FAA Cybersecurity Framework for Aviation FAA-CSA-AC23-XX: Continued Airworthiness for Cybersecurity (AC 23-XX / DO-355A / AC 119-1)

Continued airworthiness for cybersecurity addresses the ongoing-maintenance phase of an aircraft's lifecycle. The framework is articulated through: (a) RTCA DO-355A 'Information Security Guidance for Continuing Airworthiness'; (b) FAA AC 119-1 + AC 23-XX / AC 25-XX series advisory circulars; (c) the airworthiness-directive (AD) mechanism for safety-critical cybersecurity issues - FAA may issue ADs requiring operators to apply cybersecurity patches + reconfigurations within specified timeframes; (d) maintenance organisation (Part 145) cybersecurity program covering technician credentials + software-loading procedures + spare-parts authenticity verification + tooling cybersecurity. Continued airworthiness for cybersecurity is operationally critical because aircraft are in service for 25-40 years, requiring sustained cybersecurity attention across decades + multiple software / hardware upgrades.