FAA Aircraft Systems Information Security Protection (ASISP): every control, and what you already have

32 controls 4 frameworks share controls with it United States (FAA design approvals and operators) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
EU NIS2 Directive	3	measure it →
EASA Part-IS	2	measure it →
NIST Cybersecurity Framework 2.0	1	measure it →
ICAO Annex 17	1	measure it →

Every control

Code	Control	Also in
`FAA-CSA-AC119-1`	Cybersecurity for Operators (FAA AC 119-1)	1
`FAA-CSA-AC23-XX`	Continued Airworthiness for Cybersecurity (AC 23-XX / DO-355A / AC 119-1)	0
`FAA-CSA-AC25-21`	Aircraft Network Security Architecture (FAA AC 25-21) - the AISD onboard-network framework	0
`FAA-CSA-Airport`	Airport Cybersecurity (FAA + TSA + ACI coordination)	0
`FAA-CSA-EFB`	Electronic Flight Bag (EFB) Operational Authorisation Cybersecurity	0
`FAA-CSA-Governance`	FAA Cybersecurity Strategy, Governance and Order 1370.123A	1
`FAA-CSA-International`	Coordination with EASA Part-IS, ICAO AVSEC and International Cybersecurity Frameworks	2
`FAA-CSA-NAS`	National Airspace System (NAS) and Air Traffic Management Cybersecurity	1
`FAA-CSA-NPRM-2024`	2024 FAA NPRM to Codify Cybersecurity as Part 23/25/27/29 Airworthiness Standard	0
`FAA-CSA-Operator-Cyber-IR`	Aviation Cyber Incident Response and Reporting to FAA and NTSB	1
`FAA-CSA-Personnel`	Personnel Security Training and Insider Threat	0
`FAA-CSA-Status`	FAA Cybersecurity Framework for Aviation - corpus status	0
`FAA-CSA-SupplyChain`	Supply Chain Cybersecurity (CISA + NIST SSDF + Executive Orders alignment)	1
`FAA-CSA-UAS-Drone`	Unmanned Aircraft Systems (UAS / Drones) Cybersecurity	0
`FAA-CSA-VulnMgmt`	Vulnerability Management and Software Assurance for Aviation Systems	0
`25.1319(a)(1)`	25.1319(a)(1) Identify and assess security risks from all IUEI	0
`25.1319(a)(2)`	25.1319(a)(2) Mitigate the security risks as necessary for safety, functionality and continued airworthiness	0
`25.1319(a)(3)`	25.1319(a)(3) Instructions for continued airworthiness that maintain the protections	0
`33.28(n)`	33.28(n) Engine control, monitoring and auxiliary systems protected from IUEI	0
`35.23(f)`	35.23(f) Propeller control, monitoring and auxiliary systems protected from IUEI	0
`A`	Proposed 14 CFR 25.1319 and appendix H: transport category airplanes	0
`ANSP`	ANSP Operator's aircraft network security program (AC 119-1A)	0
`ASISP`	Aircraft systems information security protection: what the regime is and where it stands	0
`E`	Proposed 14 CFR 33.28(n) and 35.23(f) with appendices A: engines and propellers	0
`M`	Means of compliance and the operator's aircraft network security program	0
`MOC`	MOC Accepted means of compliance: the ASISP issue papers, AC 20-XXX and the RTCA standards	0
`S`	ASISP special conditions in force for transport category airplane certification (the three criteria)	0
`SC.1`	SC.1 Isolation from or protection against unauthorized access	0
`SC.2`	SC.2 Prevention of inadvertent and malicious changes and adverse impacts	0
`SC.3`	SC.3 Procedures to maintain the cybersecurity protections	0
`a33.3(a)(10)`	a33.3(a)(10) Engine ICA: secure transfer of software and data	0
`a35.3(a)(10)`	a35.3(a)(10) Propeller ICA: secure transfer of software and data	0

Tell me when FAA Aircraft Systems Information Security Protection (ASISP) files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for FAA Aircraft Systems Information Security Protection (ASISP), drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition