FAA: More Than Just a Regulator
summary
FAA describes concrete moves: it treats the National Airspace System as critical infrastructure, runs internal pen testing and vulnerability triage, and pilots joint programs with TSA, DOD, CISA and ICAO to share fixes and standards. Examples include working around Space-Based ADS-B and GPS dependencies, shrinking Temporary Flight Restrictions for launches, running Cyber Rodeos and a public vulnerability disclosure dialog, and building workforce pipelines and sandboxed modernization paths so patches, segmentation and zero trust protections can be validated before operational deployment.
AI-written summary · about
chapters (17)
- 0:00FAA beyond regulation
- 2:36FAA cybersecurity mission
- 4:43FAA organizations and systems
- 8:16Global aviation ecosystem
- 11:09Safety and cybersecurity collaboration
- 12:56International cybersecurity partnerships
- 14:01FAA in space operations
- 16:33Cybersecurity Strategy alignment
- 19:21Modernization and infrastructure
- 21:28IT versus OT differences
- 25:29Safety Summit outcomes
- 27:55Aviation Cybersecurity Initiative
- 30:24Aerospace Village collaboration
- 35:49Unmanned aviation cybersecurity
- 37:17Vulnerability disclosure Q&A
- 44:27ADS-B security Q&A
- 48:25Infrastructure dependencies Q&A
related talks
16mTaking Flight – 3 Experts Discuss Aerospace Cybersecurity
51mFrom Public-Private Partnerships to Operational Collaboration
49mJoining Forces with the White Hat Researchers: Aviation Industry Lessons
28mPlanes, Ships, and Satellites: Cyber in Warfare
47mThe Cost of Innovation: Complexities of Software Regulation
43mNerds on a plane: what we can learn from the aviation industry
44mFireside chat
15mAI Security Simplified: Turning Complexity into Cohesion