Dear Colleagues,
are you aware of any guidance from EASA about the development of an Aircraft Network Security Program (ANSP) or Aircraft Information Security Program (AISP)? I'm aware of material from the FAA (AC119-1) and CAAS (AC 121-7-2). Thank you in advance!

Davide MARTINI

Dear Marc-Ch. Reichle,

in July 2020 EASA has amended the Certification Specifications to introduce cybersecurity objectives in the type certification of aviation products. Below is the link to the web page of the publication with all the links to the downloadable material:

https://www.easa.europa.eu/document-library/agency-decisions/ed-decisio…

In particular, guidance on how to achieve compliance to the regulatory provision regarding information security aspects for initial and continuing airworthiness are described in the document AM 20 section 42. Below is the link to the AMC 20 webpage:

https://www.easa.europa.eu/document-library/certification-specification…

Hope this helps.


Sign up or Log in to join the discussion