BS EN 16495:2019

What is this BS EN 16495 - Air traffic management about?  

BS EN 16495 provides guidance based on EN ISO/IEC 27002:2017 applied to organisations supporting civil aviation, with a focus on air traffic management operations. This includes airspace users, airports, and air navigation service, providers. 

The basis of all guidance in BS EN 16495 is trust and cooperation between the parties involved in Air Traffic Management. 

Who is BS EN 16495 - Air traffic management for? 

BS EN 16495 on Information security for organizations supporting civil aviation operations is useful for: 

• Air traffic management control room 
• Information security developers 
• Airport 

Why should you use BS EN 16495 - Air traffic management?  

BS EN 16495 provides guiding principles based on EN ISO/IEC 27002:2017 “Code of practice for information security controls” applied to security management systems in aviation organizations. This standard helps the users because the aim of BS EN 16495 is to extend the contents of EN ISO/IEC 27002:2017 to the domain of air traffic management, thus allowing aviation organizations to implement a standardized and specific information security management system (ISMS), that is in accordance with EN ISO/IEC 27001:2017 trains organizational aspects of air traffic management. 

The security objectives and measures that are set forth in EN ISO/IEC 27001:2017, aviation organizations are subject to further special requirements that are service delivery in aviation is greatly defined by the cooperation of the individual participants. An organization’s information security management is therefore dependent on the information security management of the organizations with which it cooperates to deliver service.  BS EN 16495, therefore, focuses on aspects of cooperation. 

This cooperation requires 

• Sharing the results of risk assessments along the business process chain 
• Agreement on the required level of trust 
• Agreement on the required security controls and their implementation 

What’s changed since the last update?  

BS EN 16495:2019 supersedes BS EN 16495:2014. BS EN 16495:2019 includes some technical changes with respect to BS EN 16495:2014. These include: 

• Adaptation to the structures of EN ISO/IEC 27002:2017 and ISO/IEC 27009:2016 
• Guidance on the alignment of safety and security management 
• Guidance on Information Security specific to development and production and maintenance 
• Guidance on information security assurance 
• Informative Annex D “Application of Controls in Regulatory Oversight — Implementation Example”