CATEGORY A16 - INITIAL

Exam and certification:
At the end there is a theory test conducted by the certified instructor. To pass the course, the error rate must not exceed 20%.

Category A16 does not involve an ENAC certification procedure. Equivalent certificates issued by nationally or internationally recognised organisations (IATA, ACI, etc.) are considered valid.

Certificate:
A certificate of attendance is issued.

• International, European Union and national regulatory framework on information security
• Role and responsibilities of system administrators and specific controls on privileged activities
• Relevance of information security to civil aviation
• Potential sector-specific risks and attack surface reduction, specific and emerging threats (insider threat)
• Information security principles and practices: managing the risk of threats and vulnerabilities from a technological, organisational and human factor perspective
• Security incident management: detection, response and recovery; business continuity; analysis and lessons learnt
• Obligations to report significant cyber threats and incidents to the competent authorities or CSIRTs

To ensure that staff with privileged access to ICT systems critical to civil aviation receive appropriate and specific training, commensurate with their role and responsibilities, including awareness of the risks relevant to their job function.