{ "docId": "019dd923-5ca1-7489-b639-b59a862e8cdb", "docSlug": "531a385a82e8bd6c", "documentTitle": "Airport Cyber Security Report", "authorId": "PAConsulting", "authorName": "PA Consulting", "documentKindSlug": "consulting-deck", "documentKindLabel": "Consulting deck", "sourceTypeSlug": "strategy_consulting", "sourceTypeLabel": "Strategy consulting", "presentationDate": null, "orientation": "portrait", "aspectRatio": 0.707, "pageNumber": 11, "pageCount": 24, "prevPage": 10, "nextPage": 12, "slideType": "industry_trends", "function": "summarize", "density": "overcrowded", "nDataPoints": 0, "notes": "The slide is part of a larger report; it covers points 4 and 5 of a 7-point list.", "elementsJson": [ "paragraph", "photo" ], "metadataConfidence": 0.9, "imagePath": null, "slideHref": "/slides/019dd923-5ca1-7489-b639-b59a862e8cdb/11", "deckHref": "/decks/019dd923-5ca1-7489-b639-b59a862e8cdb", "deckJsonHref": "/decks/019dd923-5ca1-7489-b639-b59a862e8cdb.json", "deckAnchorHref": "/decks/019dd923-5ca1-7489-b639-b59a862e8cdb#slide-11", "components": [ { "bbox": { "h": 0.01, "w": 0.2, "x": 0.1, "y": 0.97 }, "kind": "disclaimer", "text": "© PA Knowledge Ltd | April 2018", "attrs": null, "subkind": null, "toolName": null, "toolSlug": null, "confidence": null, "componentId": "f2c035f6-41bb-4f51-b163-1dc706fc6fce", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.2, "w": 1, "x": 0, "y": 0 }, "kind": "image", "text": null, "attrs": null, "subkind": "photo", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "15065037-257e-4f2d-9c58-9d38253e3c06", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.2, "w": 1, "x": 0, "y": 0.458 }, "kind": "image", "text": null, "attrs": null, "subkind": "photo", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "cd22c336-7fd9-4e20-9861-be92487973a2", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.25, "w": 0.82, "x": 0.1, "y": 0.72 }, "kind": "paragraph", "text": "Some airports generate significant income from non-aviation sources, such as retail concessions. Traditionally, IT systems have been isolated from OT systems. However, the integration of the two can bring significant efficiencies, allowing real-time data gathering, processing and decision-making. The ability to constantly monitor a system's health, track operational processes, receive instantaneous information and exchange data with IT systems opens a whole new world of opportunities to improve airport operations. This integration is becoming easier with the growing use of commercial off-the-shelf products, and typically IT-related protocols (eg the Internet Protocol) found in most modern OT systems. The record amount of information on ICS and OT online, including user and operation manuals, can potentially facilitate cyber attacks. As a result of this convergence of IT and OT, ICS have also become vulnerable to the same type of attacks as IT, significantly expanding the threat landscape and increasing the potential impact on the operations. Reports of ICS-related attacks are on the rise, especially in recent years. According to the U.S. Department of Homeland Security, OT operators were the most targeted sector of cyber attacks in 2015, making IT and OT integration-related security more important than ever.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "6713c8fd-fa04-4a5b-bffd-00e1450364c3", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.25, "w": 0.82, "x": 0.1, "y": 0.26 }, "kind": "paragraph", "text": "As with any other business, airports need to understand their customers to offer the right range of services. A major generator of revenue for some airports is non-aviation sources such as retail concessions. However, due to the changing demographic of air passengers and the use of low-cost airlines, this revenue is diminishing as passengers prefer to buy online rather than in-store. This means it is important for operators to understand how to maximise non-aviation revenue in times of constraints on regulated charges and develop new business models. Partly, that means recognising that the customer experience of a passenger starts at home instead of when they enter the airport. Following in the steps of airlines, airports are now increasingly seeking to engage with passengers through airport-related apps, providing consistent messaging to develop brand recognition and sharing notifications of flight delays and services. To achieve this, operators need to be able to track passengers throughout the airport in order to gather and link information to understand the preferences and behaviour of individual customers. They then need to customise and adapt services provided to them. As a result, airports will hold more personal identifiable information and have to deal with related security issues.", "attrs": null, "subkind": "paragraph", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "89046596-dcaf-4899-98c4-7a580a0e146d", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.03, "w": 0.2, "x": 0.1, "y": 0.695 }, "kind": "title", "text": "5. IT/OT towers", "attrs": null, "subkind": "headline", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "29ab8436-f009-43bd-b9b1-fd8455bbf606", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.03, "w": 0.25, "x": 0.1, "y": 0.22 }, "kind": "title", "text": "4. Customer centricity", "attrs": null, "subkind": "headline", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "c11e985d-d468-43d2-8108-68f9f7f834da", "frameworkName": null, "frameworkSlug": null }, { "bbox": { "h": 0.02, "w": 0.4, "x": 0.55, "y": 0.03 }, "kind": "title", "text": "SEVEN KEY TRENDS INCREASING SUSCEPTIBILITY TO CYBER ATTACK", "attrs": null, "subkind": "headline", "toolName": null, "toolSlug": null, "confidence": null, "componentId": "dbe4ba27-8862-46c9-8124-e776b36b6089", "frameworkName": null, "frameworkSlug": null } ], "metrics": [], "tools": [], "frameworks": [], "arcBeats": [ { "to": 12, "from": 7, "beatId": "4e5b5462-0145-4e61-8a50-fa0e8d45f803", "arcName": "Problem-Agitate-Solution", "arcSlug": "problem-agitate-solution", "beatName": "Agitate", "beatSlug": "problem-agitate-solution-agitate-make-it-worse", "evidence": "Seven key trends increasing susceptibility to cyber attack", "position": 1, "confidence": 0.8, "parentBeatName": "Development", "parentBeatSlug": "development" } ], "loops": [ { "to": 23, "from": 5, "name": "Cost Of Inaction", "slug": "27-cost-of-inaction", "bestFor": "Urgent budget requests, compliance, risk mitigation", "matchId": "df1fbe33-c152-4191-9383-d782a386d15a", "evidence": "The document emphasizes the need for action to overcome cyber-security challenges", "position": 0, "objective": "Highlight the importance of taking action against cyber threats", "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point", "confidence": 0.6, "description": "Quantify what happens if the audience does nothing" } ], "imagePathAlt": null, "thumbSrc": null, "thumbSrcAlt": null, "locked": true }