Assessing the Hidden 'Insider Threat' to Aviation Security

Cyber Security Cybersecurity Device 60504
author profile picture

by Nathan Baldwin on

Air travel has become the cornerstone of 21st Century transportation. It transports thousands of people a day to destinations across the world. As aviation technology continues to improve and air travel maintains its global popularity, the risk of new threats is at a constant high. The aviation sector is especially prone to the hidden and potentially more dangerous 'insider threats'. But why?

Airports are often considered as the beating hearts of the aviation sector. As a result, they are often where the risk of an insider threat is at its highest. Airport security across the globe has improved considerably over the last decade. This has undoubtedly made it much more difficult for outside threats to take place. However, these stringent airport security regulations have created a new problem... the insider threat.

 

Who or what is an insider threat?

An insider can be defined as anybody who exploits their position within a company or working environment for unauthorised purposes or malicious intent. An insider can be anyone affiliated with an organisation, including: employees, consultants, contractors and non-executive senior staff. Airports are particularly vulnerable to insider threats due to their size and complex infrastructure.

Individuals who wish to carry out an attack on an airport are now taking advantage of airport security clearance processes. Rather than attempt to breach sophisticated airport security measures, insider threats exploit access areas of the airport, for example job vacancies. If they do find employment they will be enrolled into the airport personnel security program. After completing this programme they will typically receive an airport security pass.

Public airports employ hundreds if not thousands of people, each working within different areas of the airport. This means a potential insider wouldn't be required to learn a specific skill-set to find employment within an airport. Rather, they could apply for a relatively low skilled or junior position but still gain access to critical airport security checkpoints. Consequently, a greater number of job opportunities equals a greater number of potential insider threats.

 

What types of threats do insiders pose?

Insiders can attack almost any area of an airport with the right clearance. There have been several catastrophic attacks on the aviation industry over the last few decades. Terrorist attacks are a poignant reminder of how serious a lapse in airport security can be.

Perhaps the most common crimes committed by insiders we think of, often involve making a financial gain through the smuggling of illegal contraband. In 2013 several British Airways cargo workers were found to be assisting in the transportation of cocaine in Heathrow International Airport. Bringing in around £4.5million worth of cocaine each year.

This case, and others like it typically receive global media coverage. But, there are dozens of unreported insider crimes committed in airports across the world each year. Digital technology has become a vital component of any modern airport's infrastructure.

It has revolutionised the aviation sector, allowing for quicker, cheaper and seemingly safer air travel. However, digital technology has also created a new opportunity for insider threats.

Cyber-attacks are becoming an increasingly common form of insider threats. Millions of pieces of personal information are stored on airport computer databases. With the right clearance and skill-set, an insider could gain access to millions of bank details, home addresses, locations and other potentially dangerous information. An insider can then either illegally use the information directly or sell the information on to third party criminal organisations.

Morson Screening Services

How to identify a potential insider threat

The best chance of identifying a potential insider threat and limiting risk, starts at the beginning of the recruitment process. Carrying out pre-employment background checks is a great way to ensure a candidate poses little threat before they are hired.

Identifying any criminal history that could relate to the role, can often determine whether a candidate should or shouldn’t be hired. Airport security screening procedures are vital in ensuring airport safety. Having the right pre-employment checks in place can significantly reduce the risk of an insider threat.

At Morson Screening we have witnessed first-hand how implementing an effective pre-employment screening procedure can ensure robust insider threat prevention. Our screening solutions cover a wide range of background checks and can be tailored to almost any sector or organisation.

Morson screening background checks can include:

  • Employment referencing and gap period analysis (Aviation Vetting Requirement)
  • DBS or Disclosure Scotland certificate  (Aviation Vetting Requirement)
  • Overseas criminal record checks (If Required, Aviation Vetting Requirement)
  • Identity Check and right to work verification (Aviation Vetting Requirement)
  • GSAT (Aviation Vetting Requirement)
  • CAA Security Interview (Aviation Vetting Requirement)
  • Address validation (Aviation Vetting Requirement)
  • Financial summary reports / financial detail reports (credit check, bankruptcy, IVA, CCJ) 
  • Qualification verification (including professional memberships and professional qualifications) 
  • Social media profiling 
  • FCA search
  • CIFAS check 
  • Directorship search 
  • CV analysis 
  • Sanctions check 
  • Drug and alcohol testing 

 

For more information on how Morson Screening can help secure your recruitment process, contact us today on 0161 786 7025.

 

Alternative airport insider threat detection methods

Other methods of insider threat detection can be carried out within different airport security lines. For example, each area of an airport comes with its own insider threat risk. Baggage handling has access to luggage, check in assistants have access to personal details.

