{
  "docId": "019dd923-5ca1-7489-b639-b59a862e8cdb",
  "docSlug": "531a385a82e8bd6c",
  "documentTitle": "Airport Cyber Security Report",
  "authorId": "PAConsulting",
  "authorName": "PA Consulting",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "portrait",
  "aspectRatio": 0.707,
  "pageNumber": 20,
  "pageCount": 24,
  "prevPage": 19,
  "nextPage": 21,
  "slideType": "initiative_list",
  "function": "recommend",
  "density": "overcrowded",
  "nDataPoints": 0,
  "notes": null,
  "elementsJson": [
    "photo",
    "paragraph"
  ],
  "metadataConfidence": 1,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5ca1-7489-b639-b59a862e8cdb/20",
  "deckHref": "/decks/019dd923-5ca1-7489-b639-b59a862e8cdb",
  "deckJsonHref": "/decks/019dd923-5ca1-7489-b639-b59a862e8cdb.json",
  "deckAnchorHref": "/decks/019dd923-5ca1-7489-b639-b59a862e8cdb#slide-20",
  "components": [
    {
      "bbox": null,
      "kind": "callout",
      "text": "Ensure cyber security is part of the overall security plan.",
      "attrs": null,
      "subkind": null,
      "toolName": "Visual emphasis",
      "toolSlug": "visual-emphasis",
      "confidence": null,
      "componentId": "019dd951-d9f1-764a-82f4-48b3a3130658",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 1,
        "w": 0.48,
        "x": 0,
        "y": 0
      },
      "kind": "image",
      "text": null,
      "attrs": null,
      "subkind": "photo",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "4706fd37-91d7-4f07-acad-1c9ad123a57d",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.13,
        "w": 0.4,
        "x": 0.52,
        "y": 0.73
      },
      "kind": "paragraph",
      "text": "Airports should identify and reach out to different sources to obtain the latest threat intelligence that may directly concern the airport or the wider aviation industry. Equipment manufacturers, vendors and integrators are also a useful source of vulnerability and threat information for the equipment used, such as programmable logic controllers for the baggage handling systems. By monitoring different sources and feeds, an airport can improve its situational awareness, providing early warning of possible threats.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "56b3c531-93dd-4d75-9807-a768f66d5053",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.15,
        "w": 0.4,
        "x": 0.52,
        "y": 0.5
      },
      "kind": "paragraph",
      "text": "The development of incident response plans based on plausible scenarios can help prepare an airport in the effective management of an incident, and reduce the overall impact to the business and its customers. Plans should be tested on at least a yearly basis to ensure that incident response teams are suitably briefed, trained and aware of their responsibilities. This can help to identify any gaps in response plans and be used to refine existing response plans.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "72827068-df2d-492f-93f1-5e7c10c121b0",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.07,
        "w": 0.4,
        "x": 0.52,
        "y": 0.91
      },
      "kind": "paragraph",
      "text": "It is important to understand the root cause of a cyber-security incident to aid recovery. Having an incident response and forensic capability, whether in-house or provided through an external third party, is essential to carrying out an investigation of an incident. Even after an incident has passed, the knowledge gained can help to prevent further future occurrences.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "8bdec834-21f9-48fd-82fa-eb3221e26cf6",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.18,
        "w": 0.4,
        "x": 0.52,
        "y": 0.19
      },
      "kind": "paragraph",
      "text": "An airport is a highly complex operational environment, which typically in the past only had to deal with physical and personnel security-related threats. With the increased use of connected technologies in both IT and OT, security disciplines should align to provide effective holistic security. Ensure cyber security is part of the overall security plan. The security plan of an airport should describe how security is managed within the airport and outline the security controls that are in place. Cyber-security aspects should be included in this plan to ensure that it's not overlooked.",
      "attrs": null,
      "subkind": "paragraph",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "ba47fef3-669f-4d58-ad1e-b98545ff92ca",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.4,
        "x": 0.52,
        "y": 0.03
      },
      "kind": "title",
      "text": "Practical steps to overcome cyber-security challenges",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "13d5e3f1-d81b-43a0-848c-f93dbd2cbb75",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.03,
        "w": 0.4,
        "x": 0.52,
        "y": 0.87
      },
      "kind": "title",
      "text": "Develop a capability for incident investigation and forensics",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "216fdf5e-855e-46f0-a64c-8f1a0a494fa4",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.4,
        "x": 0.52,
        "y": 0.66
      },
      "kind": "title",
      "text": "Obtain threat intelligence from internal, external and government sources",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "66e3985a-5699-4fde-a978-701318a66c93",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.06,
        "w": 0.4,
        "x": 0.52,
        "y": 0.11
      },
      "kind": "title",
      "text": "Align cyber, physical and personnel security",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "85525864-7cb5-48d6-8602-49f2fcf9899c",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.08,
        "w": 0.4,
        "x": 0.52,
        "y": 0.41
      },
      "kind": "title",
      "text": "Establish a security monitoring and incident response capability",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "aee0359f-ce26-4780-a4c2-7f5d4060c8b5",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "List presentation",
      "slug": "list-presentation",
      "agent": null,
      "layer": "slide",
      "matchId": "d20232ce-952e-41bb-a4b7-05495b3a2376",
      "evidence": "The slide presents a list of practical steps to overcome cyber-security challenges.",
      "confidence": 0.7
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 21,
      "from": 17,
      "beatId": "2f63e8ac-9126-4b43-a4d4-1a84185e47fe",
      "arcName": "Problem-Agitate-Solution",
      "arcSlug": "problem-agitate-solution",
      "beatName": "Solution",
      "beatSlug": "problem-agitate-solution-solution-provide-relief",
      "evidence": "Practical steps to overcome cyber-security challenges",
      "position": 2,
      "confidence": 0.8,
      "parentBeatName": "Resolution",
      "parentBeatSlug": "resolution"
    }
  ],
  "loops": [
    {
      "to": 23,
      "from": 5,
      "name": "Cost Of Inaction",
      "slug": "27-cost-of-inaction",
      "bestFor": "Urgent budget requests, compliance, risk mitigation",
      "matchId": "df1fbe33-c152-4191-9383-d782a386d15a",
      "evidence": "The document emphasizes the need for action to overcome cyber-security challenges",
      "position": 0,
      "objective": "Highlight the importance of taking action against cyber threats",
      "structure": "The Status Quo -> The Hidden Costs Accumulating -> The Future State of Inaction -> The Tipping Point",
      "confidence": 0.6,
      "description": "Quantify what happens if the audience does nothing"
    }
  ],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}