ED Decision 2014/012/R
SECURITY MANAGEMENT FOR AERONAUTICAL DATA AND AERONAUTICAL INFORMATION PROVISION ACTIVITIES
(a) The security management objectives should be:
(1) to ensure the security of aeronautical data and aeronautical information received, produced, or otherwise employed so that it is protected from interference, and access to it is restricted only to those authorised; and
(2) to ensure that the security management measures meet appropriate national, EU, or international requirements for critical infrastructure and business continuity, and international standards for security management, including:
(i) ISO/IEC 17799:2005 — Information technology — Security techniques — Code of practice for information security management;
(ii) ISO 28000:2007: — Specification for security management systems for the supply chain.
(b) Regarding the ISO standards, the relevant certificates issued by an appropriately accredited organisation, are considered as an Acceptable Means of Compliance.
Loading collections...