Bottom line: The FAA's inadequate cybersecurity posture poses a significant risk to the safety and security of the global aviation industry.
What's happening: The U.S. Government Accountability Office (GAO) has identified significant cybersecurity weaknesses in the FAA's management of aviation communications, including inadequate monitoring of real-time spectrum threats, which can compromise the integrity of air traffic control systems. The FAA's vulnerability to these threats is heightened by the increasing reliance on wireless communication systems, such as Wi-Fi and satellite-based services. The FAA has not adequately addressed these weaknesses, despite recommendations from the GAO in 2020.
What to do: The FAA must develop and implement a comprehensive cybersecurity strategy to address these weaknesses, including the deployment of real-time monitoring systems to detect and respond to spectrum threats, and the development of standards for secure communication protocols.