Cybersecurity Risk Assessment Guidance Material (CRAGM)

Cybersecurity Risk Assessment Guidance Material (CSRGM) proposes a minimal and viable cybersecurity risk assessment approach as well as guidelines to support the Operators’ baseline understanding of the cybersecurity risk assessment framework and approach (i.e., methodology and process).

The guidance will primarily support the Operators with the existing IOSA Standards and Recommended Practices (ISARPs) on cybersecurity (ISM Edition 16), as well as newly developed ISARPs from a new discipline, namely Cybersecurity for Safety, Security and Airworthiness (CSSA). Finally, the proposed approach may be useful and support the Operators with other existing regulatory requirements.