AMC1 ARA.GEN.135A Immediate reaction to an information
security incident or vulnerability with an impact on aviation safety
ED Decision 2023/010/R
(a) To appropriately collect and analyse information related to
information security incidents and vulnerabilities with a potential impact on
aviation safety, the competent authority should implement means that ensure
the necessary confidentiality.
(b) When disseminating information related to information security
incidents and vulnerabilities with a potential impact on aviation safety, the
competent authority should properly select the appropriate recipient(s) to
prevent the content of a report from being exploited to the detriment of
aviation safety, by revealing, for instance, uncorrected vulnerabilities.
Loading collections...