Cyber security course under point 11.2.8 of Commission Implementing Regulation (EU) 2015/1998

Training for persons with access to critical information and communications technology systems and data in civil aviation

Further requirements for information security training follow from the principles for protecting critical information and communications technology systems and data in aviation security, set out in the Annex to Commission Implementing Regulation (EU) 2015/1998 read together with Commission Implementing Regulation (EU) 2019/1583 laying down detailed measures for the implementation of the common basic standards on aviation security. The scope and content of the training are set out below by topic. Which topics are chosen depends on the duties actually performed.

The scope and content of training under point 11.2.8 of the Annex to Commission Implementing Regulation (EU) 2015/1998 has been set at a minimum of 2 teaching units, following the national requirements of the Luftfahrt-Bundesamt (LBA) and the German Aviation Security Training Ordinance (LuftSiSchulV). Our course covers the modules "cyber security awareness" and "advanced cyber security awareness" for groups of persons I, II and III, that is groups a), b) and c). The modules cover:

• Internet security
• Phishing
• Social engineering
• Clean desk
• Passwords
• What to do in a security incident
• Introduction to malware
• Introduction to hacking
• Introduction to network security

All our aviation security courses are recognised and approved. All our instructors are certified and have many years of experience in the industry. After passing the final assessment, participants receive a legally valid certificate that is recognised.