Rethinking cyber security in Fiji and the Pacific: Analyzing breaches, challenges, and pathways to cyber resilience

As cyber threats to critical infrastructure continue to escalate, the aviation sector—an essential pillar for connectivity and economic stability across the Pacific—faces unique vulnerabilities. For small island states such as Fiji, where aviation is both a national and regional enabler, the implications of a cyber incident go beyond operational disruption—they impact national security, economic development, and regional trust.

This presentation offers a focused and practical exploration of cybersecurity challenges and resilience strategies within the aviation sector of Fiji and the broader Pacific Islands. Drawing from my experience as Manager ICT and Cybersecurity at the Civil Aviation Authority of Fiji (CAAF), I will provide real-world insights into the evolving risk landscape affecting air traffic systems, airport operations, surveillance technologies, and digital communication platforms.

Fiji's aviation infrastructure, while compliant with ICAO standards, faces resource limitations, geographic constraints, and an increasing volume of cyber threats ranging from ransomware to state-sponsored reconnaissance. Compounding these challenges is a lack of cybersecurity capacity, regulatory harmonisation, and incident response maturity across the Pacific region.

Central to this presentation is the role of strategic partnerships in addressing these challenges—particularly Australia's growing leadership in regional cyber resilience. Through the Pacific Step-up, Cyber Cooperation Program, and collaboration with the Australian Cyber Security Centre (ACSC) and CERT Australia, Australia has played a critical role in developing cybersecurity maturity in Pacific aviation ecosystems. I will present case studies showcasing the impact of this collaboration—such as technical assessments, regulatory capacity building, and the development of a regional CERT-to-CERT engagement strategy.

The presentation will also introduce a proposed Pacific Aviation Cybersecurity Framework, designed to align with ICAO’s Global Aviation Security Plan (GASeP), NIST CSF, and regional strategic initiatives. This framework addresses governance, risk assessment, workforce capability, incident response, and threat intelligence sharing in a model suited to small states with limited capacity but high criticality.

Attendees will gain a deep understanding of:

This session is highly relevant to cybersecurity professionals, critical infrastructure regulators, aviation authorities, and policymakers involved in shaping cyber resilience across the Indo-Pacific. By sharing regional insights and lessons learned, this presentation will help attendees understand not only how to protect aviation infrastructure—but how to build sustainable, sovereign cyber capability in the Pacific through trusted regional partnerships.