Annex 17 and unlawful interference
Aviation security protects civil aviation against deliberate hostile acts while preserving the safety, regularity and efficiency of flight.
Why Annex 17 exists
A sharp rise in violent acts against civil aviation led to an Extraordinary Session of the ICAO Assembly in 1970. ICAO then developed international security standards, and the Council adopted Annex 17 in 1974. Annex 17 is titled Security: Safeguarding International Civil Aviation Against Acts of Unlawful Interference. Its standards and recommended practices coordinate governments, airport operators, aircraft operators, police, security agencies, air traffic services and every organisation that protects a flight.
The primary objective is the safety of passengers, crew, ground personnel and the public. Each Contracting State establishes an organisation, regulations, practices and procedures that protect civil aviation. The system must work in normal conditions and be capable of rapid expansion when the assessed threat increases. Security arrangements should cause the least practicable interference or delay consistent with effective protection.
Acts of unlawful interference
| Act or attempted act | What it means operationally |
|---|---|
| Unlawful seizure in flight | Taking or attempting to take control of an aircraft while it is in flight. |
| Unlawful seizure on the ground | Taking or attempting to take control of an aircraft before departure or after landing. |
| Hostage taking | Holding persons on board an aircraft or at an aerodrome to compel action. |
| Forcible intrusion | Unauthorised forced entry into an aircraft, aerodrome or aeronautical facility. |
| Weapon or hazardous device | Introducing a weapon, explosive, hazardous device or material for a criminal purpose. |
| Use of an aircraft as a weapon | Using an aircraft in service to cause death, serious injury or serious damage. |
| False information | Communicating false information that jeopardises an aircraft, passengers, crew, ground staff, the public, an aerodrome or a civil aviation facility. |
A system wider than hijacking
Early security attention concentrated on unlawful seizure. The system later broadened to sabotage, attacks in flight, attacks on facilities, dangerous items, insider risk and false threats. Preventive measures therefore extend from the terminal entrance and supply chain to the aircraft cabin, flight crew compartment and air traffic service response.
India's national aviation security system
India converts Annex 17 into a national programme, binding rules, approved security programmes, oversight and coordinated action at each civil airport.
Bureau of Civil Aviation Security
The Central Government constituted the Bureau of Civil Aviation Security, BCAS, as the specialist aviation security regulator and oversight authority. BCAS began as a DGCA cell in 1978 and became an independent department under the Ministry of Civil Aviation in 1987. It lays down aviation security standards, monitors compliance, surveys security needs, coordinates aviation security matters, checks the readiness of security staff and tests contingency plans.
The Director General of BCAS heads the Bureau. The Aircraft Security Rules identify the Commissioner of Security (Civil Aviation), BCAS, as the appropriate authority for Annex 17 functions. The national structure assigns regulatory direction and oversight to BCAS while airport operators, aircraft operators, security agencies and other regulated entities implement approved measures.
National Civil Aviation Security Programme
The National Civil Aviation Security Programme, NCASP, is the coordinated national framework. It sets responsibilities, standards, preventive controls, training, quality control and contingency arrangements. The appropriate authority establishes, develops, implements, maintains and reviews it. Airport security programmes and aircraft operator security programmes must be compatible with the NCASP. Code share partners must also meet the applicable operator programme.
Rules and source date
Bali's mapped edition describes the Aircraft (Security) Rules, 2011. The Ministry of Civil Aviation now publishes the Aircraft (Security) Rules, 2023. The enduring examination point is that Indian civil aviation security is governed by statutory security rules, the NCASP and directions issued by the appropriate authority. Operational compliance always uses the current notified rule and current BCAS direction.
| Body or instrument | Core function |
|---|---|
| Ministry of Civil Aviation | Central government policy and statutory framework. |
| BCAS | Standards, regulation, coordination, approval, monitoring and security oversight. |
| NCASP | National allocation of security responsibilities and required controls. |
| Aircraft Security Rules | Binding legal duties, powers, approvals, offences and enforcement. |
| Airport operator | Facilities, access arrangements and the approved airport security programme. |
| Aircraft operator | Passenger, baggage, cargo and aircraft protection under an approved programme. |
| Aviation Security Group | Specialised government agency unit authorised to safeguard civil aviation and property at an aerodrome. |
Reporting and inquiry
An aircraft operator, aviation security group, aerodrome operator, regulated agent or catering establishment reports a security accident or incident immediately to the Commissioner. The Commissioner may investigate and may appoint an Inquiry Officer of the rank prescribed by the rules. Fast reporting preserves evidence, enables corrective action and connects the local event to national oversight.
