Civil aviation cybersecurity information sharing manual available

Purpose
The Agência Nacional de Aviação Civil (Anac) has launched a Manual of Cybersecurity Information Sharing in collaboration with the Departamento de Controle do Espaço Aéreo (Decea), RIOGaleão, GRU Airport, and Embraer. The primary objective of this manual is to enhance cybersecurity cooperation within the aviation sector, ensuring compliance with the General Data Protection Law (LGPD) through collaborative efforts.

Effects on Industry
The launch of this manual aims to reinforce a culture of good practices related to LGPD in the aviation industry, promoting the adoption of strategic measures to anticipate and strengthen defenses against cyber threats. This initiative is expected to increase cybersecurity awareness among industry stakeholders, leading to improved preparedness against potential attacks. The use of tools like the Traffic Light Protocol (TLP) for sensitive information classification and protection, as well as the Malware Information Sharing Platform (MISP) for secure data sharing, will facilitate structured collaboration and enhance overall sector security.

Relevant Stakeholders
The Manual of Cybersecurity Information Sharing is designed to benefit various stakeholders within the aviation industry. These include airlines, airports, aircraft manufacturers like Embraer, and government agencies responsible for air traffic control, such as Decea and Anac. The document’s recommendations are also relevant to organizations involved in aviation-related services and operations, emphasizing the importance of collaboration and information sharing in maintaining sector-wide cybersecurity.

Next Steps
To comply with this update, stakeholders within the aviation industry should familiarize themselves with the manual’s guidelines and implement recommended strategies for enhancing cybersecurity measures. This may involve training personnel on LGPD compliance and adopting best practices for sensitive data protection, such as using TLP for information classification and MISP for secure data sharing. Should any further clarification or suggestions be needed, stakeholders can contact Anac via cyber.sia@anac.gov.br.

Any Other Relevant Information
The launch of this manual is part of the 6th Edition of the Exercício Guardião Cibernético, an initiative aimed at strengthening cybersecurity defenses within the aviation sector. This move reiterates the commitment to maintaining a culture of good practices related to LGPD compliance in the industry. The implementation of these guidelines is expected to lead to improved overall security and reduced risks associated with cyber threats in the aviation sector.