EN
VI EN

← All programs

Aviation Cyber Risk Management (ACRM)
Safety transformation In person

Aviation Cyber Risk Management (ACRM)

Managing aviation cybersecurity risk is becoming an increasingly important requirement as information technology (IT) systems are bound more tightly to operations. Cybersecurity risk is therefore no longer a matter for the technology department alone; it needs to be viewed in relation to operations and safety. The Cybersecurity Risk Management in Aviation program (ACRM) raises awareness and the skills for handling cybersecurity risks that can affect aviation operations.
Delivered for: Vietnam Airlines

Program information

  • Duration: 2 days
  • Format: In person, classroom-based
  • Audience: Safety officers, IT, and stakeholders
  • Instructor: Cybersecurity expert
  • Class size: 30 participants

Why is aviation cyber risk management increasingly important?

Cybersecurity risk is increasingly affecting operational safety in a direct way. The approach therefore needs to extend beyond the information technology department alone, and to be viewed in relation to operations, safety, and coordination among the departments of the organization.
In many organizations:
  • Awareness of Cybersecurity Risks Remains Incomplete
  • Lack of a response plan when an incident occurs
  • Cybersecurity has not yet been integrated into the safety management system
  • Coordination among departments remains limited.
This may affect the operation and the safety level of the system.
The core point therefore lies not only in the ability to recognize a cybersecurity problem. The organization also needs to understand the impact of the risk on safety, have a plan for handling an incident when it occurs, and strengthen coordination among the units involved.

Objectives of the ACRM Program

The program focuses on helping participants understand and address cybersecurity risks in the context of aviation operations.
After the Program, Learners Are Equipped to:
  • Identify cybersecurity issues in aviation
  • Understand the impact of cybersecurity risks on safety
  • Know how to develop an incident response plan
  • Enhance Coordination Between Departments.
Cybersecurity is therefore approached not only as a technology issue, but also in relation to the organization's safety management activities.

Participants practice cybersecurity risk management in the aviation industry
Practical exercises and group discussion help participants engage with cybersecurity scenarios, improving the ability to respond and to coordinate among stakeholders in practice.

Program content

The Cybersecurity Risk Management in Aviation program focuses on three content areas:
Cybersecurity issues in aviation:Helps participants identify and understand cybersecurity issues in the context of aviation operations, as well as their relationship to safety.
Developing incident response options:Participants learn how to build a suitable response plan when an incident occurs, creating a foundation for the organization to be prepared rather than only reacting once a problem has arisen.
Responding to cybersecurity situations:The scenarios help place knowledge in a specific context, thereby supporting participants in understanding how to respond and coordinate when facing cybersecurity issues in practice.
The three content groups form a continuous thread: from identifying the problem and developing a response plan to responding to the situation, while placing cybersecurity risk in relation to the organization's safety activities.

Delivery approach

For cybersecurity risk, understanding the concept is not enough. The ability to respond also depends on applying knowledge to the situation and on coordination among stakeholders.
The course is therefore delivered by combining theory with practice and with simulated cybersecurity incident scenarios. Through the simulations, learners can connect knowledge with a specific context and thereby understand how to apply it in practice.

Value gained after the program

After completing the program, participants can:
  • Identify cybersecurity risks
  • Understand how to handle incidents
  • Strengthen coordination capability within the organization
  • Link cybersecurity with safety management.
The value of the program does not lie only in raising awareness of risk. More importantly, trainees understand the link between cybersecurity risk, incident handling, organizational coordination, and safety management, and thereby form a more comprehensive approach to cybersecurity in the aviation environment.

Which units is the program suitable for?

The program is suitable for:
  • Organizations with IT Systems Related to Operations
  • Safety and IT team
  • Units need to raise awareness and the capability to handle risk

Place cybersecurity risk within the overall safety system

Cybersecurity risk needs to be viewed within the safety system as a whole. When information technology is involved in operations, risk management should not separate technology issues from safety issues. The ability to identify risk, prepare response options, and coordinate among departments needs to be placed within one and the same approach.
Hung Viet supports the assessment of cybersecurity risks in the organization, the development of suitable treatment measures, and their integration into the safety management system, based on the context and actual requirements of each unit.
Talk to an expert → More programs →