Security programmes, threat and quality control
A security programme turns a broad national objective into assigned duties, trained people, tested procedures and records that prove the controls work.
Programme hierarchy
The NCASP provides the national baseline. Each airport and aircraft operator then maintains a written security programme approved under the national system. Other entities, including regulated agents and catering establishments, follow their approved security arrangements. A programme identifies who performs each control, how access is authorised, how screening is conducted, how protected items remain secure, how incidents are reported and how the organisation responds to a raised threat.
Threat and risk
Security measures are adjusted to the assessed threat. A threat is the possibility that a hostile person or capability may attempt an act. Vulnerability is a weakness that could be exploited. Risk combines the likelihood and consequences of that act after considering existing controls. A higher threat can justify added screening, restricted movement, extra guarding, aircraft search or a change in operating procedure.
Quality control
A national quality control programme verifies compliance and effectiveness. Audits examine systems and records. Inspections examine a defined activity or location. Tests challenge a control under managed conditions. Surveys identify security needs and vulnerabilities. Exercises test the coordination and practicality of contingency plans. A finding is not closed merely because a document has been issued; corrective action must remove the cause and be verified.
| Quality activity | Question it answers |
|---|---|
| Audit | Does the organisation have a complete and effective security system? |
| Inspection | Is a particular control being applied correctly at this place and time? |
| Test | Will the control detect or prevent a simulated threat? |
| Survey | What protection is needed for this airport, operation or facility? |
| Exercise | Can agencies execute the contingency plan together? |
Training, competence and human factors
Persons who apply security controls must be selected, trained, certified where required and kept competent. Human performance matters at screening points, access gates, patrols and control rooms. Fatigue, distraction, poor supervision and routine familiarity can weaken detection. Clear procedures, recurrent training, realistic tests and a security culture help personnel recognise unusual behaviour and report concerns without delay.
Security culture
Security is not confined to a uniformed guard. Staff challenge unauthorised access, protect passes and passwords, prevent tailgating, preserve sterile areas, report unattended items and follow information controls. Managers supply resources and treat security reporting as an operational necessity. Insider risk is reduced through background checks, access limited to need and continuing supervision.
Airport zones and access control
Airport security works in layers: a person or vehicle encounters progressively stronger controls before reaching the aircraft and other critical assets.
Landside, airside and security restricted area
| Zone | Access character | Typical controls |
|---|---|---|
| Landside | Publicly accessible parts of the airport and nearby facilities. | Surveillance, patrol, terminal protection and response to unattended or suspicious items. |
| Airside | Movement area, adjacent terrain and buildings or portions where access is controlled. | Pass checks, controlled doors and gates, vehicle permits, escort and perimeter protection. |
| Security restricted area | Priority risk area where additional controls apply. | Identity and authority check, screening where required, continuous protection and controlled movement. |
| Critical asset | Aircraft, control room, navigation facility, baggage area or other protected function. | Access only for a current operational need, with local authorisation and monitoring. |
Security restricted areas normally include the screened passenger route to the aircraft, the ramp, baggage make-up areas, locations where aircraft are brought into service, screened baggage and cargo areas, cargo sheds, mail centres, airside catering facilities and aircraft cleaning premises. The airport security programme defines the boundary and the exact control applied at each access point.
Access is both identity and need
A pass proves that the holder has been authorised. It does not create unlimited access. Personnel and vehicles enter only the zones required for duty, display or produce identification as required and comply with screening and escort rules. A pass is not shared, copied or used after expiry. Lost passes and suspicious access attempts are reported promptly. A person opening a controlled door prevents tailgating and ensures the door secures after passage.
