What is DO-326A? Cybersecurity & Safety in Aviation and Aircraft Systems

RTCA DO-326A, “Airworthiness Security Process Specification” is the de facto industry standard for cybersecurity in aircrafts. It provides guidance on how to systematically avoid and mitigate malicious interference with aircraft systems, also known as “Intentional Unauthorized Electronic Interaction” (IUEI) or cybersecurity threats. It is often referred to in the industry as “an intro to aviation cybersecurity”. 

DO-326A represents the official European compliance requirements for all aircraft, engines, rotorcraft, and propellers. The contents of the standard explore what it means to create an ecosystem of secure safety, while outlining compliance objectives and data requirements for manufacturers. The primary focus of DO-326A is outlining how to prevent malware infecting the avionics systems during development and flight operations, when an attack could severely affect the way the aircraft is supposed to work, and endanger passenger and operator safety.