In this course we will examine the aviation and Internet infrastructures, and various policies that have been developed to help guide and strengthen their cybersecurity programs. The aviation and Internet infrastructures are also considered “lifeline infrastructure” as part of the transportation and communications sectors.
Both subsectors are overseen by the Department of Homeland Security National Protection and Programs Directorate which manages the DHS National Infrastructure Protection Program. SSA responsibility for the aviation subsector is shared between the Transportation Security Administration and Federal Aviation Administration under the auspices of the Department of Homeland Security and Department of Transportation respectively. The Department of Homeland Security retains sole responsibility as the Sector-Specific Agency for the Internet subsector. While TSA and FAA have regulatory over the aviation subsector, DHS has no regulatory authority whatsoever over the Internet. In response to Executive Order 13636 issued by President Obama in February 2013, both sets of SSAs recommended continuing with voluntary cybersecurity measures. TSA and FAA reported they were working to implement the Transportation Roadmap across all transportation subsectors, including aviation. DHS reported that it was working with Internet providers to implement the Cyber Assessment Risk Management Approach. Despite some differences, the Transportation Roadmap and CARMA are very similar to the NIST Cybersecrity Framework and ES-C2M2 examined previously. That is to say, they are predicated on a continuous improvement process that engages the whole organization in identifying and implementing incremental changes to enhance cybersecurity practices based on prevailing standards. This module will examine both the aviation and Internet lifeline infrastructure subsectors, and elements and application of the Transportation Roadmap and CARMA.
Course 3 of 4 in the Homeland Security and Cybersecurity Specialization.
Who is this class for: This course was designed for learners who currently work in the cybersecurity career field, are interested in working in the cybersecurity career field, or are just curious about the topic. While there are no specific prerequisites for this course, it does assume some common understanding about computers and the Internet. Similarly, while this is mostly a non-technical course, it does require analytical and problem-solving skills on the part of the learner. This course provides a general overview of cybersecurity as it relates to critical infrastructure protection and homeland security. In addition to examining various cybersecurity policies as they apply to the water, electricity, aviation, and Internet infrastructures, this course relates those practices to the broader mission of critical infrastructure protection identifying “who’s who and what do they do”. This course seeks to demonstrate the intimate relationship between homeland security and cybersecurity. If you are ready to pry open that Pandora’s box, then this course is for you. I look forward to seeing you in the lectures. Cheers!
Module 9: Aviation Infrastructure & Transportation Roadmap
In this module will examine the aviation subsector and the Transportation Roadmap for strengthening this infrastructure’s resistance to cyber attack.
Module 10: Applied Transportation Roadmap
In this module we will examine the difference between cybersecurity for fixed versus mobile assets, and take a closer look at the Transportation Roadmap and apply its tenets to different hypothetical situations. Also included in this module is course exam #5. Good luck!
Graded: Exam 5
Module 11: Internet Infrastructure & CARMA
In this module will examine the Internet subsector and the Cyber Assessment Risk Management Approach for strengthening this infrastructure’s resistance to cyber attack.
Module 12: Applied CARMA
In this module we will take a closer look at the Cyber Assessment and Risk Management Approach and apply its tenets to different hypothetical situations. Also included in this module is the course exam #6 and related project assignment. Good luck!
Graded: Exam 6
Graded: Assessing Risk
ENROLL IN COURSE