{"id":35156,"date":"2019-04-01T15:45:32","date_gmt":"2019-04-01T14:45:32","guid":{"rendered":"http:\/\/www.intelligentcio.com\/me\/?p=35156"},"modified":"2023-10-02T10:59:22","modified_gmt":"2023-10-02T09:59:22","slug":"sita-we-need-complete-confidence-in-data-security-for-aviation","status":"publish","type":"post","link":"https:\/\/www.intelligentcio.com\/me\/2019\/04\/01\/sita-we-need-complete-confidence-in-data-security-for-aviation\/","title":{"rendered":"SITA: We need complete confidence in data security for aviation"},"content":{"rendered":"<p><em><strong><a href=\"https:\/\/www.sita.aero\/resources\/blog\/authors\/tim-strong\">Tim Strong<\/a>\u00a0,\u00a0Senior Security Manager for <a href=\"https:\/\/www.sita.aero\/\">SITA<\/a> Global Services, says with a growth in information and increasing security threats the aviation industry has a growing reliance on data. \u00a0<\/strong><\/em><\/p>\n<p>Information security and air transport are inextricably linked. That is not only because of the mission-critical nature of much of the industry\u2019s data but also because of air transport\u2019s growing dependency on data, sharing and new digital ways of working. It\u2019s why\u00a0ISO27K is a critical standard\u00a0for a global IT provider to achieve.<\/p>\n<p>With aviation customers in every corner of the globe, SITA is only too aware that our industry today is not just about sharing network, infrastructure, platforms and technology. It\u2019s about sharing data and know-how. Data has the potential to add more and more value at every interchange between the airlines, airports, ground handlers, border agencies and other stakeholders who make the journey happen.<\/p>\n<p>We\u2019re evolving our expertise with data-driven services, such as passenger flow management, flight prediction and operational business intelligence that rely heavily on data from various sources. Secure data sharing is crucial to the critical focus we\u2019re placing on emerging \u2018plug and play\u2019 platforms that unite many stakeholders, as we strive to enable greater collaboration and secure data sharing across air transport operations.<\/p>\n<p><strong>ISO27K \u2013 the vital foundation for a data-driven air transport industry<\/strong><\/p>\n<p>It\u2019s also why it\u2019s nothing less than vital to have ISO27K security standard certification for our internal management processes, which in turn provide services to our customers the world over. As a global air transport IT provider, we regard information security management as a given, and we work hard to maintain our capabilities.<\/p>\n<p><strong>Operational excellence and the SITA Command Centers<\/strong><\/p>\n<p>ISO27K is an integral part of SITA achieving operational excellence, which we work towards in many areas within our organisation, for the benefit of customers. The ISO27K certification of our security processes provided by the SITA Command Centers (SCC) are also a key component of our enhanced security programme, given the intimate nature of the support services SITA provides to its customers.<\/p>\n<p>The SCCs operate 24\/7 using a follow-the-sun model and are an integral part of the services we provide to customers. The SCCs provide proactive management of applications and infrastructure to SITA\u2019s customers globally. This includes airlines, airports and government bodies. Information security management is paramount.<\/p>\n<p><strong>One of the most globally recognised and accepted frameworks<\/strong><\/p>\n<p>The ISO standards provide one of the most globally recognised and accepted frameworks for the implementation of information security management and best practices. ISO27K underscores an accredited level of security posture, addressing the quality of the Information Security Programme together with the robustness of controls to mitigate the risk of cyberattacks.<\/p>\n<p>ISO27K gives prominence to the fact that a security programme is well managed by specifying controls on risk, audit, executive management support and performance indicators. There are over 200 security related controls to the IS27K certification which provide both auditable and certifiable controls to ensure security quality.<\/p>\n<p><strong>The importance of ISO27K to air transport<\/strong><\/p>\n<p>The European Aviation Safety Agency (EASA), for example, estimates there are 1,000 cyberattacks on aviation systems each month. With a growth in data and increasing security threats, ISO27K in the air transport industry is now crucial in providing a common frame of reference for information security.<\/p>\n<p>As a standard, ISO27K is well suited to ensuring the interconnected air transport industry ecosystem is adequately protected. Importantly, it covers a risk-based approach to implementing security and encompasses protecting information assets which is critical in the digital space we now operate in. Following a defined structured approach \u2013 with international recognition from the ISO \u2013 shows that an information security management system is truly fit for purpose.<\/p>\n<p><strong>Commitment to information security<\/strong><\/p>\n<p>At the same time, it demonstrates our commitment to information security, highlighting the fact that appropriate processes and procedures for information security management have been defined, documented and embedded in SITA\u2019s practice and policies.<\/p>\n<p>Importantly, we also help our airport customers achieve certification. SITA\u2019s Airport Solutions Services for Changi Airport Group (CAG), for example, have met the ISO\/IEC 27001:2013 certification. This specifies the requirements for establishing, implementing, maintaining and continually improving a security management system. It also covers the assessment and analysis of information security risks.<\/p>\n<p>So it goes without saying that having been granted certification for SITA\u2019s global IT Command Centers \u2013 which are critical to our airline, airport and other customers\u2019 mission critical operations across the globe \u2013 we are proud to demonstrably show our commitment to data security. In an increasing data-driven digital air transport industry, we fully understand its significance for our many customers.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Tim Strong\u00a0,\u00a0Senior Security Manager for SITA Global Services, says with a growth in information and increasing security threats the aviation industry has a growing reliance on data. \u00a0 Information security and air transport are inextricably linked. That is not only because of the mission-critical nature of much of the industry\u2019s data but also because of [&hellip;]<\/p>\n","protected":false},"author":18,"featured_media":35157,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[512,6,15963],"tags":[8515,935,1530,1544,5831,8520,6267,8519],"class_list":["post-35156","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aviation","category-insights","category-kuwait","tag-air-transport","tag-aviation","tag-cybersecurity","tag-data","tag-information-security","tag-iso27k","tag-sita","tag-tim-strong"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/35156","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/users\/18"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/comments?post=35156"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/35156\/revisions"}],"predecessor-version":[{"id":35158,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/posts\/35156\/revisions\/35158"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media\/35157"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/media?parent=35156"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/categories?post=35156"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/me\/wp-json\/wp\/v2\/tags?post=35156"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}