No Cybersecurity Incidents in ATC Systems for Four Years: Ministry of Civil Aviation

The Ministry of Civil Aviation reported no cybersecurity incidents in Air Traffic Control (ATC) systems over the past four years. The Airports Authority of India ensures compliance with national cybersecurity standards to protect critical aviation data and systems.

The Ministry of Civil Aviation announced on Monday that no cybersecurity incidents have been recorded in the Air Traffic Control (ATC) automation systems over the past four years. Minister of State Murlidhar Mohol conveyed this information in a written reply to the Rajya Sabha, addressing a query from Shiv Sena MP Milind Murli Deora regarding cybersecurity incidents in ATCs and the steps taken to mitigate such threats.

Mohol emphasized that the Airports Authority of India (AAI) adheres to the standards established by the National Critical Information Infrastructure Protection Centre (NCIIPC) and the Indian Computer Emergency Response Team (CERT-In). These protocols are designed to protect Air Traffic Data and other critical data against cyber threats. Additionally, the Bureau of Civil Aviation Security (BCAS) has implemented the National Civil Aviation Security Programme (NCASP) to ensure the confidentiality and integrity of critical aviation systems.

The Minister also mentioned that the Ministry issues various advisories, updates, and alerts regarding cyber threats, vulnerabilities, and countermeasures to relevant entities. These measures, based on inputs from NCIIPC and CERT-In, aim to safeguard aviation operations. Furthermore, cybersecurity-related expenses are accounted for under the Airport Authority of India's budget for Communication, Navigation, Surveillance, and Air Traffic Management systems.