Muscat, 20 October 2026

The Civil Aviation Authority (CAA) is participating as part of the 7th Information Security Technology Conference 2026 (ISTC), taking place on 20 and 21 October 2026 at Oman Convention and Exhibition Centre.

The CAA’s taking part features a dedicated booth among the participating entities, aimed at highlighting its role in sharing its cyber security experience. The booth focuses on three main areas, which are: the Authority’s role in the aviation sector, its experience in implementing the ISO 27001 Information Security Management System standard, and its approach to protecting sensitive systems and the tools used for this purpose, including round-the-clock monitoring systems.

The civil aviation ecosystem relies on interconnected digital systems covering air navigation, air traffic management, communications and airport services. Protecting these systems against cyber threats is therefore essential to ensuring operational safety and service continuity.

The Civil Aviation Authority is responsible for regulating, supervising and overseeing the civil aviation sector in the Sultanate of Oman, supporting aviation safety and security and ensuring the sustainability of its services.

Cyber security in the aviation sector aims to protect critical systems and infrastructure, ensure the continuity of services and operational activities, safeguard sensitive data and information, and enhance preparedness to address cyber threats.

The Civil Aviation Authority works to strengthen the sector’s cyber security framework through national and international frameworks, drawing on the National Cyber Defense Strategy and related national directions, as well as the International Civil Aviation Organization’s (ICAO) Aviation Cyber security Strategy.

Its efforts also encompass regulation and oversight by supporting alignment with national and international security requirements and standards, monitoring compliance in coordination with operators and service providers, and managing risks through enhanced coordination, information and expertise sharing, support for cyber risk mitigation, and improved sector readiness.

The Civil Aviation Authority has set  a Cyber security Committee for the civil aviation sector to strengthen cooperation and coordination among relevant entities, facilitate the exchange of information and expertise, discuss shared risks, and unify efforts to address cyber threats. In parallel, the Authority works to protect digital systems and assets by developing security policies and procedures, implementing the ISO 27001 Information Security Management System, managing risks and security vulnerabilities, conducting periodic security testing, and enhancing cyber incident monitoring and response capabilities.

 The Authority also actively participates in specialized national, regional and international events and initiatives to exchange expertise and keep pace with technological developments. Among its notable contributions, the Sultanate of Oman, represented by the Civil Aviation Authority, hosted the eighth ICAO Security Week in 2024.

The Authority adopts international and regional best practices to protect aviation and air navigation systems, including ICAO standards relating to aviation security, while complying with national cyber security regulations and initiatives, such as the Cyber security Index and the “Hadatha” program. It also develops the necessary frameworks, policies and procedures and circulates them to all sector entities for implementation.

The Civil Aviation Authority is committed to participating in national and international events and forums and sharing its cyber security experience with other sectors, including education and telecommunications.

 The Authority is also working towards adopting modern and advanced solutions and tools to address current and emerging cyber threats, including those associated with artificial intelligence and their potential impact on the aviation sector.

Source:

Civil Aviation Authority (CAA)