Airport security does not depend solely on infrastructure or technology, but on the ability to integrate, coordinate, simulate and adapt self-protection plans, all as part of a continuous plan.
An airport does not fail gradually. When something goes wrong, it happens quickly, with a significant impact and involving multiple parties at the same time. In this context, self-protection cannot be a document filed away or a regulatory requirement merely ticked off on paper. It must be a system that works under pressure.
Because the difference between a controlled incident and a crisis almost always lies in what happens in the first few minutes. That is where self-protection plans come in. Not as a theoretical framework, but as an operational tool for anticipating scenarios, organising the response and avoiding improvised decisions in environments where improvisation is costly. The problem is that an airport is not a single organisation. It is an ecosystem.
Airlines, ground handling agents, commercial operators, passenger assistance services and security personnel all operate side by side – each with different objectives, different work rhythms and different risks. And this is where one of the most common misconceptions arises: the assumption that security is the responsibility of the airport operator. It is not. Each organisation generates its own risks and is therefore obliged to analyse and manage them through its own emergency or self-protection plan.
But having lots of plans does not guarantee safety. In fact, it can have the opposite effect if there is no integration. The key is not simply having plans. It is ensuring that they all work as one. That is why, in the airport environment, all plans must be aligned with the airport’s Self-Protection Plan. Not to lose autonomy, but to ensure that, when an emergency occurs, every stakeholder knows what to do, but also how their actions fit into an overall response. Without such coordination, the risk is not technical. It is organisational. And that type of failure is the most difficult to manage in real time. This approach is not unique to Spain. Internationally, the ICAO has been insisting on the same thing for years: the response to aviation emergencies must be coordinated, structured and rehearsed.
Because there are certain elements that are common to any airport, regardless of the country: risk analysis, clear procedures, defined chains of command, coordination with external services and, above all, training and drills. Without drills, the plan remains theoretical. And theory does not resolve emergencies.
However, not all airports manage the same risks or operate under the same conditions. In Europe, for example, these plans are closely integrated with civil protection systems. In other countries, the approach is more autonomous, with greater responsibility resting with the airport operator. And then there is the factor that is often underestimated: the local environment.
Operating at an airport exposed to extreme weather conditions, seismic activity or volcanic risks is not the same as operating at one where these factors do not exist. Plans must be adapted to this reality, rather than simply copying generic models. In any case, one thing remains unchanged: the airport is a critical piece of infrastructure.
And that means that safety cannot depend on individual responses, but on coordinated systems. That is why an effective self-protection plan is not judged by how it is written, but by how it performs when activated.
If the teams hesitate, the plan fails.
If coordination isn’t immediate, the plan fails.
If you haven't trained enough, the plan will fail.
And when it fails, the consequences are very real.
That is why self-protection should not be seen as a one-off task, but as an ongoing process: review, training, simulation and refinement. Because in aviation, one thing is clear: emergencies don’t give you any warning. And when they strike, there is no time to interpret the plan. Only to carry it out.
