Product Certification – Cybersecurity on STCs Projects
During the EASA Part 21 Workshop 2024, Aviation Cybersecurity Experts from EASA Certification Directorate provided a presentation on Product Certification and Cybersecurity Requirements focusing on STC projects, followed by a very constructive workshop with DOAs representatives.
The following topics were discussed:
- Overview of Cybersecurity Requirements and AMCs
- Evaluating Changes from the Cybersecurity Standpoint
- Defining EASA Level of Involvement in Certification Projects for the Cybersecurity discipline

Presentation is available in the following link (Side Meetings)
However, if the certification basis of the aircraft does not include the security requirements, a new requirement would be needed to include this demonstration. I assume in form of a new CRI for the STC, correct?
On top of this, the demonstration shall be limited to the new system, not to the whole aircraft.
Please log in or sign up to comment.