Passenger terminals and vital terminal services Navigational aids Electrical supplies Air traffic control installations Aviation fuel installations Rescue and firefighting systems

Scene 14

Other Attacks at Airports Aim to cause maximum casualties Result in dramatic impact on aviation and reduced confidence in security

Scene 15

Module Summary Understanding the threat to civil aviation is essential for developing flexible counter-measures against the changing levels and nature of existing threat The two main categories of offenders are hijackers and saboteurs in the form of individuals or groups

Scene 16

Scene 17

Scene 18

Module Objectives Define Insider Threat Understand  Types of insider Threats SPOT and Response to insider threats STOP and Reporting Insider Threats List who is an insider

Scene 19

Insider Threat is defined as: An insider threat is a malicious threat to an organization that comes from people within the organization, such as employees, former employees, contractors or business associates, who have inside information concerning the organization's security practices, data and computer systems.

Scene 20

WHO IS AN INSIDER? •  Airport support staff • Airport management and administration • Contract security staff • Airport vendors • Flight crews • Airline ticketing agents • Aircraft Mechanics • Baggage Handlers • Contract aircraft custodial crews • Catering staff • Law Enforcement • Customs Agents • Security Screening Personnel • Air Traffic Controllers • Fixed Base Operators • Former employees

Scene 21

I nsider threats  can take a wide variety of forms. They can be the sharing of sensitive procedures, attacks on information systems, smuggling goods or people into security restricted areas. If there is a way to cause damage or extract personal or financial gain, there is a vulnerability to an  insider threat .

Scene 22

TYPES OF INSIDERS Malicious insiders  intentionally use their access to data to harm the organisation  Inside agents,  malicious insiders recruited by external parties to facilitate  ulawful  act of interference in aviation Disgruntled employees,  emotional attackers who seek revenge for perceived wrong Careless workers  pose an unintentional threat due to human error or security violation Third parties,  third party people who have access and misuse their access and compromise security in aviation seurity

Scene 23

INSIDER COUNTERMEARSURES Identify an insider at the earliest stage and to stop or deter the insider.  SPOT measures: measures aim to identify behaviors or activities of concern, and to identify any changing or suspicious behavior patterns that might help to detect a potential insider.  STOP measures: should aim to prevent or deter an insider from exploiting, or intending to exploit their role for unauthorized purposes.

Scene 24

IGNORANCE Lack of awareness of  policies and procedures creates risk Employees being uninformed of polices and procedures is a challenge, particularly when dealing with emerging threats as well as new employees COMPLACENCY Lax approach  to policies, procedures, and potential security risks Violators often assume that their specific  behavior  doesn’t have a noticeable impact or that no one is monitoring their  behavior MALICE An act that is malicious and intentional  in nature to cause damage 6 Insiders typically develop a plan in advance that someone within the organization may detect

Scene 25

Scene 26

Employee Lifecycle Management  Access Controls  Training and Awareness  Policies and Procedures

Scene 27

INSIDER COUNTERMEARSURES EMPLOYEE LIFECYCLE Hiring Criteria: qualifications and requirements for each position Vetting: criminal history and employment background checks for permanent and temporary employees Recurring vetting: background checks at periodic intervals throughout the employee’s tenure

Scene 28

INSIDER COUNTERMEARSURES ACCESS CONTROLS Access Control Systems:  Airport Security Officers, proximity cards, biometrics, PIN codes, lock & key, stop lists, vehicle identification   Terminal Access Points:  Baggage belt doors, sterile area boarding, gates, employee screening checkpoint, fire/emergency doors, operational/maintenance doors  Airside Access Points:  - Emergency crash gate, pedestrian and vehicle entrances

Scene 29

STANDARD 4.2.1.  Each contracting state shall ensure that the access to airside areas at airports serving civil aviation is controlled in order to prevent unauthorized entry. STANDARD 4.2.3.  Each contracting state shall ensure that identification systems are established in respect of persons and vehicles in order to prevent unauthorized access to airside areas and security restricted areas. Identity shall be verified at designated checkpoints before access is allowed to airside areas and security restricted areas. STANDARD 4.2.7.  Each Contracting State shall ensure that vehicles being granted access to security restricted areas, together with items contained within them, are subject to screening or other appropriate security controls in accordance with a risk assessment carried out by the relevant national authorities.

Scene 30

INSIDER COUNTERMEARSURES TRAINING AND AWARENESS Training : initial and recurrent insider thread training for all those with access   Behavioral  Indicators : employees recognize and report warning signs  Monitoring : anomalous  behavior  detection and video surveillance (CCTV)   Reporting : programs should encourage employee participation in mitigating insider risk, provide anonymous reporting options, and clearly identify methods to notify supervisors, airport operations staff, and security of suspicious activity

Scene 31

INSIDER COUNTERMEARSURES POLICIES AND PROCEDURES Permit display according to regulations in the security restricted area  Maintain strict control and accounting system for permits  Establish and maintain employee permit termination procedures  Ensure separation of duties (dividing functions so people do not complete duties alone)  Tiered access (access only what is necessary for the job) Include unpredictability in deployment of countermeasures  Document and consistently enforce policies and controls

Scene 32

Module Summary Risk is a factor of Threat, Vulnerability, and Consequence   Insiders are able to use their unique access and knowledge to commit a malicious, complacent, or ignorant act   Insider threat exists in all organizations with employees and contractors  Countermeasures are policies, programs, or tools that helps prevent, detect or mitigate insider threat

Scene 33

Scene 34

Scene 35

ON ON COMPLETION OF THE MODULE YOU WILL BE ABLE TO: EXPLAIN EXPLAIN SECURITY CULTURE UNDERSTAND UNDERSTAND HOW ORGANISATIONS BUILD SECURITY CULTURE WITHING THE ORGANISATION UNDERSTAND UNDERSTAND AWARENESS OF CYBER SECURITY GOVERNANCE HAVE HAVE AWARENESS OF CYBER SECURITY GOVERNANCE IDENTIFY IDENTIFY SUSPICIOUS OR UNUSUAL BEHAVIOUR AT AVIATION PREMISES

Scene 36

Security culture   refers to the set of values, shared by everyone in an organisation, that determine how people are expected to think about and approach security. Getting security culture right will help develop a security conscious workforce, and promote the desired security behaviours you want from staff.

