2024 Elevating Impact Report | Page 35

Cybersecurity

Cybersecurity

Investor Relations
Investor relations are a key component of the Airports Authority’ s commitment to financial transparency. Our approach includes consistent outreach to financial partners, timely disclosures, and responsive communication with stakeholders. The Investor Relations page on our website offers regular updates, voluntary disclosures, and access to relevant financial documents. We respond promptly to bondholder inquiries and publish unaudited financial statements monthly following board review. In line with continuing disclosure requirements, we also submit required information to the Electronic Municipal MarketAccess( EMMA) system, ensuring public access to essential filings.
Employee Pension and Retirement Programs
Employees remain central to the Airports Authority’ s long-term success. In 2024, we continued to invest in their development, compensation, and financial security. These efforts included ongoing support for employee training, merit-based pay, and stable funding for health insurance and retirement benefits.
Our pension plans remained in a strong financial position. As of year-end, the general employee retirement plan was funded at 85.8 percent on a market value basis and 89.7 percent on an actuarial value basis. The police and firefighters’ plan showed comparable strength, funded at 89.1 percent and 86.3 percent on those same respective bases. In addition, post-employment medical and life insurance benefits were well-supported, with funding at 90.4 percent.
Enhancing Cybersecurity Practices in 2024: A Comprehensive Approach
In 2024, significant strides in bolstering our cybersecurity practices were made, focusing on training our people, process improvements and technological advancements. By improving our efforts in these areas, we significantly improved our cybersecurity posture, making us more resilient against cyber threats. We continue to build a robust cybersecurity program that will increase the Authority’ s resilience to adverse cybersecurity events that impact our airports.
2023 and 2024, ransomware, phishing, supply chain and distributed denial of service were the top four threat vectors to the aviation industry. Here’ s a look at the measures we implemented to enhance our cybersecurity posture.
Training and Awareness Recognizing that our people are our first line of defense, we prioritized comprehensive training for employees and our security team. We introduced more robust programs that included short training sessions, engaging videos and interactive games. Additionally, we increased the frequency of phishing tests to better prepare our staff for real-world threats. This multifaceted approach ensured that our team was well equipped to recognize and respond to potential cyber threats. In 2025 we will be introducing Security Awareness Proficiency Assessment( SAPA) and cybersecurity culture surveys to the program.
120 %
100 %
80 %
60 %
40 %
20 %
106.3 % 108.2 % 104.8 %
106.9 %
113.6 % 113.1 %
86.1 % 86.2 %
89.2 % 89.1 %
85.8 % 82.4 %
Process Improvements and Automation To stay ahead of evolving cyber threats, we reviewed and updated our cybersecurity processes, incorporating automation to streamline our operations. Automation allowed us to enhance our efficiency and effectiveness in detecting and responding to cybersecurity incidents. By automating routine tasks, our security team could focus on more complex and strategic activities, ultimately improving our overall security posture.
0 %
2019 2020 2021 2022 2023 2024
General Employees Police Officers & Firefighters
140.0 %
120.0 %
100.0 % 93.8 %
80.0 %
60.0 %
117.1 %
122.1 %
90.7 %
98.3 %
90.4 %
Technology From a technology perspective, we made a strategic decision to reduce the number of security tools we manage. We migrated to a comprehensive security platform that not only increased our efficiency and improved our ability to detect and respond to incidents. This platform enabled us to more effectively manage threat intelligence gathered from multiple sources, providing a holistic view of the threat landscape and allowing for quicker, more informed decision-making.
40.0 %
20.0 %
0.0 % 2019 2020 2021 2022 2023 2024
REGULATORY COMPLIANCE | 2024 IMPACT REPORT 34
METROPOLITAN WASHINGTON AIRPORTS AUTHORITY