GM1 ATM/ANS.AR.A.025A Immediate
reaction to an information security incident or vulnerability with an impact
on aviation safety
ED Decision 2023/010/R
When deemed
necessary, a two-step mechanism could be used: a report alerting about the
information security event or incident and the availability of additional data
that would require controlled and confidential distribution. This report
should only alert recipients of the urgency and the necessity for
organisations and competent authorities to establish further communication
through secure means.
Therefore, the
report should consist of two parts: one limited to mostly public information
and one containing the sensitive data that should be restricted to the
recipients who need to know. Wherever possible, reports should be based on an
agreed taxonomy.
[applicable
from 22 February 2026 - ED Decision 2023/010/R]
Loading collections...