§27.1319 Equipment, systems and network information security protection

(a) Equipment, systems and networks of Category A rotorcraft, considered separately and in relation to other systems, must be protected from intentional unauthorised electronic interactions (IUEIs) that may result in catastrophic or hazardous effects on the safety of the rotorcraft. Protection must be ensured by showing that the security risks have been identified, assessed and mitigated as necessary. (b) When required by paragraph (a), the applicant must make procedures and Instructions for Continued Airworthiness (ICA) available which ensure that the security protections of the rotorcraft equipment, systems and networks are maintained.’