Performance And Accountability Report - Fiscal Year 2013 - Federal Aviation Administration - U.s. Department Of Transportation Page 52
ADVERTISEMENT
1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 
27 
28 
29 
30 
31 
32 
33 
34 
35 
36 
37 
38 
39 
40 
41 
42 
43 
44 
45 
46 
47 
48 
49 
50 
51 
52 
53 
54 
55 
56 
57 
58 
59 
60 
61 
62 
63 
64 
65 
66 
67 
68 
69 
70 
71 
72 
73 
74 
75 
76 
77 
78 
79 
80 
81 
82 
83 
84 
85 
86 
87 
88 
89 
90 
91 
92 
93 
94 
95 
96 
97 
98 
99 
100 
101 
102 
103 
104 
105 
106 
107 
108 
109 
110 
111 
112 
113 
114 
115 
116 
117 
118 
119 
120 
121 
122 
123 
124 
125 
126 
127 
128 
129 
130 
131 
132 
133 
134 
135 
136 
137 
138 
139 
140 
141 
142 
143 
144 
145 
146 
147 
148 
149 
150 Information Security
cyber incident is measured in hours, with each system’s ISCP
Ensure no cyber security event significantly degrades or
documenting the maximum tolerance for downtime in hours. If
disables a mission-critical FAA system.
this calculation results in a positive number, then the incident is
FY 2013
Ensure no cyber security event significantly degrades or
Target
counted as an event.
disables a mission-critical FAA system.
FY 2013
0
Today’s electronically-networked environment requires that the
Result
FAA’s more than 300 computer systems be secure. In FY 2013,
Public
The public benefits from an efficient, safe and secure
with zero cyber events that significantly degraded or disabled any
Benefit
national airspace with no disruption of services.
mission-critical FAA systems, we resoundingly met our goal. FAA
employees were able to continue to provide, and the flying public
The FAA operates one of the most complex aviation systems
continued to benefit from, the safest, most efficient aviation
in the world—consisting of thousands of people, procedures,
system in the world.
facilities, and equipment—that results in safe and expeditious
Our compliance program meets federal, departmental, and
air travel. Successful operation of the national aviation system
agency policies that require the regular testing and evaluation of
depends upon our ability to continuously track the position,
information security policies, procedures, and practices. During
routes of flight, and movement of aircraft. Unfortunately,
FY 2013, we completed a comprehensive assessment of our
attackers seek to exploit the critical infrastructure behind this
security systems to ensure that policies were being correctly
capability. Through cyber events (attacks conducted through
implemented and were providing full protection to all parts of the
computers), they persist in attempts to disrupt critical services by
agency.
exploiting software, hardware, and network infrastructure flaws.
The future of information security at the FAA calls for continuous
How is the number of events determined? The computation of
refinement of agency services, clarification and implementation
a cyber event is based on the time the system is not available,
of additional performance measures, and increased use of new
minus the maximum tolerance for downtime in the system’s
technologies to protect the agency and the flying public.
information security contingency plan (ISCP). The time for each
Information Security
Number of cyber security events that significantly degrade or disable a mission-critical FAA system
FY 2007
FY 2008
FY 2009
FY 2010
FY 2011
FY 2012
FY 2013
Actual
0
0
0
0
0
0
0
Target
0
0
0
0
0
0
0
Target
✓
✓
✓
✓
✓
✓
✓
Achieved?
50
|
|
Federal Aviation Administration
Fiscal Year 2013
Performance and Accountability Report
ADVERTISEMENT
0 votes
Related Articles
Related forms
Form Hud-2063 - Schedule Of Federal Housing Administration Debentures Authorized And Requisitioned - Original Issue - Office Of Housing Federal Housing Commissioner - U.s. Department Of Housing And Urban Development
Legal
Form 4530 - Registration And Amendments Of Foreign Charter Operators Under Part 380 Of The Regulations Of The Department Of Transportation - U.s. Department Of Transportation
Legal
Faa Form 8110-26 - Supplemental Type Inspection Report (stir) - U.s. Department Of Transportation
Legal
Form Hud-2537 - Mortgagee's Application For Partial Settlement - Multifamily Mortgage - Office Of Housing Federal Housing Commissioner - U.s. Department Of Housing And Urban Development
Legal
Related Categories
Parent category: Business