GAO Report Highlights FAA's Ongoing Cybersecurity Vulnerabilities in Aviation Systems
A recent report from the Government Accountability Office (GAO) indicates that the Federal Aviation Administration (FAA) still has significant work to do in protecting its systems from cyber threats, particularly those related to the electromagnetic spectrum. The GAO's review focused on whether the FAA was effectively identifying and mitigating spectrum-related cyber threats that could impact aviation navigation and flight control. The report specifically examined vulnerabilities in two key aircraft communication applications, ACARS and CPDLC. While the FAA has recognized threats like interference, spoofing, and jamming, the GAO found a disconnect between this recognition and the implementation of detailed, specific risk assessments for individual systems. Many systems reviewed lacked up-to-date standards, required controls, and consistent data categorization, hindering the FAA's ability to monitor real-time threats. Additionally, coordination practices with federal partners, while established, were not fu...