United Airlines CISO on Building Resilience when Disruption Is Inevitable

Why It Matters

In aviation, cyber incidents can cascade into safety and operational crises, making resilience as vital as prevention and reshaping industry risk standards.

Key Takeaways

• Legacy aircraft wrapped with modern identity and segmentation controls.
• Cyber strategy prioritizes availability, recovery, not just prevention.
• External vendor risks managed via visibility, scenario modeling, sharing.
• Multidisciplinary incident response ensures safety and public trust.
• Trust built by speaking operational risk, not security jargon.

Pulse Analysis

Aviation’s reliance on decades‑old digital infrastructure creates a paradox: airlines must adopt cutting‑edge security while preserving the deterministic behavior required for certification. United Airlines tackles this by encasing legacy avionics and ground‑system software in modern identity‑and‑access frameworks, network segmentation, and continuous monitoring. Rather than forcing legacy platforms into cloud‑native molds, the carrier deploys compensating controls that enhance detection and response without introducing operational fragility, a strategy that other regulated sectors are beginning to emulate.

The hybrid nature of airlines—as IT providers, logistics operators, and safety‑critical entities—drives a cybersecurity model centered on resilience and availability. United evaluates risk through the lens of aircraft movement, crew scheduling, and passenger timelines, quantifying potential disruptions rather than merely data loss. To manage the sprawling ecosystem of manufacturers, airports, and air‑traffic controllers, the airline invests in deep visibility of third‑party dependencies, employing scenario‑based impact modeling and active information‑sharing forums. This proactive stance shifts the focus from contractual compliance to real‑time threat detection and rapid adaptation, setting a benchmark for cross‑industry supply‑chain security.

When a cyber event threatens flight safety or public perception, United’s response hinges on multidisciplinary coordination. Pre‑defined playbooks, joint rehearsals, and clear authority matrices enable swift decisions that balance operational continuity with passenger safety. Building trust across engineering, safety, and operations teams involves speaking the language of operational risk—recovery time, failure modes, and mission impact—rather than pure security jargon. This collaborative culture not only fortifies United’s defenses but also influences broader aviation standards, underscoring that cyber resilience is now a core component of safe, reliable air travel.