Resolving the Rising Number of Cyberattacks in the Aviation Industry

As a Deputy Director for aviation security and facilitation, Sylvain Lefoyer is responsible for developing Aviation Security, Cyber Security, Border Security, and Facilitation policies, Standards, and Recommended Practices (SARPs). In addition, he looks after conducting audits of Member States’ aviation security and border security activities, assisting States in addressing deficiencies highlighted by needs assessments and audits. 

Before ICAO, Sylvain’s career spanned more than 25 years in the French Ministry of Transport, covering transport safety and security in maritime navigation, ground transportation, and air navigation.

How have you seen the industry has evolved over the years? What are the latest trends that you are currently witnessing in space today?

I believe that in recent years, cyber security has seen the most advancement in terms of aviation security and facilitation. We have been organizing and managing a global cybersecurity strategy for civil aviation since 2017. In the transport bureau, we are also in charge of the portfolio for the facilitation of cyber security. We just established an expert panel that includes the council, the governing body, and its committees that make decisions, provide orientations, and approve standards. However, these standards are created by teams of professionals that we refer to as panels. 

In order to inform governments about the issue of cyber security in aviation and to assist them in organizing themselves to confront it, we are establishing a new governance framework on the subject.

"I think we need to stay focused and conscious because the system from which we emerged was quite walled off and operated like a silo, making it very challenging to infiltrate"

What are the challenges that companies face while implementing these solutions, especially when it comes to cyber securities?

The management of compliance in the field of cyber security is one of the major difficulties. Companies face challenges in integrating a vast array of regulatory frameworks to manage cyber security and having the capacity to respond to each framework for limitations imposed by insurance companies. 

With a group of specialists, we examine a wide range of topics relating to cyber security. Because additional infrastructure is crucial, we have national agencies in charge of information security that also bring some regulatory framework. It must be safeguarded and is subject to certain national legal requirements. We make an effort to keep the cage from getting even thicker. We seek to assist states in locating preexisting regulatory frameworks and adapting them to the unique requirements of civil aviation.

Where do you see the industry going when it comes to processes or technology?

We have previously observed that the industry-wide digitization trend is rising due to increasingly connected technology, the internet, and wi-fi. Thus, vulnerability increases as you become more digital and connected. In order to ensure that we do everything possible to secure aviation from cyber dangers, the industry state and ICAO are attempting to collaborate. We are aware that attacks have already begun and will do so in the future. Therefore, since we are aware that it is impossible to dodge every attack, the goal is not to do so. However, to be able to repel probable successful attacks, it’s a must to create a tough aviation system. As a result, we are operating at several levels to offer the right international air law instruments and standards for states to organize themselves. We are working on the regulatory framework at the policy level. Additionally, we are developing concepts that will assist the air transportation system, specifically the air navigation services, the airport, and the airlines, in connecting and exchanging information and data in a reliable and secure manner. We refer to it as the "trust framework" at the standard technical level.

What would be a single piece of advice that you want to impart to your fellow peers or colleagues in aviation space? 

I think we need to stay focused and conscious because the system from which we emerged was quite walled off and operated like a silo, making it very challenging to infiltrate. And we continued to move toward a more integrated system. Therefore, we must be aware that risks exist, attacks occur frequently, and they will continue to increase. My advice is to remain vigilant and ensure that you raise awareness among your C-level personnel, technical people, and every member of staff to develop and maintain cyber security culture that will help address this new era of civil aviation.