Scene 37

Scene 38

BULDING SECURITY CULTURE IN THE ORGANISATION

Background pattern

Description automatically generated

Employ Employ leadership-driven cyber governance. Document Clearly document security policies, processes and procedures. Communicate Communicate security policies, processes and procedures Cultivate Cultivate Security Awareness - Train employees. Encourage Encourage people to report incidents.

Scene 39

ORGQNISATIONAL
TECHNICAL
PHYSICAL
Securfri
Pdicy
Organisational
kinty
ASSdCBstftcatå1 Auss Control
" Can
Complianø
Personnel Physe & Environmental
Seurty
Comuniætmsand Business Continuity
Optauons Mgmt Mgmt

IT security governance  is the system by which an organization directs and controls  IT security  (adapted from ISO 38500).   Governance  specifies the accountability  framework  and provides oversight to ensure that risks are adequately mitigated, while  management  ensures that controls are implemented to mitigate risks

Scene 40

CYBER SECURITY
Top Cyber Security Initiatives
Training And
Awareness
Risk Assessments
Monitoring/ Security
Operations Centers
(Socs)
Metrics To Measure
And Report
Effectiveness
Governance
(Roles, Reporting
Structures, And
Directives)
jtjtjtjtj
Regulatory And
Legislative Compliance
Operationalizing
Cybersecurity
Identity And Access
Management

Scene 41

DOCUMENTING SECURITY POLICIES, PROCESSES AND PROCEDURES Each  organisation   its own challenges and policy requirements

If organisations elects to follow ISO 27001’s advice, organisational  information security policy will:  Provide information security direction for your organisation;  Include information security objectives;  Include information on how you will meet business, contractual, legal or regulatory requirements; and  Contain a commitment to continually improve your ISMS (information security management system)

Scene 42

Scene 43

Scene 44

ON COMPLETION OF THE MODULE YOU WILL BE ABLE TO: EXPLAIN SECURITY AWARENESS  UNDERSTAND AWARENESS OF CYBER SECURITY GOVERNANCE HAVE AWARENESS OF CYBER SECURITY GOVERNANCE IDENTIFY SUSPICIOUS OR UNUSUAL BEHAVIOUR AT AVIATION PREMISES

Scene 45

Security awareness  is the knowledge and attitude members of an organization possess regarding the protection of the physical, and especially informational, assets of that organization.

Scene 46

When  organisations's  employees are  cyber security aware , it means they understand what  cyber  threats are, the potential impact a  cyber -attack will have on their business and the steps required to reduce risk and prevent  cyber -crime infiltrating their online workspace

Scene 47

There are many benefits of security awareness training, including:  Protecting Your Company's Assets from act of unlawful interference  Saving Money.   Helping Employees with Both Business and Personal  Security  Saving Time

Scene 48

GOOD SECURITY IS EVERYONE’s RESPONSIBILITY YOU ARE THE EYES AND EARS OF SECURITY

Scene 49

PROTECT AND REPORT LOSS USE ONLY AS AUTHORISED REPORT UNAUTHORISED PERSONS DO NOT LEND OR MISUSE LOOK OUT FOR TAIL GATING

Scene 50

Unattended Vehicles Unmanned access points and report immediately Protect organisations information, documents and electronic data  Expose of uniforms in line with organisational uniform policy. Know workplace security procedures Know the security incident reporting procedure

PowerPoint Presentation

Scene 1 (0s)

Scene 2 (7s)

Scene 3 (23s)

Scene 4 (29s)

Scene 5 (42s)

Scene 6 (48s)

Scene 7 (1m 0s)

Scene 8 (1m 16s)

Scene 9 (1m 32s)

Scene 10 (1m 46s)

Scene 11 (2m 2s)

Scene 12 (2m 16s)

Scene 13 (2m 30s)

Scene 14 (2m 42s)

Scene 15 (2m 54s)

Scene 16 (3m 9s)

Scene 17 (3m 21s)

Scene 18 (3m 27s)

Scene 19 (3m 39s)

Scene 20 (3m 56s)

Scene 21 (4m 12s)

Scene 22 (4m 30s)

Scene 23 (4m 52s)

Scene 24 (5m 14s)

Scene 25 (5m 38s)

Scene 26 (5m 59s)

Scene 27 (6m 8s)

Scene 28 (6m 22s)

Scene 29 (6m 42s)

Scene 30 (7m 18s)

Scene 31 (7m 39s)

Scene 32 (7m 58s)

Scene 33 (8m 17s)

Scene 34 (8m 29s)

Scene 35 (8m 36s)

Scene 36 (8m 51s)

Scene 37 (9m 7s)

Scene 38 (9m 23s)

Scene 39 (9m 39s)

Scene 40 (9m 57s)

Scene 41 (10m 7s)

Scene 42 (10m 28s)

Scene 43 (12m 47s)

Scene 44 (12m 54s)

Scene 45 (13m 7s)

Scene 46 (13m 19s)

Scene 47 (13m 34s)

Scene 48 (13m 46s)

Scene 49 (13m 56s)

Scene 50 (14m 7s)