FAA Aircraft Systems Information Security Protection (ASISP)
Means of compliance and the operator's aircraft network security program – FAA Aircraft Systems Information Security Protection (ASISP)

FAA Aircraft Systems Information Security Protection (ASISP) ANSP.5-9: ANSP.5-9 When an ANSP is needed and how it is authorised

An aircraft needs an ANSP where a special condition listed on the type certificate data sheet, supplemental type certificate or amended type certificate requires instructions to the operator (Appendix A decision flowchart; for aircraft exempt under their operating rules, any design approval holder network security guidance requiring operator action must still be in the operator's program). The program is built on the design approval holder's approved network security guidance and instructions for continued airworthiness, treated as sensitive security information; aircraft modified with connectivity to a non-U.S. governmental service provider at a major or higher failure classification need similar approved instructions before return to service. The operator notifies its oversight office no less than 90 days before delivery, addressing every section of the holder's guidance; the office, with Flight Standards Aircraft Maintenance Division and FAA security staff, reviews the package and OpSpec D301 is issued on a letter of concurrence. The operator must revise the ANSP within the period set in the authorisation (generally 30 days of a revision of the holder's source document), after which D301 is reissued.

Maintained by Gerard BlokdykControl text last updated

Other controls in Means of compliance and the operator's aircraft network security program – FAA Aircraft Systems Information Security Protection (ASISP)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.