Civil Aviation Authority Of NZ

The Civil Aviation Authority of New Zealand is a Crown entity, accountable to the Minister of Transport, that has been regulating the country's skies since 1992. Its mandate covers the full spectrum of flight - from commercial airlines and air transport to recreational flying and drone operations. This means the CAA's threat model is fundamentally about safety-critical infrastructure: the systems and data that ensure planes fly, pilots are qualified, and aerodromes meet standards. The attack surface isn't just a corporate network; it's a national regulatory apparatus where a breach or integrity failure could have cascading, real-world consequences.

Internally, the work spans regulatory policy development, digital solutions, and advanced aviation technologies. The digital solutions team builds and maintains the systems that underpin the regulatory process itself. For cybersecurity, this likely means a focus on protecting the integrity and availability of databases tracking pilot certifications, aircraft registrations, and airworthiness directives, alongside securing the CAA's own operational technology posture. The organization works closely with both domestic stakeholders and international partners, which implies complex data-sharing arrangements and supply chain dependencies that need careful security governance.

The culture signals point to a collaborative, improvement-oriented environment, but this is still a government body with high-stakes accountability. Security work here isn't about defending a SaaS platform - it's about safeguarding the infrastructure of trust for an entire national aviation ecosystem. The CAA is a small, focused regulator, which typically means tight-knit teams, broad-scope responsibilities, and the need for generalists who can also go deep when required.