So, in order to minimise the risk of a threat each department or area, can carry out their own insider threat risk assessment. This will identify any potential weak spots within a certain area or position within the airport that an insider could exploit.

Another measure airport security teams or departments can take to minimise the risk of an insider threat, is through providing insider threat training. This specialist training can enable airport personnel to identify typical indicators of insider threat behaviour. Enabling each member of personnel to quickly identify potentially dangerous airport insider threats. Some airports even employ a dedicated threat program manager to work across different departments. It is the responsibility of the threat program manager to ensure every department is equipped to identify and resolve potential threats.

 

Conclusion

This article has offered a small insight into the much wider issue of insider threats effecting the aviation sector. There is no one definitive resolution to stop insider threats from occurring. As technology evolves, so will the routes insiders can take to breach safety procedures. However, what we have established is that prevention is better than the cure.

Determining if a person could pose a potential threat to your operations before hiring them, is the first line of defence. Having the right pre-employment screening processes in place will significantly reduce the likelihood of an insider carrying out an attack. At Morson Screening we work within highly targeted sectors to provide our clients with a tailored pre-employment screening service.

For more information about the services we provide, contact a member of our team today on 0161 786 7025, or visit the Morson Screening website here.

 


Cx Jobs

Security Associate/Administrator

A Security Associate is required to work for our client BAE Systems in Barrow-in-Furness. The purpose of the role will be to execute routine security responsibilities for the assigned workstream in order to protect BAE Systems, its people, infrastructure, information and assets, as well as the interests of its shareholders and customers, and to fulfill regulatory and legal obligations. Duties will involve; - Coordinate and carry out security tasks based on relevant policies, standards, procedures and best practices of the assigned workstream. - Respond to and maintain records of security incidents, escalating where needed - Provides regular reports on security activities to inform decision making at more senior levels - Support security investigations through the provision of information - Assure the integrity of BAE employees working in the assigned business area by maintaining personnel security and access control processes and procedures. - Provide advice and guidance for the business area on routine security queries - Advise and train others, with support from senior colleagues, in routine security procedures - Support the security culture by raising security awareness among employees in the local area (i.e. through security inductions) and modelling behaviours that demonstrate BAE System The successful applicant will have a good knowledge of relevant security services, e.g. personnel security, information security, cyber and IT security, cryptographic management, asset protection, etc. You will have good understanding of legislation and regulations. You will have experience in interacting and communicating with different levels of seniority and with customers, and ability to exercise tact and diplomacy. Good written and verbal communication skills are required along with a good working knowledge of MS Office applications. An appropriate entry level Security qualification from a certified body, where relevant. You will be able to achieve and maintain required mandated SQEP for nuclear security and safety baselines if required.Morson is acting as an employment business in relation to this vacancy.Administration; filing; e-filing; GDPR; secretarial; data entry; data input; Excel; Word; Outlook; Access; MS Office; booking system; business support; database management; diary management; minute taking; document control; security coordinator; security administrator; security clearance; MOD Morson is acting as an employment business in relation to this vacancy.

