Air Macau Limited Presentation On Security Culture

Aviation Security Culture
1
Air Macau Security policy
Safe flight
Endorsed by CEO
Continues improving
Unified policy
Report whenever you suspect
Information sharing
Training
You & me
Aviation Security Training 2
What is Security Culture ?
Security Culture is a set of norms, beliefs, values,

attitudes and assumptions that are inherent in the daily
operation of an organization and are reflected by the
actions and behaviours of all entities and personnel
within the organization.

Security is Everyone's Responsibility
Security Culture must be developed and promoted from TOP to DOWN.
From Top Management to all departments to all staffs.
All staff should understand the nature of the threats that everyone and the
organization face. Without this awareness, there will be a lack of desire to
embed a positive security culture.
Security belongs to everyone and bakes security into everything they do.

Security is Everyone's Responsibility
Every staff has significant role in the Security Program

所有員工在保安計劃中都有要職
Operational staff performs security duties

前線員工執行保安職責
Management, back office staff offers support

to each staff when performing security duties.
(e.g. legal, human resources, hardware / software, financial and training, etc.)
管理層、後勤員工為前線員工提供支援
5
Why is Security Culture important ?

Benefit of Security Culture
The benefits of an effective security culture include:
• Employees are engaged with, and take responsibility for,
security issues;
• Levels of compliance with protective security measures
increase;
• The risk of security incidents and breaches is reduced by
employees thinking and acting in more security-conscious ways;
• Employees are more likely to identify and report
behaviors/activities of concern;
• Employees feel a greater sense of security; and
• Security is improved without the need for large expenditure

Insider Threat
What is insider threat?

Any individual with inside knowledge or access has the
potential to harm the organization and its people.
The threat may be come from full or part-time permanent

employees, individuals on attachment or secondment,
contractors, consultants, agency staff, temporary staff or staff
from other organizations .
8
Different kind of Insider Threat
Malicious 惡意: Employees who aim to hurt their organization or their colleagues. Ego,
personal advantage, money, political or religious belief.
• Theft (of information), Violence, terrorism(support), espionage, helping others to get
illegal access, Selling information to criminals
Negligent 過失 : Employees who are aware of security policies and procedures but decide to
bypass them.
• Lend badges to colleagues.
• Illegal copying of information to personal devices.
• Share passwords.
• Authorization of visitors without airport ID cards or without escort.
Accidental 意外: Employees who are aware of security policies and procedures but
accidentally bypass them.
• Forgetting procedures,
• Accidentally sending information to wrong person.
• Sharing access and/or passwords.

Mitigation of Insider Threat
Investigation & Disciplinary

How to manage the insider threat effectively?

Case Study-Unsuccessful terrorist plot in Somalia
Daallo airlines 159, 2016
https://www.youtube.com/watch?v=i_DAXMImSBc
12
Case Study-Unsuccessful terrorist plot in Somalia
Incident Summary:
In 2016, airport employees handed a laptop containing an
explosive device to a passenger. Activating and explosive device
at high altitude would have brought the plane down, killing all
74 passengers and crew.
Harm done:
Two persons injured onboard the aircraft.
One casualty (the person carrying the explosive device).
Breach in the fuselage of the Daallo Airlines airplane.
13
You are the eyes and ears of Air Macau
You can help protect NX and the people around you.
How to do ?
 Follow security measures at all times.
 Speak up if colleagues neglect security measures.
 Speak up if there are no security measures, or if they are not
strict enough.
14
Reporting
Encouraging reports
Reporting mechanisms are a key part of a strong security culture – reporting helps to
understand what is going on in security. A strong culture also supports peers
challenging one another when security processes are broken/ignored.
Reporting time frames – Initial reporting Reporting time frames -Follow up written report

Report whenever you suspect
If you see something that doesn’t look right
Written reports shall be submitted via any of the following forms:
 Security Incident/Event Report – SPM Annex 8
 Other AMU controlled forms if SPM Annex 8 is unavailable-Captain’s report,
Cabin Crew report or other divisional forms.
A. Initial reporting to AOC-OCC by either in person, telephone, VHF

Transmission, SMS, ACARS or other prompt and practical means; and
B. Follow-up written report with relevant document (as available) to CQD thru:
1. E-mail (security@airmacau.com.mo); or
2. Fax (+853 8396 6522); or
3. OCS (MFM-HDQ-18A, CQD)
We’ll sort it.

See it. Say it. Sorted.
16
Information sharing
Each Security Monthly Meeting Report including the Global Aviation
Security Awareness is available in the intranet’s Corporate Quality Center
after each monthly meeting.
Staff are encouraged to address any feedback and comments, through

local GM or directly, to the undersigned via email. Additionally,
constructive contribution to the publication is welcome by all staff,
especially significant topics related with security within respective
jurisdictions.
17
Security belongs to everyone and
bakes security into everything they do.
Thank you !
18

Air Macau Limited Presentation On Security Culture

Uploaded by

Copyright:

Available Formats

Air Macau Limited Presentation On Security Culture

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Air Macau Limited Presentation On Security Culture

Uploaded by

Copyright:

Available Formats

Aviation Security Culture

Security Culture is a set of norms, beliefs, values,

Aviation Security Training 3

Security Culture must be developed and promoted from TOP to DOWN.

From Top Management to all departments to all staffs.

Aviation Security Training 4

Every staff has significant role in the Security Program

Operational staff performs security duties

Management, back office staff offers support

Aviation Security Training 6

Aviation Security Training 7

What is insider threat?

The threat may be come from full or part-time permanent

Aviation Security Training 9

Investigation & Disciplinary

Aviation Security Training 10

Aviation Security Training 11

Daallo airlines 159, 2016

Aviation Security Training 15

A. Initial reporting to AOC-OCC by either in person, telephone, VHF

We’ll sort it.

Staff are encouraged to address any feedback and comments, through

You might also like