Vehicles and supplies
Vehicle access is controlled by permit, driver authority, inspection or screening as applicable, route limitation and parking restrictions. Supplies entering protected zones come through an approved chain and remain protected after security control. Randomness and unpredictability can supplement standard measures, but they do not replace the required baseline.
Design supports security
New construction and alterations integrate security requirements from the start. Good design separates screened and unscreened flows, limits uncontrolled doors, gives staff clear sight lines, protects baggage and cargo routes and prevents access from roofs, service ducts or adjoining premises. Security built into the facility is usually more reliable than a later procedural workaround.
Passengers and baggage
Screening detects prohibited articles before boarding, while protection and reconciliation prevent a cleared item from being substituted or carried without the required passenger link.
Passenger and cabin baggage screening
Originating passengers and their cabin baggage are screened before boarding an aircraft engaged in protected operations. Transfer and transit arrangements prevent an unscreened route to the aircraft. Screening may use equipment, physical search or another approved method. A cleared person must remain within the protected flow until boarding.
Mixing after screening
Screened passengers and cabin baggage must not mix or come into contact with unscreened persons or items after the screening point. If mixing occurs, the affected passengers and their cabin baggage are screened again before boarding. This restores confidence in the sterile flow; a head count alone cannot prove that no prohibited item was introduced.
Hold baggage controls
Originating hold baggage is screened before loading and protected from unauthorised interference after screening. The operator identifies accompanied and unaccompanied baggage and applies the required additional control to unaccompanied baggage. Passenger and baggage reconciliation prevents baggage of a person who did not board from travelling merely because it was accepted at check-in.
| Stage | Required security result |
|---|---|
| Acceptance | Identify the passenger and baggage, apply acceptance controls and create a traceable record. |
| Screening | Resolve alarms and prevent prohibited articles from progressing. |
| Protection | Keep screened baggage secure through make-up, transport and loading. |
| Reconciliation | Confirm the passenger status and the permitted baggage relationship. |
| Loading | Load only baggage whose security status is known and acceptable. |
Unidentified and mishandled baggage
Unidentified baggage is baggage at an airport, with or without a tag, that is not collected by or identified with a passenger. It is reported and handled under the security procedure rather than casually opened or moved. Mishandled baggage remains subject to security control during tracing, storage and forwarding.
Disruptive passengers
Measures dealing with disruptive passengers include safeguards at check-in and screening, communication with the operator and pilot-in-command where required, and action proportionate to the threat. A passenger's behaviour can affect acceptance for carriage even when the person has passed equipment screening.
Cargo, mail, stores and supplies
The aircraft supply chain must establish security status before loading and preserve that status from the control point to the aircraft.
Cargo and mail
Cargo and mail intended for carriage by air receive screening or other approved security controls before loading. The control must be capable of addressing the assessed threat and the nature of the consignment. Once secure, the consignment is protected from unauthorised interference until departure. If protection is lost, its security status is no longer assumed and the required control is applied again.
Regulated agent and known consignor
A regulated agent is approved to apply security controls to cargo or mail on behalf of an operator within the secure supply chain. A known consignor originates cargo or mail for its own account and uses procedures that permit carriage under the applicable security rules. Approval does not mean that every package bypasses security. It means the entity's controls, records, staff and facilities form part of the regulated system and remain subject to oversight.
Stores, catering and cleaning
In-flight supplies, airport supplies and catering items are controlled before entering a security restricted area or aircraft. Catering establishments and aircraft cleaning premises are therefore part of the security system. Staff identity, vehicle entry, seal or delivery integrity, protected storage and a traceable handover help prevent insertion of a prohibited article after screening.
| Material | Before loading or entry | After control |
|---|---|---|
| Cargo | Approved screening or supply-chain control and known security status. | Protection, identification and traceability to the aircraft. |
| Security control compatible with the postal and aviation chain. | Protected transfer and access limited to authorised staff. | |
| Catering | Prepared by an approved establishment under controlled procedures. | Sealed or otherwise protected vehicle and supervised delivery. |
| Aircraft stores | Inspection or screening as required before airside entry. | Secure storage and controlled issue to the aircraft. |
| Cleaning equipment | Staff, vehicle and items checked under the airport programme. | Accounted for after the task and prevented from concealing articles aboard. |
Suspicious consignments
Broken seals, unexplained routing, inconsistent documents, unauthorised access or an unresolved screening alarm requires security action. The item is isolated according to the contingency procedure, the appropriate authority is informed and no one improvises an unsafe examination. Evidence and chain of custody are preserved.
