CONFIDENTIAL · Airbus Protect internalCGN / EDDK · pre-meeting briefing
CGN
EDDK
Pre-Meeting Dossier · ACI EUROPE 2026 · Prague

Cologne Bonn Airport

🇩🇪Flughafen Köln/Bonn GmbH (KölnBonn) · Germany · Booth 130
Approach vector — An OT and supply-chain security play unlike any other in the room. Europe's logistics powerhouse — UPS, FedEx, DHL hubs running 24/7 automation — with a brand-new private 5G network and a government-aviation presence. The attack surface is enormous and the tolerance for downtime is zero.
UPS Europe hub
190,000 pkg/hr
Operating mode
24/7 cargo
Investment projects
25+ since 2022
Private 5G
Live (NTT)
Status
Warm
01

Who we're meeting

named targets · relationship status
Thilo Schmid
Chairman of the Management Board (CEO)
Booth 130 · opening session
Sebastian Müller
VP IT
Existing Airbus Protect contact
David Preuss
Chief Information Officer
Owns IT & digital strategy
Relationship · WarmEntry via Sebastian Müller (VP IT). CIO David Preuss leads the digital agenda.
02

Situation board

what's happening · why now
Cargo engine
UPS, FedEx and DHL all hub here — 24/7

UPS's single European air hub (3,000+ staff, 190,000 packages/hour, 40+ nightly freighter movements), FedEx's CEE hub and DHL Express all run through CGN. This is one of Europe's most automation-dense airports — and automation means a vast OT/ICS attack surface where a single hour of downtime cascades across a continent's logistics.

New network
Private 5G campus network deployed with NTT

CGN connected the entire airport over a private 5G network for real-time data. Powerful — and a brand-new, business-critical attack surface that needs purpose-built security.

Investment
25+ major projects since 2022; €25M security checkpoint; new cargo control

A €25M CT-scanner security checkpoint completing summer 2026, a new €6M goods control centre (Cargo West), an Airport Operation Control Centre since 2023, and a climate-infrastructure programme. CGN took over its own passenger screening in January 2025 (3rd German airport to do so).

Strategic sensitivity
Co-located with German government aviation

CGN hosts the Flugbereitschaft (German government flight service). That elevates the threat profile and the bar for trusted, sovereign security partners.

03

Risk & regulatory exposure

the pressure they're under

NIS2 in force — and CGN spans transport AND logistics

NIS2UmsuCG is live (6 Dec 2025, no transition). CGN is KRITIS and a “besonders wichtige Einrichtung”: §38 liability, §32 reporting, §30 supply-chain duties, €10M/2% fines. With three global logistics tenants on shared infrastructure, the supply-chain and multi-tenant obligations are unusually heavy.

OT is the crown jewel and the soft target

Sorting systems, kilometres of conveyors, vacuum lifters, 3D scanners, building and energy management — the cargo OT estate is what attackers covet and what a 24/7 hub cannot afford to lose. Most airports' security spend skews to IT; CGN's risk is in the OT.

Private 5G + multi-tenant identity = new exposure classes

A campus 5G network and shared airside infrastructure across UPS/FedEx/DHL create identity, segmentation and OT-convergence risks that generic IT security doesn't address.

04

Opportunity map

their need → our offer · P1 = lead
CyberP1

OT / Industrial security (lead offer)

The defining need: secure the sorting, conveyor, building and energy OT that runs the hub 24/7.

Airbus ProtectCISSP-certified OT consultants secure ICS/OT and IT/OT convergence — Airbus's core industrial-security competence.
CyberP1

Private 5G & network security

A new campus 5G network is a new, critical attack surface.

Airbus ProtectSecurity architecture and assurance for the private 5G estate and its connected assets.
CyberP2

Supply-chain & multi-tenant GRC + NIS2

Three logistics giants on shared infrastructure, under a now-in-force NIS2 supply-chain regime.

Airbus ProtectFENCE-based GRC to govern third-party security baselines and produce NIS2 evidence across tenants.
CyberP2

24/7 SOC/MDR with OT visibility

Zero-downtime operations need round-the-clock detection spanning IT and OT.

Airbus ProtectManaged SOC/MDR extended into the OT estate, tuned for a 24/7 cargo environment.
CyberP2

Incident Response retainer + business continuity

An hour of downtime here is a logistics emergency; response must be instant and rehearsed.

Airbus ProtectCSIRT retainer, 24/7 hotline and BCP tailored to continuous cargo operations.
SustainabilityP3

Climate-infrastructure & decarbonisation

An active climate-friendly infrastructure programme.

Airbus ProtectDecarbonisation roadmaps and infrastructure climate-resilience assessment.
05

Why Airbus Protect — for them

the unfair advantages
USP 01

OT/industrial security is core, not a bolt-on

Airbus Protect secures industrial and OT environments as a primary competence — the exact need a logistics-and-automation hub like CGN has, and the area most cyber firms under-serve.

USP 02

Trusted, sovereign — fit for a government-aviation site

An Airbus subsidiary clears the trust bar a site co-located with the Flugbereitschaft requires. Sovereignty and discretion are built in.

USP 03

Supply-chain expertise the September attack made urgent

With UPS, FedEx and DHL on shared infrastructure under live NIS2 supply-chain duties, Airbus Protect's third-party assurance and GRC are directly on point.

USP 04

Aviation + industrial heritage in one partner

CGN is simultaneously an airport and an industrial logistics plant. Airbus Protect uniquely covers both worlds.

06

Talking points

tap to open · tailored openers
“Your risk isn't really in IT — it's in the OT that runs the sorting halls and conveyors 24/7, plus a brand-new 5G network. That's our home turf. We secure industrial estates for a living, with aviation context on top.”
“September showed a supplier you don't control can stop an airport. You have three global logistics tenants on shared infrastructure under a NIS2 regime that's now law, with personal board liability. We make that supply chain auditable — and we're an Airbus company, fit for a site that also serves government aviation.”
“The NTT 5G network is a real advantage — and a new critical attack surface. We can architect and assure its security so the operational gain doesn't become an operational risk.”