The Federal Aviation Administration (FAA) has announced new cybersecurity regulations for newly built aircraft in order to safeguard aircraft manufacturers against potential cyber threats.
The new Notice of Proposed Rulemaking (NPRN) was put forth by the FAA on August 21, 2024, with the goal of streamlining the new aircraft certification process while maintaining the same level of safety. These proposed regulations are aimed at protecting the equipment, systems, and networks of airplanes, engines, and propellers from cyber threats.
Under the proposed regulations, multi-engine aircraft with more than 19 passenger seats or a maximum takeoff weight over 19,000 pounds will be required to conduct a cybersecurity risk evaluation. The FAA expects manufacturers to assess the severity of threat conditions and implement mitigation measures such as single or multilayered protection mechanisms.
In addition to protecting against unauthorized access and malicious modification of aircraft equipment, systems, and networks, the FAA has also introduced new regulations to enhance the safety of engine and propeller systems susceptible to cyber threats.
These regulations are intended to reduce costs and time necessary for certification while aligning FAA requirements with other civil aviation authorities. Currently, aircraft must meet airworthiness standards to obtain a US type certificate and have the certification validated by foreign authorities.