ProSec Global
Industries / In focus
  • Aviation industry
  • Space & satellite systems
  • Unmanned systems
  • Suppliers & maintenance

Aerospace

Hardly any industry is as good at providing proof as yours. Now information security also has to be demonstrated with a robustness that is taken for granted in your industry – for systems that were originally never designed to that standard. At the same time, unmanned systems, ground segments and complex supply chains are growing into certification and proof processes for which practice is only just developing.

New obligation
Information security is increasingly becoming part of certification and proof – not only of later operations.
Testing gap
For ground segments and unmanned systems, testing practice is still developing.
Life cycles
What you secure today will still be flying in twenty years.
Supply chain
Your suppliers become part of your own proof.
What we encounter in this environment
„
Over decades, your industry has learned to demonstrate safety systematically: certified, documented and audited with a depth hardly any other market knows. This culture is established – but it was built for flight safety and technical reliability, not for information security. Now both worlds meet in systems that were not originally developed for this standard.
How we see it

Precisely because providing proof is part of your everyday work, the additional effort is easily underestimated. The difference: for information security, roles, procedures and testing practice are in part not yet as well rehearsed as in classic certification.

Typical framework conditions

What makes this environment challenging.

Decisions in aerospace often take effect over decades and have to hold up in highly formalized certification and proof processes. Here, information security meets an established safety culture with its own rules and responsibilities. We encounter three patterns in this environment again and again.

Recurring patterns from our practice
01

Security has two meanings here

Organizations in the industry are geared to safety, reliability and technical certification. Information security follows partly different principles and still has to fit into the same development and proof processes.

02

Fixing it later is not an update

What is certified today is frequently still in use in twenty years. Every later change then goes through a procedure of its own.

03

Established procedures, new yardsticks

Certification and proof processes are firmly rehearsed. Procedures, roles and assessment criteria for information security, by contrast, often only gradually find their place in this system.

Requirements that play a role
01EASA Part-IS
02DO-326A and ED-202A
03ISO 27001
04ECSS
05NIS2
On an equal footing

Your contact for Aerospace.

Talk to someone who knows your environment.

A confidential conversation at leadership level. We assess your situation and also tell you if another address would be the right one.

Tim Schughart
Group CEO | ProSec Global