Cybersecurity 2025

BRAZIL Trends and Developments Contributed by: Juliana Abrusio and Mario Cosac, Machado Meyer

al Civil Aviation Organization (ICAO). Decree No 11,195/2022 introduces innovative secu - rity measures, including risk assessments and security protocols for public and airport areas, and addresses threats from man-portable air defence systems (MANPADS). Notably, it incor - porates cybersecurity regulations to identify vul - nerabilities and implement protective measures for data and communication systems, ensuring the confidentiality, integrity and availability of information. In April 2023, ANAC established the Cybersecu - rity Committee (“CSC/ANAC”) through Portaria No 11.126. This committee aims to co-ordinate, harmonise and consolidate ANAC’s efforts in cybersecurity, implementing policies to pro - tect civil aviation against cybersecurity threats. The CSC/ANAC takes over the responsibilities of the Cybersecurity Working Group ( Grupo de Trabalho de Segurança Cibernética , or GTSC), established in August 2020, and serves as the sectoral co-ordination team ( Equipe de Pre- venção, Tratamento e Resposta a Incidentes Cibernéticos de Coordenação Setorial , or “ETIR Setorial”) as per Decree No 10.748, which cre - ated the Federal Network for Cyber Incident Management ( Rede Federal de Gestão de Inci- dentes Cibernéticos , or ReGIC). The CSC/ANAC comprises representatives from various organi - sational units within ANAC – each responsible for different aspects of aviation security – and is co-ordinated by the Superintendence of Airport Infrastructure ( Superintendência de Infraestrutu- ra Aeroportuária , or SIA). Throughout 2023, ANAC faced numerous chal - lenges and achieved significant milestones in cybersecurity. Recognising the growing reliance on ICT in civil aviation, ANAC took proactive measures to mitigate emerging risks and vulner - abilities . The agency released two key manuals,

the Civil Aviation Cybersecurity Awareness Man- ual and the Cybersecurity Assessment Manual , based on international standards. These docu - ments aim to raise awareness among aviation professionals and help organisations assess and improve their cybersecurity maturity. Addition - ally, ANAC engaged in international co-operation with organisations such as ICAO, the European Union Aviation Safety Agency (EASA) and the European Organization for Civil Aviation Equip - ment (“EUROCAE”), fostering collaboration and information exchange on cybersecurity. In 2024, ANAC continued its efforts to modernise and enhance aviation security with the publica - tion of Resolution No 753 on 9 August 2024. This resolution, approved during the 12th deliberative meeting of ANAC’s collegiate board, mandates the adoption of technical and technological solu - tions to improve civil aviation security against unlawful interference and elevate operational safety. The resolution aims to enhance passen - ger services and airport capabilities by imple - menting new equipment and procedures. ANAC will define the minimum criteria for the accept - ance of these technologies and methodologies, tailored to the size, resources, and needs of each aerodrome. This resolution is part of the broader Airports+Security programme, which was launched in June 2023 by the federal gov - ernment to ensure that Brazilian airports meet the highest standards of safety and security. Telecommunications sector The National Telecommunications Agency ( Agência Nacional de Telecomunicações , or ANATEL) has a range of publications on cyberse - curity, encompassing regulations (such as Reso - lution No 767/2024), public policies, guidelines, and other documentation and studies aimed at bolstering cybersecurity within its domain.

CHAMBERS.COM