RTCA RR-007 ✓ Most Recent

The purpose of this report is to provide guidance in addressing a management system for Information Security which complements the current Safety Management System. Globally, this is also in response to the desire for consistent information security solutions across the supply chain. This report identifies selected best practices for securing the aviation ecosystem, ensure consistency and minimum information security throughout the supply chain, and establish common understanding for easing audit overhead on all stakeholders. The best practices for securing aviation are expected to be suitable for addressing information security risks in the aviation sector and to be considered by European Union Aviation Safety Agency’s (EASA) as a means of compliance for Part-IS.

Aviation organizations may want to apply the best practices in this report to other regulations and business processes that are relevant to the aviation sector. While business risk management is not included in the scope, these organizations are welcome to extend these processes.