In response, the FAA has launched a major modernisation effort: a Request for Information (RFI) has been issued, and "Industry Days" are being held to gather contractor proposals. The plan aims to complete the overhaul within four years, a goal some experts regard as “wildly optimistic” given the complexity and critical nature of air traffic control systems.
To shed light on the situation, we spoke with Sergii Bataiev, Director of Architecture and Technology at ELEKS.
In the age of AI and GPS, why is ATC still stuck with floppy disks and Windows 95?
These systems are in continuous, 24/7 operation. You can't just shut them down for upgrades without risking disruption to national airspace. They are not hosted in the clouds, where you can use blue-green deployment (software deployment strategy that minimises downtime and risk by using two identical production environments, named "blue" and "green") and easily replace the legacy system - demands bespoke solutions to retrofit or replace components.
Take the Boeing 747-400, still in service today, which was designed decades ago when floppy disks were cutting-edge technology. Updating their systems isn’t as simple as plugging in a USB; it requires lengthy re-certifications that can take months and cost millions. It forces airlines to rely on what’s already certified and reliable, even if that means using storage technology that’s older than some pilots.
The legacy platforms, although old, are well-understood, resilient, and tightly integrated, a double-edged sword. Modernising means designing completely new systems or gradually upgrading existing ones, re-architecting key components, introducing automation, and embracing DevOps practices.
When updating legacy systems, it’s important to prioritise business needs and future requirements. It could be related to some quality attributes such as availability, performance, reliability, security, usability, compatibility, portability, maintainability, and others. Additionally, modern technologies such as AI and cloud data migration tools can help accelerate the migration process. Of course, each system must be thoroughly quality-tested.
What are the real risks and gains of these old technologies?
Windows 95 and Floppy Disks are isolated from other networks and can’t be easily hacked remotely. But they are fragile: spare parts are scarce, and skilled technicians are retiring. Recent outages like the January 2023 NTIS incident show they’re failing under pressure.
In short, while legacy systems provide certain protective benefits, they're increasingly deteriorating and maintenance-intensive.
Is the FAA’s four-year goal realistic, and what should we watch next?
Four years is aggressive. Digital transformation can’t be compared to replacing PCs at an office. You’re overhauling mission‑critical national infrastructure. Expect multi-phase rollouts, layered testing, and perhaps at least a decade of transition.
That means careful staging and rigorous security, especially against cyberattacks and parallel operations (old and new systems running concurrently) until the full switchover is safe.
For example, Japan's three-year "war on floppy disks" illustrates how bureaucratic inertia can persist even in technologically advanced nations. The requirement for over 1,000 government regulations to accept floppy disk submissions until 2024 demonstrates how regulatory frameworks can become technological anchors.
Related insights