Aircraft security check, search and protection
The aircraft itself must be protected, inspected to the required depth and handed over with a known security status before passengers and goods are carried.
Security check and security search
| Measure | Depth and purpose | When used |
|---|---|---|
| Aircraft security check | An inspection of accessible areas to discover suspicious objects, weapons, explosives or other dangerous devices, articles and substances. | Applied under the approved programme according to origin, turnaround and protection status. |
| Aircraft security search | A thorough inspection of the interior and exterior, including defined concealed and less accessible areas, to find the same threats. | Used when the programme, threat, loss of protection or security circumstance requires the deeper measure. |
A check is not simply a quick glance, and a search is not a renamed check. The approved checklist defines zones, responsibility, sequence, recording and action on a suspicious item. Staff account for cleaning equipment, stores and maintenance access so that an ordinary object is not mistaken for an abandoned item and an unauthorised object is not overlooked.
Protection from unauthorised interference
An aircraft is protected from the start of the check or search until departure. Doors, steps, bridges and service panels are controlled. Persons approaching the aircraft have identity and operational need. If protection is lost, the operator assesses the breach and repeats the necessary inspection before restoring security status.
Flight crew compartment
Security requirements include protection of the flight crew compartment and procedures for opening and closing its door. The aircraft operator's programme covers access authority, communication with cabin crew and response to attempted intrusion. Security personnel and crew use procedures that do not create a predictable weakness.
Items left aboard
Articles left by disembarking passengers, unaccounted service items and suspicious objects are dealt with before the next protected operation. Through-flight procedures identify what legitimately remains aboard and verify that no passenger or unauthorised person introduced another item.
Weapons and persons in custody
A weapon or a person whose status can create risk is managed by prior authority, operator coordination and information to the pilot-in-command.
Preventing unauthorised weapons
States establish measures to prevent unauthorised weapons, explosives and other dangerous devices from being introduced on an aircraft. Screening, access control, cargo measures and aircraft protection work together. Electronic or battery-operated items receive attention when their construction or contents could conceal an explosive device.
Authorised carriage by law enforcement or security personnel
Carriage of a weapon by a law-enforcement officer, security officer or other authorised person requires authorisation under the laws of the States involved. For foreign police, security staff or bodyguards, the State of embarkation notifies the State of arrival in advance. Transit and destination requirements are coordinated. The pilot-in-command is told of the authorised armed person and the information needed for safe control, including seating as applicable.
Persons in custody and deportees
The State establishes procedures so the operator and pilot-in-command are informed when a person in custody or a deportee will travel. The authority supplies enough information for the operator to assess risk and apply appropriate measures. The person may be boarded before other passengers, seated away from critical areas and escorted when required. Restraints, documentation, escort competence, meals and use of lavatories are controlled without degrading safety or human dignity.
| Case | Required coordination | Pilot-in-command information |
|---|---|---|
| Unauthorised weapon | Prevent carriage, isolate the item and notify the responsible security authority. | Operationally relevant threat information through the security procedure. |
| Authorised armed officer | Prior authorisation and agreement of States and authorities involved. | Number, identity or status and seating information as required. |
| Person in custody | Risk assessment, escort and operator acceptance under approved procedures. | Status, risk, escort and measures necessary for safe carriage. |
| Deportee | Formal removal information, travel documents and assessment of disruptive risk. | Notification before departure with the applicable safeguards. |
Operator decision and command
Government authorisation does not remove the operator's duty to comply with its programme or the pilot-in-command's responsibility for safety aboard. Information is shared on a need-to-know basis. Unnecessary disclosure can itself create a security weakness.
