SAE AIR7368

The purpose of this SAE Aerospace Information Report (AIR) is to provide guidance for aircraft engine and propeller systems (hereafter referred to as propulsion systems) certification for cybersecurity. Compliance for cybersecurity requires that the engine control, propeller control, monitoring system, and all auxiliary equipment systems and networks associated with the propulsion system (such as nacelle systems, overspeed governors, and thrust reversers) be protected from intentional unauthorized electronic interactions (IUEI) that may result in an adverse effect on the safety of the propulsion system or the airplane. This involves identification of security risks, their mitigation, verification of protections, and their maintenance in service. This document is intended to serve as suitable guidance for propulsion system manufacturers and applicants for propulsion system type certification. It is also intended to provide guidance for subsequent propulsion system integration into aircraft systems for aircraft certification and operational use. As cybersecurity for propulsion systems emerges as a new and separate subject for regulatory agencies, guidance for the propulsion system manufacturer in addressing cybersecurity issues related to aircraft integration, field loading of data, continued airworthiness, and other areas is needed. This SAE Aerospace Information Report (AIR) will serve as a foundation for a common approach to cybersecurity airworthiness certification for propulsion system manufacturers.