Airworthiness in Modern Aviation with Sara Sayah, Cybersecurity Risk Specialist

Airworthiness in Modern Aviation with Sara Sayah, Cybersecurity Risk Specialist

🎙 Sara Sayah 👥 1K 📅 April 7, 2026 ⏱ 33 min 👁 85 📄 expert opinion 🧭 2026-08-15
Available in: English (current) Français

Keywords

airworthinessOT securityaviation cybersecurityaircraft systemsregulatory compliance

Summary

This webinar, part of the Cyber Pulse series by the Canadian Institute for Cybersecurity, features Sara Sayah, a cybersecurity analyst with experience at Air Canada, discussing the importance of cybersecurity for aircraft airworthiness. She explains that modern aircraft are increasingly software-dependent, making cybersecurity critical for flight safety. She distinguishes between IT and OT security, emphasizing that in aviation, availability is paramount over confidentiality and integrity. Key OT security requirements include network segmentation, access control, continuous monitoring, patch management, incident response planning, and regular risk assessments. She outlines the role of regulatory bodies like the FAA, TSA, and Transport Canada in certifying aircraft airworthiness, which now includes cybersecurity. After certification, ongoing monitoring and maintenance are essential, using tools like Airbus’s Forax and FSNG data collectors to analyze logs and detect anomalies. She provides examples of data flows and SOC dashboards, and discusses the attack lifecycle. The talk concludes with challenges such as keeping pace with zero-day threats and the complexity of fast-paced aviation environments. The Q&A covers GDPR’s limited relevance to OT, segmentation of cabin Wi-Fi, and whether cybersecurity is part of the overall safety case.

185 words

Critical Evaluation

Value of the Information & Strength of the Argument

The presentation offers valuable insights into the practical application of cybersecurity in aviation, particularly the distinction between IT and OT security and the emphasis on availability. The speaker’s experience at Air Canada lends credibility, and she provides concrete examples of data collection and monitoring. However, the argumentation is largely based on general principles and personal experience rather than specific case studies or empirical data. The discussion of regulatory requirements is informative but lacks depth on specific standards or frameworks. The Q&A section adds value by addressing common questions, but some answers are high-level.

Scientific Rigor, Source Quality, Title Accuracy

The presentation is scientifically sound in its general principles, but it lacks explicit citations to standards, regulations, or research. The speaker mentions regulatory bodies (FAA, TSA, Transport Canada) but does not reference specific documents or guidelines. The title accurately reflects the content, and the presentation is well-structured. The absence of formal sources reduces the overall rigor, but the speaker’s professional background partially compensates. No comments were provided for analysis.

177 words

Title / Content Match

The title accurately reflects the content, which focuses on the role of cybersecurity in aircraft airworthiness, presented by a cybersecurity risk specialist.

Quality & Reliability

7/10

The speaker is a cybersecurity analyst with experience at Air Canada, providing practical insights into aviation OT security. The content is based on professional experience and general knowledge, but lacks specific citations or references to standards, regulations, or research. The presentation is clear and structured, but the depth is limited and some claims are generic.

Key Moments

Cited Sources

Concurring Sources

  • DO-326A - Airworthiness Security Process Specification — Supports the need for cybersecurity in airworthiness certification.
  • NIST SP 800-82 Guide to OT Security — Provides guidance on OT security, aligning with the speaker's points.

Contribution & Novelties

The webinar provides a practical overview of cybersecurity in aviation airworthiness, emphasizing the importance of OT security and availability. It offers real-world examples from the speaker’s experience at Air Canada, illustrating data flows and monitoring. The presentation is valuable for professionals new to aviation cybersecurity, but it does not introduce novel concepts or research.

Pour aller plus loin :

114 words

Radar Profile

The radar profile shows balanced scores across all dimensions, with slightly higher scores in quantity and quality of information, and lower in technical depth. This indicates a solid introductory presentation with practical insights, but not highly technical or research-heavy.

Reliability 7/10