The cyber threats to aviation take numerous forms: state-sponsored attacks, cyber-crime, hacktivists. The scale of the threat means it is no longer truly possible to be completely cyber-secure. The real goal should be “cyber-resilience,” focusing both on defending against attacks and quickly reacting should such an attack succeed. We have to recognise that cyber-attacks are and will successfully hit aviation. Taking this viewpoint could help ensure that attacks create less significant interruptions to services for shorter periods of time.