Response to unlawful interference
When prevention fails, the system protects life, supports the aircraft, coordinates information and preserves control of the response.
Aircraft in flight
An aircraft subjected to unlawful interference endeavours to notify the appropriate air traffic services unit of the event, significant circumstances and any necessary deviation from the flight plan. ATS gives the aircraft priority, minimises conflict with other aircraft, gathers pertinent information and passes it to concerned units and authorities. If direct notification is impossible, the pilot uses the applicable unlawful-interference procedure while considerations aboard remain decisive.
Assistance from the State
A Contracting State provides assistance needed by an aircraft subjected to unlawful seizure, including navigation aids, air traffic services and permission to land. Information is sent to ATS units along the route and at known, likely or possible destinations so that safeguarding action can be prepared. Local distribution includes the airport administration, operator and other responsible organisations.
Aircraft on the ground
If the affected aircraft lands in a State, that State takes practicable measures to retain it on the ground. Departure is allowed when the overriding duty to protect human life makes it necessary. Consultation with the State of the Operator and other concerned States is important where practicable. Passengers and crew are protected and cared for until they can continue their journey.
Notification chain
| Recipient | Reason for notification |
|---|---|
| State of Registry | The aircraft's registration State has formal responsibilities and a direct interest. |
| State of the Operator | The operator's State supports operator and response coordination. |
| States whose citizens were killed or injured | They receive relevant information about affected nationals. |
| States whose citizens are hostages | They are informed of detention and developments. |
| States whose citizens are known to be aboard | They receive relevant information about their nationals. |
| ICAO | The international organisation receives the report and security information. |
Notification is made by the most expeditious means. After the act is resolved, the concerned State provides ICAO with pertinent information on its security aspects. Response information is also exchanged with other States as appropriate.
Contingency planning
Plans identify command, communication, negotiation support, aircraft parking, emergency services, medical support, passenger care, media coordination, evidence protection and recovery. Exercises reveal gaps before a real event. Staff follow the plan and the designated command structure rather than improvising independent action.
ICAO, the AVSEC Panel and cooperation
Aviation security depends on common minimum standards because one weak transfer point, airport or supply chain can expose an international flight.
ICAO's role
ICAO develops and maintains Annex 17 and coordinates security provisions appearing in other Annexes and Procedures for Air Navigation Services. Detailed implementation guidance is contained in the restricted Aviation Security Manual. ICAO also receives reports on acts of unlawful interference and supports oversight, training, assistance and international harmonisation.
Aviation Security Panel
The Aviation Security Panel, commonly called the AVSEC Panel, is a body of specialists who advise ICAO on aviation security standards, emerging threats and practical implementation. It keeps Annex 17 under review, studies vulnerabilities, develops amendment proposals and works through specialist groups. Its work helps ICAO respond to changing threats without abandoning globally consistent minimum protection.
International cooperation
States cooperate by adapting national programmes where necessary, sharing appropriate written security information on request, including security clauses in air service agreements, considering special measures requested for particular flights, exchanging training information and supporting research into improved security equipment. Sensitive information is protected so that cooperation does not reveal exploitable details.
Security and facilitation
Security and facilitation are coordinated, not treated as opposites. Screening and access controls must achieve their security purpose, while process design, shared data and adequate staffing reduce unnecessary delay. The correct measure is effective, proportionate to risk and capable of being applied consistently.
| Level | What it contributes |
|---|---|
| ICAO | Global standards, guidance, reporting framework and international coordination. |
| AVSEC Panel | Expert review of threats, vulnerabilities and proposed changes to Annex 17. |
| Contracting State | National law, NCASP, appropriate authority and oversight. |
| Airport and aircraft operators | Approved programmes, facilities and daily implementation. |
| Every authorised worker | Correct control, protection of access and immediate reporting of concern. |
Final mental model
Security begins with a threat-informed national programme. It is delivered through controlled people, places, baggage, cargo, supplies and aircraft. Quality control confirms that these layers work. If an act occurs, contingency plans protect life, assist and retain the aircraft where practicable, notify the required States and ICAO, and support recovery.