Applicants are encouraged to show compliance with 25.1319, 33.28(n) and 35.23(f) using the current RTCA information security documents, which address failure modes at electronic access points where the security of interfaces, or of information crossing them, may cause or contribute to failures affecting safety: DO-326A/ED-202A (airworthiness security process), DO-355A/ED-204A (continuing airworthiness), DO-356A/ED-203A (methods and considerations, including development and security assurance levels), DO-391/ED-201A (aeronautical information system security framework and shared responsibility) and DO-392/ED-206 (security event management across manufacturers, operators, maintainers, suppliers and service providers). For engines and propellers on non-part 25 installations other guidance such as ASTM F3532-22 may be used, and SAE AIR7368 supplements all engine and propeller work. Applicants using the RTCA documents are encouraged, and those proposing other methods should, coordinate with the FAA early in the project.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.