FAA AC 120-76D (latest revision) addresses Electronic Flight Bag (EFB) operational authorisation including cybersecurity considerations: (a) EFB classification (Class 1 / Class 2 / Class 3 - portable + installed + integrated) with different cybersecurity baselines per class; (b) EFB software cybersecurity including OS hardening + application whitelisting + administrator controls; (c) EFB connectivity cybersecurity for SATCOM + Wi-Fi + cellular data uplinks; (d) EFB chart + manual update integrity verification via cryptographic signatures + chain-of-custody verification; (e) Bring-Your-Own-Device (BYOD) EFB cybersecurity for personal-device EFBs operating in Class 1; (f) coordination with aircraft AISD architecture per AC 25-21 to prevent EFB lateral movement into avionics. EFBs are a common attack-vector concern because they bridge passenger-domain network + crew operational data + sometimes aircraft systems.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.