← View all articles 01 Oct 2025

Cybersecurity Month: Keeping your PAX and CREW data safe with ISO/IEC 27001

Cybersecurity Month: Keeping your PAX and CREW data safe with ISO/IEC 27001

October is Cybersecurity Awareness Month — a reminder of how important it is to protect data and IT systems in our digital world. In this article, we look at international security standards like ISO/IEC 27001 and share simple steps you can take to help keep your passenger and crew data safe. Because in cybersecurity, every detail — and every user — counts.

For the PnrGo team, protecting passenger (PAX) and crew (CREW) data is more than just a technical matter — it’s a core business priority. As October begins, we want to take this opportunity to raise awareness about cybersecurity among our users. 

Cybersecurity: What is it and why does it matter in aviation?

Cybersecurity refers to the practices, technologies, and policies used to protect digital systems and digital information from unauthorized access, modifications, attacks, and data breaches.

PAX and CREW data management often involves handling personal identification documents, travel itineraries, and crew schedules. Keeping this information secure is essential for complying with data protection laws, maintaining trust, and ensuring smooth operations. That’s why companies in the aviation and travel tech industries prioritize robust, multi-layered security measures to protect every part of their systems.

ISO/IEC 27001: PnrGo meets the international security standard

PnrGo is certified for compliance with ISO/IEC 27001, an internationally recognized standard for Information Security Management Systems (ISMS). The certification covers the full scope of our core services: design, implementation, and maintenance of IT solutions that we operate. On top of ISO/IEC 27001, we also meticulously comply with GDPR regulations enforced within the European Union.

What does ISO/IEC stand for?

ISO is the International Organization for Standardization, and IEC is the International Electrotechnical Commission. Together, these organizations have developed the guidelines for establishing, implementing, maintaining, and continuously improving information security. 

When a company is certified under ISO/IEC 27001, it means it has implemented a structured system to manage risks related to the security of data it owns or processes — and that this system follows the best practices and principles defined by the international standard.

Your role in cybersecurity: 3 simple tips to implement today

While PnrGo infrastructure is built with security at its core, data protection is a shared responsibility. End users play a vital role in keeping data secure — and even small actions can make a big difference. Here are three simple practices you can start using today to support our collective security efforts.

Use strong passwords

While it may seem obvious, it is crucial to use strong passwords to protect PAX and CREW data entered into your Flight Management System or the PnrGo platform

A secure password should be unique, consist of at least 16 characters (the longer, the better) and include a random mix of uppercase and lowercase letters, numbers, and special characters. Avoid using personal information, common words, or predictable patterns. 

If managing multiple complex passwords at work is challenging, consider using a trusted password manager to generate and securely store them.

Activate two-factor authentication

We strongly encourage all our users to enable Two-Factor Authentication (2FA) when accessing the PnrGo system. This simple step adds an extra layer of protection by requiring not just your password, but also a secondary code — typically sent to your phone or generated in an app — to log in.

All PnrGo team members use Multi-Factor Authentication daily, and we recommend the same for every user to ensure that even if your password is compromised, your data remains secure.

Log out and lock your screen

When using PnrGo or any system that handles sensitive data, remember to always log out (as a precaution, the PnrGo system sets a session timeout, with a visible countdown next to your user name in the title bar). Simply closing the browser or tab isn't enough to end your session securely.

In addition, make it a habit to lock your screen whenever you step away, even briefly. This quick action helps prevent unauthorized access and reinforces a culture of security awareness.

Secure together

Cybersecurity goes beyond international standards, strong passwords and multi-factor authentication — it’s about shared responsibility and ongoing collaboration. When we all follow best practices and stay alert, we help keep passenger and crew data safe, private, and protected.

Let’s stay secure — this month and always.

 

Are you interested in automated PAX and CREW data transfers? Schedule a call with one of our Sales Representatives to discuss your needs.

Partners:

Airplane Manager logo.
Collins Aerospace logo.
European Business Aviation Association logo.
FL3XX logo.
JESTER logo.
Jetex logo.
Leon Software logo.
Nuvolops logo.
REDiFly logo.
SITA logo.
Skylegs logo.
Airplane Manager logo.
Collins Aerospace logo.
European Business Aviation Association logo.
FL3XX logo.
JESTER logo.
Jetex logo.
Leon Software logo.
Nuvolops logo.
REDiFly logo.
SITA logo.
Skylegs logo.