AMC1 ARO.GEN.135A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety

• ED Decision 2023/010/R found in: Air Operations (965/2012) Part-ARO Part-ORO Part-CAT Part-SPA Part-NCC Part-NCO Part-SPO (Feb 2025)

AMC1 ARO.GEN.135A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety ED Decision 2023/010/R (a) To appropriately collect and analyse information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should implement means that ensure the necessary confidentiality. (b) When disseminating information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should properly select the appropriate recipient(s) to prevent the content of a report from being exploited to the detriment of aviation safety, by revealing, for instance, uncorrected vulnerabilities. *[applicable from 22 February 2026 — ED Decision 2023/010/R]* ##### AMC1 ARO.GEN.135A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety *ED Decision 2023/010/R* (a) To appropriately collect and analyse information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should implement means that ensure the necessary confidentiality. (b) When disseminating information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should properly select the appropriate recipient(s) to prevent the content of a report from being exploited to the detriment of aviation safety, by revealing, for instance, uncorrected vulnerabilities.