Systems like flight operations, air traffic management, booking systems, and customer data handling are integral to daily operations, making them prime targets for cyberattacks such as ransomware, phishing, and hacking attempts. Threat actors seek to compromise sensitive information, including flight schedules, customer details, and financial data, with the intent to disrupt operations or steal confidential data. Ensuring the security of these systems is not just a necessity but also a regulatory requirement. The U.S. Department of Defense (DoD) now mandates that contractors handling sensitive information comply with CMMC 2.0 (Cybersecurity Maturity Model Certification). This framework outlines the cybersecurity standards needed to protect Controlled Unclassified Information (CUI) and supports organizations in building resilient systems against cyberattacks.