Cyber Assurance of Security Screening Equipment

Tender description

The Department for Transport is responsible for the aviation security policy within the UK, ensuring that the measures balance the need for security with the facilitation requirements of passengers. The Department is continually assessing aviation security measures to ensure they mitigate current and potential future threats. Cyber security is a growing issue within the security environment (and beyond), and is becoming more significant in equipment and systems that were previously considered resilient because they were relatively unsophisticated and not networked. Whilst cyber-security is fundamental to the integrity of all security screening equipment, this project focuses on equipment used in central search processes, and excludes the insider threat (i.e. it is assumed those with hostile intent do not have legitimate access to systems or equipment). The aim of this project is to review existing security screening equipment and systems used for screening passengers and their belongings to identify any cyber-security vulnerabilities and support development of good practice guidance for the airport security industry. The output of the project will support development of guidance to the airport security industry that will ensure cyber security is considered alongside other security requirements when implementing and operating security screening equipment. The vulnerability of individual equipment types will be considered, along with the environment in which they are deployed (including any corporate networks they may be connected to).