The Cybersecurity Act of Singapore which was established in 2018, provides framework for the protection of Singapore's critical information infrastructure (CII) from cyber threats across 11 critical sectors, and requires CII owners and operators in the 11 critical sectors to implement measures to protect their systems and networks from cyber attacks [1]. The aviation sector which employs large number of people and deliver essential services to support wide range of businesses and industries, is one of the 11 critical sectors as it plays vital role in singapore's economic development, and it a prominent target for cyber attack because of the following factors:
Major Aviation Hub
Singapore is a major aviation hub in the world which serves as a major gateway for air travel in Southeast Asia, with one of the busiest airport in the Asia that handles large volume of passengers and cargo. Singapore Changi Airport is among the top 10 busiest airports in Asia by total passengers in 2018 [2], and it is ranked 3rd in SKYTRAX World Airport Awards 2022 [3]. Also, the aviation sector is home to many major airlines and aerospace companies. Singapore serves more than 100 airlines from Changi Airport [4], and it's aviation sector is supported by over 130 aerospace players [5]. This makes it an attractive target for cyber adversaries seeking to steal sensitive information or disrupt air travel.
Reliance on Technology
Singapore aviation sector is highly digitized with many of its operations and processes relying heavily on technology and a complex network of digital systems that help to facilitate smooth operation of flights and other related activities such
flight booking, cargo tracking, aircraft maintenance and etc. The use of technology and digital systems has benefitted the aviation sector in many ways, such as increased efficiency and speed in the exchange of information and data which has helped to improve customer service and travel experience for the passengers. However, this has made the sector more susceptible to cyber attacks.
Complex Supply Chain
Singapore aviation sector has a complex supply chain involving multiple stakeholders and partners which include airlines, airport , other service providers. These stakeholders and partners may have varying degree of cybersecurity posture leading to supply chain vulnerabilities that can be exploited by cyber adversary. The image below shows some of the companies related to Singapore aviation sector.
Large Volume of High Value data
Singapore aviation sector handles large volume of sensitive data, including passenger information, financial data and aviation business information which are valuable to cyber adversary seeking financial gain or to cause disruption. According to Ensign Cyber Threat Landscape Report 2022, the aviation sector is an attractive target for cyber attack due to its global and regional connectivity which is fuelled by collection of personal identifiable information (PII) for cross-border travel [6]
References
Comentarios