February 27, 2025

Steven Bentley

Sofema Aviation Services (SAS) www.sassofia.com is pleased to share that a new course has been added to our training portfolio:

Cybersecurity in Aviation – EASA – Compliant Training Program

Available as a Classroom or Webinar training* – Register at team@sassofia.com

*New – Participants can now enrol Free of Charge (FOC) in a complementary 1-day Sofema Online (SOL) training to enhance their learning experience.

What is the training about?

The Cybersecurity in Aviation – EASA-Compliant Training Program is a three-day course designed to help aviation professionals understand and mitigate cyber risks in compliance with EASA regulations. Covering key threats, risk management, and integration with Safety Management Systems (SMS), this training equips participants with practical strategies to enhance cybersecurity resilience in their organizations. Ideal for safety, compliance, IT, and operational personnel, it ensures readiness to meet regulatory requirements and safeguard aviation systems.Read more 

Which topics will be addressed?

Day 1: Introduction to Cybersecurity in Aviation
Definition of Cybersecurity and Cyber Resilience
Key Terminology: Threats, Vulnerabilities, Risk, Mitigation
Overview of Aviation-Specific Cyber Threats: Aircraft, Ground Systems, Communications
EASA Cybersecurity Regulations:
EU Regulation 2019/1583
ED Decision 2020/006/R
AMC/GM for Safety Management Systems
International Requirements: ICAO Annex 17 & Annex 19 (Security and SMS)

See the full table of contents for day 1

Day 2: Cyber Risk Assessment and Threat Management
Introduction to Cyber Risk Assessment Methodology
Identifying Threats and Vulnerabilities in Aviation Systems
Risk Evaluation and Ranking
Conducting Cyber Risk Assessments for:
Aircraft Systems (e.g., Avionics, Fly-by-Wire)
Ground Infrastructure and IT Systems
Communication Networks
Case Study: Risk Assessment of Aircraft System Vulnerability
Day 3: Incident Management and Response
Incident Management Framework
EASA Requirements for Cyber Incident Reporting
Developing Incident Response Plans (IRPs)
Identifying Causes, Response Actions, and Recovery Procedures
Reporting Cyber Incidents under EASA Guidelines

 

Why should you choose Sofema Aviation Services?

Sofema Aviation Services is a Regulatory training and consulting company with over 45 years of commercial aviation experience and 15+ years of operational experience. Since our start, we have achieved over 150,000 enrolments and grown for two primary reasons! The first is that we are professional, and we listen to our customers. Please visit our download area as an example of how we engage with our customers. The second is not only the fact that our prices are far more cost-effective than our competitors, but it is also that our discount program leaves all the others way behind – please do not take our word for it, check it out – SAS Discount Program.

What do people say about Sofema Aviation Services training?

“I found satisfying answers to all my questions.”
“The instructor demonstrated a very deep knowledge of the subject.”
“The length of the course fits my needs and expectations.”
“The content was really effective, I gained a lot of new knowledge.”
“The practical examples were perfectly delivered.”

Master the skills to become a proficient instructor and assessor in aerodrome operations. Request the training by emailing team@sassofia.com!

Share this with your network:

Tags:

EASA Cyber Security, IRPs, Developing Incident Response Plans (IRPs), Incident Management Framework, Aircraft System Vulnerability, Communication Networks, Fly-by-Wire, Cyber Risk Assessments, Cyber Risk Assessment Methodology, ICAO Annex 17 & Annex 19, AMC/GM for Safety Management Systems, ED Decision 2020/006/R, IT systems, EU Regulation 2019/1583, EASA compliant, EASA Guidelines, System Vulnerabilities, Aircraft avionics, Aviation Safety Management Systems (SMS), Aviation Risk Management, Risk Evaluation, European Centre for Cybersecurity in Aviation (ECCSA), Cybersecurity, Cyber Risks, aircraft systems, Risk Assessment, Regulatory training