ICAO Assembly Resolution A40-10 requested ICAO to develop an action plan to support States and industry in the adoption of the Aviation Cybersecurity Strategy. Accordingly, ICAO developed the Cybersecurity Action Plan (CyAP). The first edition of the CyAP was published in November 2020, and the second edition in January 2022.

The CyAP provides the foundation for ICAO, States and stakeholders to work together, and proposes a series of principles, measures, and actions to achieve the objectives of the Aviation Cybersecurity Strategy's seven pillars. To that end, the CyAP develops the pillars of the Strategy into 32 Priority Actions, which are further broken down into 51 tasks to be implemented by ICAO, States, and stakeholders.