Division ATM/ANS.OR.D.010 Security management

Air navigation services F1providers shall, as an integral part of their management system as required in point ATM/ANS.OR.B.005, establish a security management system to ensure:

1. (1)

   the security of their facilities and personnel so as to prevent unlawful interference with the provision of services;

2. (2)

   the security of operational data they receive, or produce, or otherwise employ, so that access to it is restricted only to those authorised.

The security management system shall define:

1. (1)

   the procedures relating to security risk assessment and mitigation, security monitoring and improvement, security reviews and lesson dissemination;

2. (2)

   the means designed to detect security breaches and to alert personnel with appropriate security warnings;

3. (3)

   the means of controlling the effects of security breaches and to identify recovery action and mitigation procedures to prevent re-occurrence.

Air navigation services providers shall ensure the security clearance of their personnel, if appropriate, and coordinate with the relevant civil and military authorities to ensure the security of their facilities, personnel and data.

Air navigation services providers shall take the necessary measures to protect their systems, constituents in use and data and prevent compromising the network against information and cyber security threats which may have an unlawful interference with the provision of their service.