Blog

EASA Cyber Security – Addressing Stakeholder Needs

read more
Business professional holding a holographic airplane, symbolizing EASA cyber security addressing aviation stakeholder needs

January 29, 2025

Steven Bentley

Sofema Aviation Services (SAS) takes a view on the role of the EASA Cyber Security Framework to address Stakeholder Needs, Legal Basis, and Policies for Collaboration and Information Sharing. Introduction – Stakeholder Needs Stakeholders in the aviation ecosystem include airlines, airports, air navigation service providers (ANSPs), manufacturers, maintenance organizations, and authorities. Their needs within the EASA Cyber Security focus on: Risk Management Identifying Threats: Stakeholders…

Effective Strategies for Applying EASA STORM Cyber Security Framework

read more
Digital shield and network graphic illustrating practical guidance for implementing EASA STORM cyber security provisions in aviation

January 27, 2025

Steven Bentley

Sofema Aviation Services (SAS) www.sassofia.com considers fundamental issues related to the challenge to address cyber security threats within EASA regulated Organisation Introduction EASA’s STORM initiative—Shared Trans-Organisational Risk Management addresses the interconnected risks within the aviation ecosystem, recognizing that risks cannot be managed in isolation due to the increasing digitization and interdependencies across stakeholders. EASA Guidelines and Regulatory…

Cyber Security – Initial Airworthiness Role and Purpose of AMC 20-42

read more
Digital network sphere representing cyber security in aviation, highlighting the initial airworthiness role and purpose of AMC 20-42

January 27, 2025

Steven Bentley

Sofema Aviation Services (SAS) www.sassofia.com considers fundamental issues related to the challenge to address cyber security threats within EASA Regulated Design Organisations Introduction AMC 20-42 serves as a structured framework for identifying, assessing, and mitigating information security risks in aviation products and systems. By leveraging EUROCAE/RTCA standards, it ensures airworthiness and safety are maintained against evolving cybersecurity…

Cyber Security – EASA’s STORM initiative —Shared Trans-Organisational Risk Management

read more
Digital shield symbolizing cyber security, surrounded by data elements and network icons, representing EASA’s STORM initiative for shared trans-organizational risk management in aviation.

January 27, 2025

Steven Bentley

Sofema Aviation Services (SAS)  tackles the challenge of addressing cyber security threats within EASA-regulated organizations, focusing on EASA’s STORM (Shared Trans-Organisational Risk Management) Introduction EASA’s STORM initiative—Shared Trans-Organisational Risk Management addresses the interconnected risks within the aviation ecosystem, recognizing that risks cannot be managed in isolation due to the increasing digitization and interdependencies across stakeholders….