Need Help?

cyber.jpg

​Aviation cybersecurity - maintaining safe, secure, and resilient operations - is a top priority for aviation.

Technology and digitization bring many advantages to aviation, but also create challenges in managing cyber vulnerabilities in this complex environment. The airline industry is an attractive target for cyber threat, from stealing value in data or money to causing disruptions and harm.

Through leadership and acting now, IATA supports shaping the nature of how the industry responds to cybersecurity challenges.

Need Help?

Industry Engagement and Collaboration

IATA supports industry-wide aviation cybersecurity through advocacy, the development of standards and guidance material, and the provision of services aimed at strengthening and improving cybersecurity maturity of the industry.

In response to industry’s needs, and as part of IATA’s broader information security strategy, several aviation cybersecurity Subject Matter Expert (SME) Groups are being established in 2026. 

  • Aviation Cybersecurity Industry Study Group (A-SG)
  • International Cybersecurity Standards and Regulations Study Group (SR-SG)
  • Cybersecurity Innovation Study Group (I-SG)
  • International Aviation Cybersecurity Crisis (ICC)

These groups will provide focused forums for addressing specific cybersecurity topics, developing best practices, and supporting industry-wide implementation efforts.

To learn more please consult the IATA Fact Sheet – Aviation Cybersecurity (pdf)

In addition, to support the exchange of knowledge, expertise, and best practices, IATA has established several collaborative platforms for the aviation cybersecurity community. Among them, the  Cybersecurity Strategic Partnership Program serves as a key forum for engagement between aviation stakeholders, cybersecurity organizations, and Subject Matter Experts (SMEs). Through this initiative, participants can collaborate on emerging challenges, share insights, contribute to industry guidance, and help advance cybersecurity across the global aviation ecosystem.

Position & Discussion Papers

Publications

The IATA Aviation Cybersecurity Library

  • Cybersecurity Risk Assessment Guidance Material (CRAGM): a minimal and viable cybersecurity risk assessment approach and guidelines for operators.
  • Cybersecurity Supply Chain Oversight Guidance Material (CSCOGM): guidance to operators on cybersecurity best practices and aviation-specific supply chain activities.

Purchase the IATA Aviation Cybersecurity Library

Aviation Cybersecurity Guidance Material

This document was developed in 2021 with IATA members: 

  • Part 1: Organization Culture and Posture
  • Part 2: Aircraft operations and risk management.

> Free copy of the aviation cybersecurity guidance document

Compilation of Cybersecurity Regulations, Standards & Guidance Applicable to Civil Aviation

Overview on regulations, standards, and guidance related to aviation cybersecurity (2022).

Compilation of Cybersecurity Regulations, Standards, Guidance for Civil Aviation (pdf) 

Security Management System (SeMS) Manual 

The SeMS Manual provides guidelines over a data-driven cyber security governance, management, and responsibilities; cyber security culture, awareness, and training; cyber security risk management; and risk management.
Purchase the Security Management System (SeMS) Manual 

Training

Aviation Cybersecurity

This 3-day IATA Aviation Cybersecurity Training (classroom / LIVE virtual classroom) helps build a strong aviation cybersecurity workforce and teaches the current aviation personnel how to recognize and manage cyber risks for increased vigilance and resilience.

Operational Cybersecurity in Aviation

This 3-day IATA Operational Cybersecurity in Aviation (classroom / LIVE virtual classroom) provides participants with more in-depth skills to evaluate and mitigate the risk of cyber threats and protect critical systems, information, assets, and data in aviation. It provides a perfect platform for people wishing to extend and deepen their knowledge in aviation cybersecurity.

Operational Cybersecurity in Aviation

This 3-day IATA Aviation Cybersecurity Audit and Inspection (classroom / LIVE virtual classroom) course provides participants with industry-wide skills to audit and inspect aviation cybersecurity policies and processes. It provides practical techniques to obtain and assess evidence, document findings, and prepare audit reports in compliance with regulations and industry standards. It provides a perfect platform for people wishing to extend and deepen their knowledge in aviation cybersecurity assurance and compliance.

Aviation Cybersecurity Management Diploma

Moreover, recognizing the need for strengthened best‑practice sharing, increased awareness, and enhanced education, IATA is expanding the training offering under the Aviation Cybersecurity Management Diploma, an industry‑recognized qualification designed to build expertise and leadership in aviation cybersecurity.


Find out more about the IATA Training opportunities and the upcoming sessions.

For more information

Should you wish to learn more about these initiatives or become actively involved, please contact us at avcysec@iata.org.