Aviation
Airports, airlines and air traffic control are critical infrastructure. Cyber attacks on aviation systems have direct impact on national security and passenger safety.
of aviation organisations experience an increase in cyber threats; supply chain attacks are the fastest growing risk
Cybersecurity in aviation: what it involves
Cybersecurity in aviation is about protecting airports, airlines and air traffic control, which together form critical infrastructure. Aviation falls under NIS2 Annex I, implemented in the Netherlands through the Cyberbeveiligingswet (Cbw). EASA also sets information security requirements for aviation through Part-IS. Cyber attacks here have a direct impact on national security and passenger safety. The main threats are attacks on air traffic control and navigation systems, ransomware on airport systems such as check-in and baggage handling, supply chain attacks via aviation suppliers and GPS spoofing and communication interception. Aviation organisations therefore mainly hire OT/ICS security engineers with aviation experience, CISOs who know the sector, NIS2 implementation coordinators and network security engineers who can design and manage network segmentation.
Key Threats
Attacks on air traffic control and navigation systems
Ransomware on airport systems (check-in, baggage)
Supply chain attacks via aviation suppliers
GPS spoofing and communication interception
MVPeople delivers
OT/ICS Security Engineers (aviation)
CISOs with aviation sector experience
NIS2 implementation coordinators
Network Security Engineers (segmentation)
48u
Average time-to-shortlist
97%
Clients return
7.000+
Professionals in network
100%
Cybersecurity focus
Frequently asked questions
Aviation in the Netherlands is covered by the Cyberbeveiligingswet (Cbw), the Dutch implementation of NIS2, because aviation is listed in NIS2 Annex I. EASA also sets requirements for managing information security risks in aviation through Part-IS. The Cbw brings a duty of care, a duty to report significant incidents and ultimate board responsibility. Airports designated as critical entities may also fall under the Wwke.
An airport mainly needs OT/ICS security engineers for operational systems such as baggage handling, supported by network security engineers for network segmentation. A CISO with aviation experience and NIS2 implementation coordinators are also important for governance and compliance. Because supply chain attacks via aviation suppliers are a growing risk, supplier risk management needs attention too.
MVPeople Group responds to every request within 4 hours and, for interim assignments, often presents a first profile within 4 hours, with introduction CVs within 24 hours. Candidates come from a network of more than 7,000 pre-screened cybersecurity professionals, including OT/ICS and network security specialists. MVPeople is NEN-4400-1 certified, WAADI registered and works DBA-proof.
Interim fits defined projects, such as implementing NIS2 or Part-IS requirements, a segmentation project or bridging the gap after a CISO leaves. Permanent hiring fits structural roles in the operation and monitoring of operational systems. Many organisations combine both: an interim specialist sets up the programme and a permanent employee embeds it. Permanent hiring through MVPermanent typically takes 2 to 4 weeks.
Last updated by Mathijs Visser, Co-founder and Lead Consultant MVPeople Group.
Other NIS2 sectors
MVPeople Group places cybersecurity professionals across all NIS2 sectors.
Need cybersecurity talent for aviation?
We introduce the first qualified interim candidates within 24 hours. 100% cybersecurity. 100% focus.