Navigate / EASA

AMC1 ATCO.AR.A.025A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety

ED Decision 2023/010/R

(a)       To appropriately collect and analyse information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should implement means that ensure the necessary confidentiality.

(b)       When disseminating information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should properly select the appropriate recipient(s) to prevent the content of a report from being exploited to the detriment of aviation safety, by revealing, for instance, uncorrected vulnerabilities.

[Applicable from 22 February 2026 – ED Decision 2023/010/R]