Business Case: Local airport

The parameters.

$15,000$ passengers a day

$530$ flights daily

$350$ fulltime employees

There are three databases in the Airport$$s data center.

$1-$Passenger database to record and authenticate each passenger in the airport

$2-$Employee database to record and authenticate each employee in the airport

$3-$Flight database to record each flight in the airport

Every day the following processes must be done:

Process $1$: For each passenger: a Boarding Pass will be calculated, prepared, and stored for the records. The final version of the boarding pass will be printed on the printers at the airport

Process $2$: For each aircraft; Flight logs along with the passenger checklist will be prepared and stored.

Process $3$: One$-$month$-$old Passenger and Flight data should be moved to long$-$term storage $($archive$).$ And it will be kept there min three years.

Question $1$ Identify cyber assets based on the NIST definition in the given Local airport business case. List the cyber assets.

Question $2$ What are the steps $($ kay activates $)$ that you would follow to fulfill the requirement of the NIST Risk Management Framework for the Airport? Write each step

Question $3$ Do your search and find common cybersecurity threats in aviation. Prepare your Risk Assessment Report $($RAR$)$ Based on the following threat sources

Adversarial

Structural

Environmental

Question $4$ List the Risk Treatment Alternatives you would consider for each cybersecurity threat for the Airport. And explain, under what circumstances you would consider $"$ transferring the risk" to fulfill the risk treatment requirements.