Kerry Lynch stepped into the role of editor of the&nbsp;Aviation International News&nbsp;monthly magazine in May 2022 after serving with&nbsp;AIN&nbsp;for eight years. She joined&nbsp;AIN&nbsp;in December 2014 as a senior editor covering Washington and business aviation news. She has also served on Convention News teams, including as editor of&nbsp;HAI Convention News. Lynch previously spent 25 years with Aviation Week. During her time there, she reported for and later steered&nbsp;The Weekly of Business Aviation, oversaw business aviation content on the&nbsp;Aviation Week Intelligence Network, served on the&nbsp;Show News&nbsp;staff, and held roles as the Washington columnist for&nbsp;Business &amp; Commercial Aviation&nbsp;and&nbsp;Overhaul &amp; Maintenance&nbsp;monthly magazines. In 2021 she was honored with the National Business Aviation Association Platinum Wing Award for lifetime achievement in journalism and was the 2004 recipient of the National Air Transportation Association’s Aviation Journalism Excellence Award. She also has been a recipient of an Aerospace Media Award for business aviation (2022) and NBAA Gold Wing Award (2003, 2024). Lynch graduated from The Ohio State University with a bachelor of arts in journalism.

Editor, AIN monthly magazine

Kerry Lynch

Delays in implementing cybersecurity tools are inhibiting the FAA from remaining up-to-date on its efforts to fully identify and mitigate vulnerabilities, according to a new report from the Department of Transportation’s Office of Inspector General (OIG). At the request of U.S. House Transportation and Infrastructure Committee leaders, the OIG examined the FAA’s progress in meeting cybersecurity enhancements that Congress mandated in the FAA Extension, Safety, and Security Act adopted in 2016.

 


The OIG found that the FAA has taken significant steps in enhancing security. As required by Congress, the FAA completed a cybersecurity strategic plan, coordinated with other agencies to identify vulnerabilities, and developed a threat model and research and development plan, the OIG said.

 


However, the agency has not yet completed a comprehensive framework for the identification and mitigation risks, the OIG added. Specifically, the FAA had established a government-industry working group to recommend rulemaking and policies for aircraft systems. But citing other rulemaking priorities, the agency has not set target dates to implement four recommendations covering engines, propellers, rotorcraft, and general aviation. ”The FAA’s lack of target dates for the four recommendations inhibits the agency’s ability to fully implement regulations and policy to mitigate cybersecurity issues for the diverse range of aircraft operating in the National Airspace System (NAS), as required by the [congressional] act,” the OIG said.

 


Further, the agency has developed a cybersecurity risk model in conjunction with Mitre Corp. that is designed to take an end-to-end approach to assessing risks. At the time of the OIG audit conducted late last year, the agency was still working to implement the model across all of the NAS, as well as mission support and research and development (R&amp;D) efforts.

 


The FAA also was still formulating its R&amp;D requirements and priorities for Fiscal Year 2019 and beyond. “This lack of finalized priorities makes it difficult for FAA to pursue improved safeguards for the NAS and limits the agency’s ability to achieve a total systems cybersecurity approach,” the OIG said.

 


As a result of the findings, the OIG recommended that the FAA develop targets dates on the outstanding four recommendations from the working group, develop a plan with target dates to fully implement the cybersecurity risk model, and establish R&amp;D priorities. The FAA has agreed to move forward on all fronts.

 


Senate Commerce Committee members Edward Markey (D-Massachusetts) and Richard Blumenthal (D-Connecticut), said the FAA needs to swiftly meet the OIG recommendations. In a joint statement, the senators said the agency has failed to “fully adopt sensible, meaningful cybersecurity protections. We need to ensure our aircraft, ground support equipment, and operations and maintenance practices are protected from cyberattacks, but we are still at risk.”

News and information about crew, passenger, aircraft and airport security issues.

DOT Watchdog Calls on FAA To Step Up on Cybersecurity

Delays in implementing recommendations, a cybersecurity risk tool, and R&D priorities are inhibiting risk mitigation, the OIG found.

2024 Corporate Aviation Leadership Summit

Charles Alcock

News about significant aircraft accidents and information from accident reports.

News and information on safety procedures and concerns.

News and issues relating to international air transport and cargo carriers, national airlines and regional airlines, including aircraft, engines, personnel, acquisitions, accidents, safety, security and training.

News and issues relating to business, corporate and private aviation, primarily regarding turbine-engine-powered airplanes and helicopters. Subjects include aircraft, engines, maintenance, operations, personnel, acquisitions, accidents, safety, security, and training.

Security consultants are warning clients to increase vigilance

Aircraft Operators Face Rising Threats in Gulf and Russia

Jeremy Kariuki

A recount of the days following the 9/11 terror attacks

Thinking on the fly: Unprecedented times, leadership during 9/11

New developments at airports including regulations and noise issues; legal disputes; openings, acquisitions and mergers.

Russia widely believed to have gotten an explosives-carrying drone into the German airport

Leipzig Drone Threat Raises Security Risk in Europe

Charlotte Bailey

Essential news and analysis on the defense aerospace business. Your trusted source for new and ongoing programs and requirements in military aircraft (manned and unmanned), engines, avionics, weapons and associated systems, including ground-based air defense.

More In Security

Aircraft Operators Face Rising Threats in Gulf and Russia

Security consultants are warning clients to increase vigilance

Thinking on the fly: Unprecedented times, leadership during 9/11

A recount of the days following the 9/11 terror attacks

Leipzig Drone Threat Raises Security Risk in Europe

Russia widely believed to have gotten an explosives-carrying drone into the German airport

Canada Targets Increased Domestic Defense Production

Saab offers Gripen with future fighter choice still to be decided

Air Chiefs: Allied Integration Essential as Threats Intensify

Evolving threats demand deeper multinational cooperation

Boeing Offering Cyber Protection with SkyGuard Service

Digital twin technology eliminates the need for physical access to the aircraft

TSA Urges Operators To Prep Pax during FIFA Traffic Surge

GA has faced Real ID compliance challenges

Security Specialist Warns of Bizav Cyberattack Threats

Cyviation said small operators need more help to be protected

AIN Products

SUBSCRIPTIONS

RESOURCES

ABOUT AIN