The Federal Aviation Administration (FAA) is taking steps to enhance cybersecurity measures for newly built aircraft in order to safeguard against potential cyber threats. The new Notice of Proposed Rulemaking (NPRN), introduced by the FAA on August 21, 2024, seeks to streamline the aircraft certification process while maintaining safety standards.
Under the proposed regulations, multi-engine aircraft with more than 19 passenger seats or a maximum takeoff weight over 19,000 pounds will be required to undergo a cybersecurity risk evaluation. Manufacturers will need to assess and mitigate vulnerabilities, implementing protection mechanisms to prevent unauthorized access and malicious modifications.
In addition to protecting aircraft systems, the FAA is also focusing on improving the safety of engine and propeller systems susceptible to cyber threats. These new regulations aim to align FAA requirements with international civil aviation authorities, ensuring a harmonized approach to cybersecurity in the aviation industry.
Ultimately, the FAA’s goal is to reduce certification costs and time while enhancing security measures for newly built aircraft. By addressing cybersecurity risks proactively, manufacturers can better protect their equipment, systems, and networks from potential cyber attacks.