Avionics News September 2019 - 65

EASA PROPOSES CYBERSECURITY REGULATIONS
Continued from page 31

between information security management systems and
other management system requirements.
"While cybersecurity is typically addressed at the
aircraft level, the EASA proposal requires a management
system approach that is not fully defined at the repair
station or CAMO (continuing airworthiness management
organization) level," said Ric Peri, AEA vice president of
government and industry affairs. "The AEA will continue to
monitor this rulemaking."
The EASA is working cybersecurity efforts with the
European Strategic Coordination Platform for Cybersecurity
in Aviation, which includes the European Commission,
European Defence Agency, and aviation industry
associations, among others. The International Civil Aviation
Organization, the Federal Aviation Administration, and other
aviation authorities act as observers to ESCP proceedings.
NPA 2019-07 follows another recent NPA related to

cybersecurity. In February, the EASA published NPA
2019-01, Aircraft Cybersecurity. NPA 2019-01's objective
is to mitigate the potential effects of cybersecurity
threats on safety, citing consequences of intentional
acts of interference with aircraft networks and systems.
The EASA states the proposal takes "into account the
interdependencies between aviation safety and security,
in order to mitigate the safety effects caused by potential
cybersecurity threats." The NPA specifies "intentional" acts,
i.e., nefarious hacking of aircraft systems, differentiating it
from existing rules related to aircraft safety.
The EASA is accepting comments on NPA 2019-05 until
Sept. 6, 2019, and NPA 2019-07 until Sept. 27 through its
automated comment response tool and anticipates adopting
the rule no sooner than the summer of 2021. The EASA will
also publish certification specifications, acceptable means of
compliance and guidance material by the end of 2021.
The agency specifically requested feedback from
stakeholders on an implementation timeline but published
an example timeline of 24 months for compliance. q

AVweb:

Not for wanna-be's or used-to-be's.
Over 230,000 news-hungry
subscribers,
More than 82% are owner-pilots
who fly and buy.
AVwebFlash and AVwebBiz e-newsletters are
published four days weekly, providing the
latest GA news to active owner-pilots who
want to keep up with the latest industry
news, new products and technology-delivered
to their iPhones, iPads, Androids, tablets
and desktops.
AVweb advertisers including Avidyne,
Aspen Avionics, BendixKing, Bose, Flightcom,
ForeFlight and Sennheiser know that Avweb
delivers.

That's because AVweb subscribers are techsavvy, owner-pilots who fly and buy-not
wanna-be's or used-to-be's.
They want news they can use: expert video
in-flight demos, new product analysis and
comparison, industry commentary and blogs,
and now, features about proficiency, safety
and the emergence of restored, rebuilt and
remanufactured aircraft.
You read AVweb, your customers read AVweb.
It's free and it's fast.
Find out how AVweb advertising, webinars
and videos can deliver customers for you.
Ask about special ad rates for AEA members. Call Tom Bliss at 602-625-6815.
Or, email: tom@avweb.com.

The world's premier independent GA news source.
avionics news

*

september

2019

65
http://www.avweb.com
Avionics News September 2019

Table of Contents for the Digital Edition of Avionics News September 2019
