EUROCAE ED-204 PDF

ED-202A / DO-326A provides guidance in addressing airworthiness security during the aircraft product life cycle from project initiation until the aircraft Type Certificate (Amended Type Certificate, Supplemental Type Certificate and Amended Supplemental Type Certificate) is issued for the aircraft type design. In addition, it includes the handover of information about the Type Design that is necessary to ensure continuing airworthiness with respect to possible information security threats.

ED-204 / DO-355 (this document) provides guidance for the following stages of the product life cycle: operation, support, maintenance, administration and deconstruction. Where an organization subcontracts any activities in these stages, the organization still retains the responsibility for aircraft information security (for contracted maintenance providers, refer to section 1.6.4).

Topics in the scope of Type Certification activities that are related to operation and maintenance of the aircraft such as Instructions for Continued Airworthiness (ICA) and security guidance documents are introduced in ED-202A / DO-326A and detailed in ED-204 / DO-355. In such cases ED-202A / DO-326A provides references to ED-204 / DO-355.

This document addresses information security risks only. The security measures to mitigate these risks are not limited to information technology; they may also be physical or organizational.

Apart from the classical Instructions for Continued Airworthiness that are directly related to aircraft parts and systems, this document also provides guidance on Ground Support Equipment and Ground Support Information Systems that are related to the security of aircraft information systems.

PURPOSE

This document is a resource for civil aviation authorities and the aviation industry when the operation and maintenance of aircraft and the effects of information security threats can affect aircraft safety. It deals with the activities that need to be performed in operation and maintenance of the aircraft related to information security threats.

This document gives also guidance that is related to operational and commercial effects (i.e. guidance that exceeds the safety-only effects). Thus, it also supports harmonizing security guidance documents among Design Approval Holders (DAH), which is deemed beneficial to DAHs, operators and civil aviation authorities.

ED-204 / DO-355 is a companion document1 to ED-202A / DO-326A "Airworthiness Security Process Specification" that supports security in the development and modification part of the airworthiness process.