Need Help?
Aviation cybersecurity - maintaining safe, secure, and resilient operations - is a top priority for aviation.
Technology and digitization bring many advantages to aviation, but also create challenges in managing cyber vulnerabilities in this complex environment. The airline industry is an attractive target for cyber threat, from stealing value in data or money to causing disruptions and harm.
Through leadership and acting now, IATA supports shaping the nature of how the industry responds to cybersecurity challenges.
Need Help?
Industry Engagement and Collaboration
IATA supports industry-wide aviation cybersecurity through advocacy, the development of standards and guidance material, and the provision of services aimed at strengthening and improving cybersecurity maturity of the industry.
In response to industry’s needs, and as part of IATA’s broader information security strategy, several aviation cybersecurity Subject Matter Expert (SME) Groups are being established in 2026.
- Aviation Cybersecurity Industry Study Group (A-SG)
- International Cybersecurity Standards and Regulations Study Group (SR-SG)
- Cybersecurity Innovation Study Group (I-SG)
- International Aviation Cybersecurity Crisis (ICC)
These groups will provide focused forums for addressing specific cybersecurity topics, developing best practices, and supporting industry-wide implementation efforts.
To learn more please consult the IATA Fact Sheet – Aviation Cybersecurity (pdf)
Position & Discussion Papers
Publications
The IATA Aviation Cybersecurity Library
- Cybersecurity Risk Assessment Guidance Material (CRAGM): a minimal and viable cybersecurity risk assessment approach and guidelines for operators.
- Cybersecurity Supply Chain Oversight Guidance Material (CSCOGM): guidance to operators on cybersecurity best practices and aviation-specific supply chain activities.
> Purchase the IATA Aviation Cybersecurity Library
Aviation Cybersecurity Guidance Material
This document was developed in 2021 with IATA members:
- Part 1: Organization Culture and Posture
- Part 2: Aircraft operations and risk management.
> Free copy of the aviation cybersecurity guidance document
Compilation of Cybersecurity Regulations, Standards & Guidance Applicable to Civil Aviation
Overview on regulations, standards, and guidance related to aviation cybersecurity (2022).
> Compilation of Cybersecurity Regulations, Standards, Guidance for Civil Aviation (pdf)
Security Management System (SeMS) Manual
The SeMS Manual provides guidelines over a data-driven cyber security governance, management, and responsibilities; cyber security culture, awareness, and training; cyber security risk management; and risk management.
> Purchase the Security Management System (SeMS) Manual
Training
Aviation Cybersecurity
This 3-day IATA Aviation Cybersecurity Training (classroom / LIVE virtual classroom) helps build a strong aviation cybersecurity workforce and teaches the current aviation personnel how to recognize and manage cyber risks for increased vigilance and resilience.
Operational Cybersecurity in Aviation
This 3-day IATA Operational Cybersecurity in Aviation (classroom / LIVE virtual classroom) provides participants with more in-depth skills to evaluate and mitigate the risk of cyber threats and protect critical systems, information, assets, and data in aviation. It provides a perfect platform for people wishing to extend and deepen their knowledge in aviation cybersecurity.
Operational Cybersecurity in Aviation
Aviation Cybersecurity Management Diploma
Moreover, recognizing the need for strengthened best‑practice sharing, increased awareness, and enhanced education, IATA is expanding the training offering under the Aviation Cybersecurity Management Diploma, an industry‑recognized qualification designed to build expertise and leadership in aviation cybersecurity.
Find out more about the IATA Training opportunities and the upcoming sessions.
For more information
Should you wish to learn more about these initiatives or become actively involved, please contact us at avcysec@iata.org.