Aviation Cyber Initiative (ACI) Community of Interest (COI) Survey

Survey on Information Sharing

Aviation Cyber Initiative (ACI) Community of Interest (COI) Meeting 2020 (Virtual FAA Zoom meeting)

1. A primary goal of the ACI COI meeting is facilitating information sharing on topics of interest to the aviation cybersecurity community. Do you believe the COI meeting providing you with useful information?

   1. Strongly agree

   2. Somewhat agree

   3. Neutral

   4. Somewhat disagree

   5. Strongly disagree

2. ACI has established an online site for the COI at the Homeland Security Information Network (HSIN). How often do you access it?

   1. I did not know ACI has stood up an online site

   2. I know about it but do not have an account

   3. I have an account but rarely (less than once a month) visit the site

   4. I have an account and occasionally (less than once a week but at least once a month) visit the site.

   5. I have an account and visit the site on a regular (at least once a week) basis

3. ACI seeks to be a conduit for sharing best practice information on aviation cybersecurity. Which best practice information would be of most interest to you?

   1. Training and educating cybersecurity hygiene

   2. Vulnerability/Risk management/assessment methodology

   3. Improving cyber resilience of critical business/mission systems and functions

   4. Application of framework and standards from NIST, RTCA, ISO, etc.

   5. Other (specify)

   6. Don’t Know

4. My organization would like to be more involved with the following ACI Working Groups:

   1. Research and Development

   2. Test and Assessment

   3. Aviation Transponder

   4. Unmanned Aircraft Systems (UAS)

   5. Airports

   6. Airlines and Airlift

   7. International

   8. Don’t Know

5. My organization routinely reports cybersecurity information to the following US government agencies:

1. CISA

2. FBI

3. TSA

4. FAA

5. None

6. Other

7. Don’t Know

(Select all that apply)

6. My organization voluntarily reports the same or similar cybersecurity information (including incident reporting) to multiple US government agencies:

1. Strongly Agree

2. Agree

3. Neither Agree Nor Disagree

4. Disagree

5. Strongly Disagree

6. Don’t Know

7. N/A: My organization only reports to one or fewer US government agencies.

7. My organization routinely reports to and receives cybersecurity information to and from the following industry organizations:

   1. Aviation Information Sharing and Analysis Center (A-ISAC)

   2. Airlines for America (A4A)

   3. Airports Council International – North America (ACI-NA)

   4. American Association of Airport Executives (AAAE)

   5. National Business Aviation Association (NBAA)

   6. Aircraft Owners and Pilots Association (AOPA)

   7. Airline Pilots Association (ALPA)

   8. Other

   9. Don’t Know

   10. None of the Above

3