Maintaining Your Operation’s Safety and Security During Times of Crisis Continued from page 47 ■■ CYBERCRIME/HACKING – The Journal of Accountancy states: when a natural disaster occurs, cybercriminals take full advantage of the chaos by launching attacks on businesses’ IT systems and targeting victims and volunteers with phishing scams.5 After Hurricanes Michael and Florence occurred in the fall 2018, a utility company in North Carolina reported it was attacked by a computer virus that encrypted its files and databases. The company was asked to pay a ransom to the hackers for the release of the data.6 Security is not the only concern. Operators also need to remain aware of safety risks to their crew and equipment. Under stressful circumstances, medical transport pilots and flight crew may demonstrate attitudes that are hazardous in nature. These attitudes include complacency, invulner- ability/denial, impulsiveness, emotional jet lag, a willing- ness to push the limit in order to complete a mission and/ or risk-taking. In June 2018, the National Transportation Safety Board (NTSB) ruled pilot error as the cause of a 2016 medical helicopter crash in Alabama. The NTSB found the pilot’s disregard for the weather conditions and determination to complete the rescue mission were major contributing factors in the crash. All four people on board the helicopter, including the patient, were killed. Aviation operators impacted by, or responding to a disaster report, work around the clock on little sleep, flying back-to-back missions to bring in much needed supplies and evacuate injured victims, and receiving assistance from dozens of outside volunteers. With so much activity going on, operators should be alert to the high risk of fatigue in their flight and ground crew, which can lead to failures to properly check over an aircraft or maintain it before flight. Additionally, there are risks associated with having unvet- ted volunteers on the property and using donated aircraft that may or may not have been properly maintained. ESTABLISHING A CRISIS PLAN BEFOREHAND The good news is that aviation operators and FBOs can mitigate potential risks by forming and 5 https://www.journalofaccountancy.com/news/2018/sep/cyber- criminals-prey-on-natural-disaster-victims-201819720.html 6 https://www.witn.com/content/news/ONWASA-victim-of- cyber-attack-refuse-to-pay-ransom-497586181.html 7 https://www.tsa.gov/sites/default/files/2017_ga_security_guidelines.pdf implementing a crisis plan before one occurs. When cre- ating a crisis plan, operators should first look at what their security and safety risks in a disaster will be. The Transportation Security Administration’s (TSA) most recent version of Security Guidelines for General Aviation Airport Operators and Users contains numerous suggestions on airport security enhancements. Some sug- gestions include monitoring vehicles entering the property and verifying the identity of passengers, drivers, delivery personnel, workers and others with a need to enter the airport property.7 Operators can use these recommenda- tions as a foundation for creating their crisis plan. For instance, if the operator anticipates the use of volunteers then it could implement security measures that include: ■■ Receiving a list of volunteers before they arrive ■■ Verifying volunteers’ identity on arrival ■■ Briefing volunteers on existing safety/secu- rity guidelines and encouraging them to say something if they see something suspicious ■ ■ Using staff to supervise volunteers at all times Additional procedures to ensure existing security and safety guidelines are followed during a disaster are always recommended. This may include more fatigue detection analysis of flight crew, bringing in extra crew from other bases, establishing a partnership with neigh- boring operators and procedures to keep gates, doors and hangars locked or otherwise secured. If the opera- tion anticipates it will be working with donated aircraft, then it should consider creating procedures for the transport, operation and maintenance of the aircraft. Once an operator has a crisis plan drafted, the next step is to ensure all staff members are trained on how to imple- ment and follow it in the event of a disaster. Emergency practice drills and regularly-scheduled training sessions can keep the entire company prepared. If the operator lives in an area where seasonal disasters like fires, torna- does, tropical storms or hurricanes occur, then they may want to consider additional trainings prior to the start of the season as an extra measure. Remember, a crisis plan is only effective if everyone knows about it and uses it. 48 Aviation Business Journal | 4th Quarter 2018
