Does the definition of information security threat in GM1 ADR.OR.D.007(b) include physical threats?

No, the definition does not include physical threats.

Does the definition of information security threat in GM1 ADR.OR.D.007(b) include the effects of external systems on dependent systems?

Yes, it includes the effects of external systems on dependent systems.

GM1 ADR.OR.D.007(b) Management of aeronautical data and aeronautical information

Q: What is the definition of an information security threat according to GM1 ADR.OR.D.007(b)?

An information security threat is any circumstance or event with the potential to adversely impact the operation, systems and/or constituents due to human action (accidental, casual or purposeful, intentional or unintentional, mistaken) resulting from unauthorised access, use, disclosure, denial, disruption, modification, or destruction of information and/or information system interfaces. This includes malware and the effects of external systems on dependent systems but does not include physical threats.

Q: According to GM1 ADR.OR.D.007(b), what types of human actions are considered in the definition of information security threat?

Human actions may be accidental, casual or purposeful, intentional or unintentional, or mistaken.

Q: What are the potential impacts of an information security threat as described in GM1 ADR.OR.D.007(b)?

The potential impacts are adverse impacts on the operation, systems and/or constituents, resulting from unauthorised access, use, disclosure, denial, disruption, modification, or destruction of information and/or information system interfaces.

Navigate / EASA

Ask question Discover more Add to collection

GM1 ADR.OR.D.007(b) Management of aeronautical data and aeronautical information

ED Decision 2021/003/R

INFORMATION SECURITY THREAT

Information security threat may be any circumstance or event with the potential to adversely impact the operation, systems and/or constituents due to human action (accidental, casual or purposeful, intentional or unintentional, mistaken) resulting from unauthorised access, use, disclosure, denial, disruption, modification, or destruction of information and/or information system interfaces. This includes malware and the effects of external systems on dependent systems but does not include physical threats.

Details

Source-Title: GM1 ADR.OR.D.007(b) Management of aeronautical data and aeronautical information View latest amendments

Erulesid: ERULES-1963177438-18538 Compare versions

Domain: Aerodromes

Applicabilitydate: 27 January, 2022

Entryintoforcedate: 5 March, 2021

Regulatorysource: ED Decision 2021/003/R Navigate

Regulatorysubject: Part-ADR.OR

Typeofcontent: GM to IR (Guidance material to implementing rule)

Origin: EASA

Category: EAR