The Federal Aviation Administration (FAA) introduced changes to its cybersecurity standards for new aircraft and equipment in a Notice of Proposed Rulemaking (NPRM) issued Wednesday.
According to the agency, the proposed rules would address cybersecurity threats for transport category aircraft, engines, and propellers. The goal is to standardize the FAA’s cybersecurity criteria, which would help lower certification costs and time while maintaining current safety levels.
Under the proposed rules, any aircraft with more than 19 passenger seats or a maximum takeoff weight exceeding 19,000 pounds will be required to undergo a cybersecurity risk assessment. Manufacturers will then need to address any vulnerabilities.