AMC1 29.1319 Equipment, systems and network information security protection

• ED Decision 2023/001/R found in: CS-29 Amdt 11 - Large Rotercraft (Feb 2023)
• ED Decision 2020/006/R found in: CS-29 Amdt 10 - Large Rotercraft (Jan 2023)

AMC1 29.1319 Equipment, systems and network information security protection ED Decision 2023/001/R In showing compliance with [CS 29.1319](#_DxCrossRefBm1178332126), the applicant may consider AMC 20-42, which provides acceptable means, guidance and methods to perform security risk assessments and mitigation for aircraft information systems. The term ‘adverse effects on the safety of the rotorcraft’ should be understood in the context of information security as catastrophic or hazardous. The term ‘mitigated as necessary’ clarifies that the applicant has the discretion to establish appropriate means of mitigation against security risks. [Amdt No: 29/8] [Amdt No: 29/11] AMC 29.1319 Equipment, systems and network information security protection ED Decision 2020/006/R In showing compliance with [CS 29.1319](#_DxCrossRefBm1513259712), the applicant may consider AMC 20-42, which provides acceptable means, guidance and methods to perform security risk assessments and mitigation for aircraft information systems. The term ‘mitigated as necessary’ clarifies that the applicant has the discretion to establish appropriate means of mitigation against security risks. [Amdt No: 29/8] ##### AMC1 29.1319 Equipment, systems and network information security protection *ED Decision 2023/001/R* In showing compliance with [CS 29.1319](#_DxCrossRefBm1685772591), the applicant may consider AMC 20-42, which provides acceptable means, guidance and methods to perform security risk assessments and mitigation for aircraft information systems. The term ‘adverse effects on the safety of the rotorcraft’ should be understood in the context of information security as catastrophic or hazardous. The term ‘mitigated as necessary’ clarifies that the applicant has the discretion to establish appropriate means of mitigation against security risks. [Amdt No: 29/8] [Amdt No: 29/11]