GM1 ARO.GEN.135A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety

• ED Decision 2023/010/R found in: Air Operations (965/2012) Part-ARO Part-ORO Part-CAT Part-SPA Part-NCC Part-NCO Part-SPO (Feb 2025)

GM1 ARO.GEN.135A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety ED Decision 2023/010/R When deemed necessary, a two-step mechanism could be used: a report alerting about the information security event or incident and the availability of additional data that would require controlled and confidential distribution. This report should only alert recipients of the urgency and the necessity for organisations and competent authorities to establish further communication through secure means. Therefore, the report should consist of two parts: one limited to mostly public information and one containing the sensitive data that should be restricted to the recipients who need to know. Wherever possible, reports should be based on an agreed taxonomy. *[applicable from 22 February 2026 — ED Decision 2023/010/R]* ##### GM1 ARO.GEN.135A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety *ED Decision 2023/010/R* When deemed necessary, a two-step mechanism could be used: a report alerting about the information security event or incident and the availability of additional data that would require controlled and confidential distribution. This report should only alert recipients of the urgency and the necessity for organisations and competent authorities to establish further communication through secure means. Therefore, the report should consist of two parts: one limited to mostly public information and one containing the sensitive data that should be restricted to the recipients who need to know. Wherever possible, reports should be based on an agreed taxonomy.