FPGA Engineer

FPGA Design Engineer 3-6 Months Contract Dorset *Dorchester* (DT2) £X0.00 P/H LTD Job Description A technology and defence (maritime) organisation are looking to add a FPGA (Field Programmable Gate Array) engineer to the team in Dorset, the successful candidate will be joining the team with to develop programmable logic design solutions, to high functional integrity levels. The successful FPGA Design Engineer will have the following responsibilities * Translate customer requirements into a firmware specification. * Create feasible preliminary architectures from the firmware specifications. * Carry out detailed implementation of RTL, constrained Place and Route and timing closure. * Derive verification plans to address design requirements. * Prepare related test cases to verify that the implemented design meets the requirements. * Design and utilise both unit level and BFM style verification test benches to exercise RTL. * Produce accurate written documentation to fully support the design for both internal and external customers. The successful FPGA Design Engineer should have the following skills & attributes * Proficiency in the use of a simulation tool e.g. ModelSim, Active-HDL, * Proficient in the use of Vendor design tools such as Xilinx Vivado or Altera Quartus Prime * Design and delivery of digital systems targeted at Programmable Logic Devices * IP Block design and Delivery * FPGA Verification using Self-Checking Testbenches * Producing high quality behavioural models FPGA Design Engineer £50.00 P/H 6 Months Contract Dorset (DT2) ADDITIONAL WE SEEK A FPGA ENGINEER WHO HAS WORKED IN A MILITARY / DEFENCE ENVIRONMENT / INDUSTRY WITHIN THE LAST 12 MONTHS OR WHO IS CAPABLE OF OBTAINING SECURITY CLEARANCE (SC LEVEL MINIMUM) FPGA Design Engineer 6 Months Contract Dorset *Dorchester* (DT2) £50.00 P/H Job Description A technology and defence (maritime) organisation are looking to add a FPGA (Field Programmable Gate Array) engineer to the team in Dorset, the successful candidate will be joining the team with to develop programmable logic design solutions, to high functional integrity levels. The successful FPGA Design Engineer will have the following responsibilities * Translate customer requirements into a firmware specification. * Create feasible preliminary architectures from the firmware specifications. * Carry out detailed implementation of RTL, constrained Place and Route and timing closure. * Derive verification plans to address design requirements. * Prepare related test cases to verify that the implemented design meets the requirements. * Design and utilise both unit level and BFM style verification test benches to exercise RTL. * Produce accurate written documentation to fully support the design for both internal and external customers. The successful FPGA Design Engineer should have the following skills & attributes * Proficiency in the use of a simulation tool e.g. ModelSim, Active-HDL, * Proficient in the use of Vendor design tools such as Xilinx Vivado or Altera Quartus Prime * Design and delivery of digital systems targeted at Programmable Logic Devices * IP Block design and Delivery * FPGA Verification using Self-Checking Testbenches * Producing high quality behavioural models FPGA Design Engineer £50.00 P/H 6 Months Contract Dorset (DT2) ADDITIONAL WE SEEK A FPGA ENGINEER WHO HAS WORKED IN A MILITARY / DEFENCE ENVIRONMENT / INDUSTRY WITHIN THE LAST 12 MONTHS OR WHO IS CAPABLE OF OBTAINING SECURITY CLEARANCE (SC LEVEL MINIMUM)

Electrical Mate

ELECTRICAL MATES - NEWCASTLE CITY CENTRE - THE SPARK BUILDING - 5 MONTH CONTRACTOur client are a leading M&E Contractor that specialise in commercial projects across the UK. They currently require the services of Electrical Mates to start on their new build, high rise commercial project in Newcastle City Centre. Candidates are required to have ECS, PPE and previous experience across commercial projects.For more information, please contact Scarlet Wilson on 01617071516.

Electrical Production Operative

Production Operatives (Electrical) - Sherburn-in-Elmet - £10.53 P/H - Immediate StartAre you the kind of person that thrives on working in a high-performance environment, where every day is new and challenging, and you will have the opportunity to change communities across the Country?Here at Legal & General Modular Homes, our vision is to make the housing market fairer for all.We design, manufacture, construct and install high quality, precision-engineered homes in dry, controlled conditions. Our 555,000 sq ft factory in Yorkshire (Europes largest) has the capacity to produce up to 3,500 affordable, sustainable homes per year, creating progressive careers across multiple disciplines.Due to the rapid expansion of our world class facility, we are now recruiting further talented production colleagues to join this truly unique opportunity. In our fantastic Modular Academy, we will give you all the required training to be the very best in your role, including learning new skills in Modern Methods of Construction!We set the bar high at L&G Modular Homes! We only welcome new colleagues that can demonstrate the following:High performingStrong work ethicFull agility & flexibility to performIntegrityPromote an inclusive & great working environmentWe want you to join and champion our core values of collaboration, straightforward, Cost & Value, purposeful & continuous improvement. These are the building blocks (no pun intended!) of how we operate as a business.We are specifically seeking candidates who enjoy manual work and have experience in any of the following areas: Assembly, tiling, stud & dry lining, tape & fill, painting, joinery, plumbing, electrical, basic DIY or general construction skills.We want to show the world what we can do, and we enjoy doing it!**We are looking for a number of colleagues to start in our facility throughout all of 2021. Although we are currently operating a day shift - we will be moving to a shift pattern and all applicants need to be flexible around an early & late shift.**Due to the location of this role we require people who would be able to drive/walk or cycle to site. All colleagues that join L&G Modular Homes are subject to background screening including DBS check.Interested? We look forward to hearing from you!COVID-19The health & safety of all of our colleagues is our number one priority. We have strict social distancing measures on site and it is currently mandatory to wear a face mask in all areas.L&G Modular Homes is an equal opportunity employer. All employment decisions are based on business requirements, job needs and individual qualifications relevant to the role and are not influenced by age, colour, religion, sex, sexual orientation, gender identity, national origin or disability status.For more information on this role, please contact Scarlet Wilson 01617071516.

Austin Distel Va Opp86kf Q Unsplash

Advertisement