We’re familiar with the computer blue screen of death. Your laptop crashed, and you must return it to its original working state. What if the laptop was an aircraft and the blue screen was caused by a cybersecurity incident? Unlike a typical information technology (IT) system, an aircraft cannot be completely wiped and reimaged if it has experienced a cyber security incident. Also, unlike an operational technology (OT) or integrated control system (ICS), an aircraft cannot be firewalled off from the rest of the world to prevent cybersecurity issues. How can we address these issues and restore an aircraft to a pre-cybersecurity event condition? This session will address the current state of aircraft cybersecurity recovery, identify gaps, and propose solutions.