Today the FAA published two notices in the Federal
Register (79 FR
54572-54574 and 79 FR
54574-54575) establishing Special Conditions for cybersecurity requirements
for Bombardier BD-500-1A10 and BD-500-1A11 series airplanes. Separate
requirements were established to protect aircraft control systems from
unauthorized external access and internal access. The requirements are identical
to those I
reported on for Airbus Model A350-900 airplanes.
It appears that the FAA will continue to treat
cybersecurity on a Special Conditions basis rather than to amend their
airworthiness regulations {14
CFR Part 25}. Perhaps congressional action is necessary.
Posts
