Blog

The Potential for Information Security / Cyber Exposure in Aircraft Maintenance Management (Part CAMO)

read more
Cyber Exposure blog image

May 27, 2025

Steven Bentley

Sofema Aviation Services (SAS) considers the key issues to be faced by the Part CAMO Organisation when implementing PART IS & Regulation (EU) 2023/203 regulatory requirements Introduction The potential for information security and cyber exposure within an EASA-compliant Part CAMO (Continuing Airworthiness Management Organisation) is significant and growing, particularly as digital transformation, remote access, and…

Crisis Control Centre (CCC) Facilities – Cost Expectations related to Minimum, Median & Maximum Functioning Capacity

read more
Crisis Control Centre blog image

May 23, 2025

Steven Bentley

Sofema Aviation Services (SAS) considers scalable implementation options for an effective & compliant ERP system Minimum Cost Expectation – Overview: A basic setup designed to fulfill essential regulatory requirements and support core ERP functions. Typically used by smaller operators or those in early ERP maturity stages. Facilities & Equipment Dedicated space (e.g., a conference room…

Lessons Learned from Real-World Cyber Threats – In Aviation Organizations, Operators, CAMOs, and Maintainers

read more
Cyber Threats blog image

May 22, 2025

Steven Bentley

Sofema Aviation Services (SAS) shares lessons learned from real world Cyber Threats Introduction See the following typical examples and mitigations to “take away” Cybersecurity is a shared responsibility across all aviation functions. Whether managing aircraft configuration, scheduling maintenance, or overseeing day-to-day operations, Operators, CAMOs, and Maintainers must build cyber resilience into their core processes (not…

Case Studies: Aviation Cybersecurity Breaches Affecting Commercial Aircraft Operators

read more
Cybersecurity Breaches blog image

May 20, 2025

Steven Bentley

Sofema Aviation Services (SAS) considers several examples of Cybersecurity Breaches Introduction The following examples illustrate how vulnerabilities, whether in operations, IT infrastructure, or third-party systems, can impact aviation safety, continuity, and reputation. British Airways Data Breach (2018) Type: Data Theft Impact: 500,000 customer records compromised Method: Injection of malicious code via third-party scripts on the website and mobile…