Appendix III -- Examples of aviation services and interfaces

• ED Decision 2023/009/R found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)
• ED Decision 2025/014/R found in: Information Security (2023/203 and 2022/1645) Part-IS (Dec 2025)

Appendix III — Examples of aviation services ED Decision 2023/009/R The following is a non-exhaustive and non-complete list of aviation services that can be used as a basis to identify the scope of risk assessment for the organisation. <table border="0" cellpadding="0" cellspacing="0" width="557"> <tr> <td nowrap="" valign="top" width="557"> <p>aerodrome ATM-MET services provider</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>aeronautical digital map service</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>AIM (external)</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>airport</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>APP ACC</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>ATC (external)</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>ATC superior</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>ATM </p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>ATM-MET services provider</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>civil AU operations centre</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>communication infrastructure</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>ER ACC</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>FIS/TIS data integrator</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>national AIM</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>navigation infrastructure — ground-based</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>navigation Infrastructure — satellite-based</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>non-ATM-MET services provider </p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>non-aviation users (external)</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>regional AIM</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>regional ASM</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>regional ATFCM</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>state AU operations centre</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>static aeronautical data service</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>sub-regional DCB common service provision</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>sub-regional/local ATFCM</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>sub-regional/national ASM</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>surveillance infrastructure airport</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>surveillance infrastructure en-route</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>surveillance infrastructure TMA</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>time reference (external)</p> </td> </tr> <tr> <td nowrap="" valign="top" width="557"> <p>tower (TWR)</p> </td> </tr> </table> ##### Appendix III — Examples of aviation services and interfaces *ED Decision 2025/014/R* **AVIATION SERVICES** The following is a non-exhaustive and non-complete list of aviation services that can be used as a basis to identify the scope of the risk assessment for the organisation. — aerodrome & ATM-MET service providers — aeronautical digital mapping services — aeronautical information management (AIM) – external, national, regional — airports — air traffic control (ATC) – external, superior — air traffic management (ATM) — approach (APP) & area control (ACC) Services – ER ACC, APP ACC — cargo and passenger loading — civil & state airspace user (AU) operations centres — communication infrastructure — flight information services / traffic information services (FIS/TIS) data integrator — fuel calculation — navigation infrastructure – ground-based, satellite-based — non-ATM meteorological (MET) service providers — mass & balance calculation — non-aviation users (external) — regional & sub-regional airspace management (ASM) and air traffic flow & capacity management (ATFCM) — static aeronautical data services — sub-regional demand & capacity balancing (DCB) common service providers — surveillance infrastructure – airport, en-route, terminal manoeuvring area (TMA) — route planning — time reference services (external) — tower (TWR) services **INTERFACES** Below are some examples of data exchange at the interfaces between organisations interacting in different functional chains, which can be used as a basis for identifying the scope of the risk assessment for the organisation. Note 1: These examples are graphical representations based on the ‘**Examples of ecosystem data exchange’ provided in EUROCAE ED-201A, Appendix B - Tables B-14**, which can be consulted for further information. Note 2: Although it is not an organisation, an aircraft has been included in all these examples for the sake of completeness of the description of the data exchange. The aircraft should be considered as an element within the scope of the ISMS of the organisation to which it belongs (typically the airline). Any data exchange between aircraft and other systems within the organisation should take into account existing security measures that may have been evaluated as part of aircraft certification (see also [GM1 IS.I.OR.205(c)](#_DxCrossRefBm1749084314)).  ***Figure 1: Interfaces of other organisations with an airline operator***  ***Figure 2: Interfaces of an airline operator with other organisations***  ***Figure 3: Interfaces of other organisations with a maintenance service provider***  ***Figure 4: Interfaces of a maintenance service provider with other organisations***