FZAG is mid-transformation into a data-driven operation: a single Airport Operations Plan (AOP) now serves 3,500+ stakeholders, built on a consolidated data platform. Operational dependence on data is now total — and so is the blast radius of any compromise.
Zühlke (data platform, AOP, vulnerability testing), OpenText (ITSM), Omada + SECURIX (IAM/IGA — 2024 European Identity Award), Teletex (Cisco). Strong on IT delivery; thin on aviation-safety-driven security and OT. That gap is exactly Airbus Protect's lane.
FZAG runs a certified ISMS and complies with the National Aviation Security Programme (NASP). Mature governance — meaning the conversation is about depth and assurance (red teaming, OT, Part-IS), not basic hygiene.
Autonomous shuttle pilots, an innovation hub, and a fresh ESG strategy create new connected-asset attack surface and a sustainability-consulting opening.
Group security and OT standards must travel across jurisdictions — a multi-site assurance need Airbus Protect serves routinely.
Switzerland mirrors EASA regulation through its bilateral agreement; Part-IS information-security obligations reach FZAG through FOCA. Airbus Protect is an EASA-accredited Part-IS Qualified Entity — a credential almost no competitor holds.
Zurich was unaffected by the September 2025 Collins Aerospace/MUSE ransomware attack because it runs different passenger-processing systems. That is luck of vendor choice, not immunity: the third-party supply-chain risk that took down Heathrow, Brussels and Berlin is structural across aviation.
FZAG sits inside Switzerland's national critical-infrastructure strategy, with new NCSC reporting obligations under the revised Information Security Act. Resilience and reporting maturity are board-level topics.
Honegger's domain. New piers, autonomous ground vehicles and integrated operations need Model-Based Safety Assessment and SMS rigour.
Part-IS reaches Zurich via FOCA; few Swiss partners can operationalise it.
Baggage handling, building management, runway lighting, docking systems — the OT estate behind a data-driven airport is the soft underbelly.
Zühlke does vulnerability testing; an independent, aviation-context adversarial test is a different assurance level.
Total data dependence means an incident is an operational stoppage. Pre-arranged response is resilience.
New ESG strategy + climate-resilience of infrastructure against extreme weather.
A subsidiary of Airbus — not a generalist MSSP. Zurich's partners are excellent at IT; none can claim 40 years securing the world's most complex aircraft and aviation systems.
Officially recognised by EASA to help implement Part-IS. For an airport reached by Part-IS through FOCA, that is a near-unique credential.
Honegger's safety remit and the airport's cyber needs converge in one partner — Airbus Protect runs both, with the same systems engineering discipline.
A European, sovereignty-respecting partner with no hyperscaler conflict — fitting for Swiss critical infrastructure and a neutral-nation operator.