GM1 ARA.GEN.135A
Immediate reaction to an information security incident or vulnerability with
an impact on aviation safety
ED Decision 2023/010/R
When deemed necessary, a
two-step mechanism could be used: a report alerting about the information
security event or incident and the availability of additional data that would
require controlled and confidential distribution. This report should only alert
recipients of the urgency and the necessity for organisations and competent
authorities to establish further communication through secure means.
Therefore, the report should
consist of two parts: one limited to mostly public information and one
containing the sensitive data that should be restricted to the recipients who
need to know. Wherever possible, reports should be based on an agreed taxonomy.
[applicable from 22 February
2026 — ED Decision 2023/010/R]
Loading collections...