AMC1 ADR.AR.A.030A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety

• ED Decision 2023/010/R found in: Aerodromes (139/2014) Part-ADR.AR Part-ADR.OR Part-ADR.OPS CS-ADR-DSN CS-HPT-DSN (Dec 2024)

AMC1 ADR.AR.A.030A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety ED Decision 2023/010/R (a) To appropriately collect and analyse information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should implement means that ensure the necessary confidentiality. (b) When disseminating information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should properly select the appropriate recipient(s) to prevent the content of a report from being exploited to the detriment of aviation safety, by revealing, for instance, uncorrected vulnerabilities. *[applicable from 22 February 2026 – ED Decision 2023/010/R]* ##### AMC1 ADR.AR.A.030A Immediate reaction to an information security incident or vulnerability with an impact on aviation safety *ED Decision 2023/010/R* (a) To appropriately collect and analyse information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should implement means that ensure the necessary confidentiality. (b) When disseminating information related to information security incidents and vulnerabilities with a potential impact on aviation safety, the competent authority should properly select the appropriate recipient(s) to prevent the content of a report from being exploited to the detriment of aviation safety, by revealing, for instance, uncorrected vulnerabilities.