SecureAirport – Building a Strong Risk Culture

1. Case Study Overview: SecureAirport

Objective:

To develop a robust and engaged risk culture across the SecureAirport organization—one that embeds awareness, ownership, and proactive management of risk into every level of operation.

Vision:

SecureAirport aims to move beyond compliance toward a living culture of safety, resilience, and responsibility. This means every employee—whether on the runway, in air traffic control, or in administration—understands their role in protecting passengers, colleagues, and assets.

2. Defining the Desired Risk Culture

The goal was to create a recognizable brand of culture that employees could relate to and be proud of.

Using an “Angel and Devil” thematic approach (inspired by CAA’s campaign), SecureAirport’s internal brand contrasts Positive Risk Behaviours (Angel) with Risk Blind Spots (Devil)—helping staff visualize daily choices and their impact on security and resilience.

This theme runs through:

• Visual communication campaigns (posters, digital screens, training assets)

• Storytelling in workshops and newsletters

• Reward and recognition programs highlighting “Angel Actions”

3. Leadership Engagement – Walking the Walk

To make culture visible from the top, senior management launched the “Leadership on the Ground” programme:

• Regular walk-rounds by executives and managers to engage directly with staff

• Open discussions about risks, incidents, and improvement ideas

• Listening sessions to uncover “opportunity risks” for enhancing operations and customer experience

This visible commitment built trust and demonstrated leadership accountability in embedding risk management into daily behaviours.

4. Initial Assessment – The SecureAirport Risk Maturity Model

SecureAirport developed a Risk Maturity Model, adapted from the SecureBank framework, to assess and benchmark risk culture across all departments.

The model measures maturity across dimensions such as:

• Leadership & Governance

• Risk Awareness & Communication

• Operational Controls & Assurance

• Continuous Improvement

Each department was evaluated to ensure a true picture of risk understanding and performance, helping to pinpoint where focus and training were most needed.

(Visual: a sample extract of the maturity model table or heatmap could be included here)

5. Clear Vision and Strategic Engagement

The management team facilitated Risk Strategy Workshops involving employees and key stakeholders to:

• Build mutual trust and ownership of the airport’s risk objectives

• Co-create the Risk and Resilience Management System (RRMS)

• Ensure the strategy was transparent, practical, and fully understood

Ongoing Communication:

Progress and performance against the strategy were shared through regular updates, newsletters, and dashboards—ensuring visibility and continuous reinforcement of SecureAirport’s commitment to transparency.

6. Training, Awareness, and the Risk Calendar

To support long-term engagement, SecureAirport introduced a Risk Awareness Calendar.

This calendar was built from insights drawn from the maturity model and risk assessments, ensuring every topic aligned with real operational risks.

Each month featured:

• A targeted risk theme (e.g., “Insider Threat Awareness,” “Operational Disruptions,” “Cyber Hygiene”)

• Interactive workshops and scenario-based e-learning modules

• Communication points where staff could contribute, share ideas, or report observations

Inspired by the Mauritius Bank proposal, SecureAirport integrated multiple engagement channels, including:

• Staff competitions or quizzes to reinforce learning

• Monthly “Ask the Risk Team” drop-in sessions

• Visual campaigns (digital signage, email bulletins, and storytelling videos)

This approach positioned training not as a compliance requirement—but as a visible, vibrant culture-building activity demonstrating the airport’s commitment to safety and resilience.

7. Summary – Building the SecureAirport Culture

Through leadership visibility, a defined maturity model, collaborative strategy workshops, and an engaging training programme, SecureAirport transformed risk management into an everyday mindset—a shared responsibility embedded in the organization’s DNA.