How should a BDOC respond to a suspected cyberattack on navigation data?

• A. Switch to backup navigation sources, isolate affected systems, preserve evidence, notify command, and begin cyber incident response.
• B. Ignore the alert and continue operations.
• C. Shut down all navigation capabilities permanently.
• D. Replace affected data with unverified information.

Answer: (A)

When a suspected cyberattack on navigation data occurs, safety and continuity of operations come first. The best response is to switch to backup navigation sources to maintain awareness and safe maneuvering, isolate the affected systems to prevent the breach from spreading, preserve evidence so investigators can determine what happened, notify command to bring in leadership and resources, and begin the cyber incident response process to coordinate containment, eradication, recovery, and lessons learned. This sequence protects lives and ships, keeps mission capability intact, and follows established BDOC procedures for cyber incidents.

Ignore the alert risks navigation safety; shutting down navigation permanently eliminates the ability to navigate and is not a controlled response. Replacing data with unverified information would corrupt navigation data and mislead operators, creating dangerous conditions.