Cybersecurity Awareness Training Mandatory for Employees in the Secure Air Cargo Chain

As of October 15, a new obligation applies to companies in the secure civil aviation supply chain in the Netherlands: they must include the Cybersecurity Awareness training in their security program. This means that employees working with critical information systems in the secure air cargo chain are required to complete a Cybersecurity Awareness training. Special Cargo College is the first training provider in the Netherlands to offer this course. 

Why new regulations

This new obligation has been announced by the Royal Netherlands Marechaussee (KMar) and is based on Implementing Regulation (EU) 2015/1998, Article 11.2.8.2. Digital security is becoming an increasingly important part of aviation security. Cyber threats are growing, and information systems play a crucial role in keeping the chain safe.  

Demonstrable knowledge

Therefore, the security programs of regulated agents and known consignors must be supplemented with specific information on cybersecurity. This must be implemented no later than mid-October. This means that certain employees must demonstrably have knowledge of cybersecurity. For this reason, a mandatory Cybersecurity training is now introduced for those working with critical ICT systems. 

For whom?

The training is mandatory for employees who have access to digital systems that contribute to the security of civil aviation. For example: 

• HR information systems
• EU database for known consignors and regulated agents
• Booking systems (AWB)
• Cargonaut (E-link)
• Warehouse management systems
• CCTV systems
• Access control systems

Who is exempt?

There are exceptions: employees who have already completed a training from NOBB (such as Employee, Inspector, Supervisor, or Security Manager) do not need to take the new training. In addition, IT specialists who have completed a recognized education program with a substantial cybersecurity component may be exempted by the security manager. However, the organization must document this administratively and be able to demonstrate it during an audit. 

Our Cybersecurity Awareness e-learning

As the first training provider in the Netherlands, Special Cargo College already offers this mandatory training. It is an e-learning course, available in Dutch or English, lasting approximately two hours. The training is accessible but contains essential knowledge about cyber threats, minimizing risks, and how to respond to cyberattacks. To remain certified, you must repeat this course every five years. 

More information

For more information or to register for the course, you can view the course page:

Do you need help or have questions about drafting the security program? Please get in touch.