Security risk assessment, threat modeling, and security verification for type certification of modern aircraft.
Unlike IT security, DO-326A focuses strictly on the airworthiness consequences of cyber events—preventing cyber incidents from compromising the safety of flight, structural integrity, or crew situational awareness.
RTCA DO-356A specifies mandatory penetration testing, vulnerability scanning, and fault injection on aircraft iron bird testbeds before commercial passenger certification can be granted.