MOC 3 VTOL.2500(b) Airworthiness Security in the Category Enhanced

• n/a found in: Small Category VCA (Revision 0) SC-VTOL (Oct 2024)

MOC 3 VTOL.2500(b) Airworthiness Security in the Category Enhanced n/a Airworthiness Security is the protection of the airworthiness of an aircraft from intentional unauthorised electronic interaction: harm due to human action (intentional or unintentional) using access, use, disclosure, disruption, modification, or destruction of data and/or data interfaces. This also includes the consequences of malware and forged data and of access of aircraft systems from ground systems but does not include physical attacks or electromagnetic disturbance. Improper functioning of equipment and systems can be caused by intentional unauthorised electronic interaction (IUEI). The applicant should consider cybersecurity threats as possible sources of ‘improper functioning’ of equipment and systems: (a) The equipment, systems and networks of Category Enhanced VTOL capable aircraft, considered separately and in relation to other systems, should be protected from intentional unauthorised electronic interactions that may result in catastrophic or hazardous effects on the safety of the aircraft. Protection should be ensured by showing that the security risks have been identified, assessed and mitigated as necessary. (b) When required by paragraph (a), the applicant should make procedures and instructions for continued airworthiness (ICA) available that ensure that the security protections of the aircraft equipment, systems and networks are maintained. AMC 20-42 – Airworthiness Information Security Risk Assessment is an accepted means of compliance with [VTOL.2500](#_DxCrossRefBm1877490409)(b) for Airworthiness Security aspects.