Cybersecurity is a critical issue that airports and airlines take seriously nationwide. October marks Cybersecurity Awareness Month, and the City of Philadelphia Department of Aviation and other organizations host various events to inform and educate employees on cybersecurity.  

On October 1, PHL’s Information Security team held its first Cybersecurity Summit, featuring inspiring and informative talks from industry leaders about cyber preparedness. 

“The Cybersecurity Summit reinforces the airports’ commitment to a resilient security posture by equipping employees with the knowledge, tools, and shared responsibility needed to keep Philadelphia International Airport (PHL) and Northeast Philadelphia Airport (PNE) secure today and in the future,” said Chief Information Security Officer Jamaine Mungo. “It is an opportunity to learn practical skills, engage with industry leaders, and build a culture of shared responsibility that keeps PHL and PNE resilient against the evolving threats, empowering employees to play an active role in defending our organization.” 

Speakers included representatives from the Pennsylvania State Police, the Federal Bureau of Investigation (FBI), Splunk, the Cybersecurity and Infrastructure Security Agency (CISA), and members of the Department’s information security team. Topics included identifying cyber vulnerabilities, phishing, ransomware, internal and external threats, financially motivated cybercrimes, hacking, cryptocurrency, malicious cyber activity, and spear phishing, among other topics.   

The best way companies can avoid cyber threats is by having trained employees who can recognize cyber threats and report them internally as part of their job responsibilities.  “It takes about 60 seconds for someone to see an email, read it, click the link, and enter their credentials,” said Pennsylvania State Police Cybersecurity Intelligence Manager Christopher Allwein. “Just 60 seconds --that’s why educating employees is one of the most important aspects of cybersecurity. Positive reinforcement works best with employees.”    

The Department of Aviation’s Information Security Department provides a few simple cyber hygiene tips:  

• Think before you click – hover over links, verify sender addresses, and never download unexpected attachments.  

• Use strong, unique passwords – avoid using the same password across accounts. 

• Enable multi-factor authentication (MFA) – Wherever possible, use MFA – it adds an extra layer of protection.  

• Keep software updated – outdated systems are a top target for hackers. Apply updates as soon as they’re available.  

• Report Suspicious Activity – If you see something odd, report it immediately.