← Back
EPIT'AIR
Cyber risk-management study on EPIT'AIR, a fictitious international airport. Stepping into the CISO role, preliminary EBIOS RM analysis, residual-risk register, and final defence in front of a panel.
STACK
HIGHLIGHTS
- Role-play: stepping into the CISO seat at a fictitious international airport (two terminals, freight zone, maintenance, control tower, BHS, critical OT/ICS) with no security measures in place. Truly starting from zero.
- EBIOS RM analysis (ANSSI methodology) applied to the seven core business assets: air traffic management, passenger DCS, baggage handling, air freight, parking, retail concessions, and regulatory relations.
- Identification of risk sources and the ecosystem, modelling of strategic scenarios and at least three detailed operational scenarios combining cyber and physical.
- Definition of a treatment strategy and selection of priority security controls aligned with the ANSSI Hygiene Guide, with NIS2, IGI 6600 (DGAC), and EASA compliance.
- Formal risk register quantifying residual risk after mitigation, and final defence in front of a simulated panel (CISO, executive committee).