Sourcehere

Shift5 Aircraft Network Security Program (ANSP) Compliance Module

Shift5

The Shift5 Compliance Module automates compliance efforts for data created on board fleet aircraft. Developed in partnership with aviation industry experts, enables automation of the Federal Aviation Administration’s (FAA) guidelines in Advisory Circular (AC) 119-1 requiring operators to create an Aircraft Network Security Program (ANSP).

AC 119-1’s ANSP requirements are intended to help operators address credible cyber threats and potential critical safety issues, but they don’t provide clear guidance on operationalizing them, frequently leaving operators struggling to find a straightforward path to compliance. The Shif5 Compliance Module facilitates automated rules-based log file analysis, helping make compliance easier, faster, and more efficient so operators can focus on enhancing the safety and cybersecurity of connected aircraft.

The module collects log files using existing aircraft data offloading processes, so there’s no additional hardware required to get started. It can also be deployed as a managed service, offering greater flexibility for teams to focus on other crucial tasks.

Reduce the workload for security teams and more.

Over 60% of cybersecurity leaders say their teams are understaffed, making process automation more critical than ever. The Shift5 platform automatically collects, analyzes, and correlates data from each aircraft to provide better observability across the entire fleet.

Normalize log file data across different platforms.

Data in log files and its formatting can vary widely across aircraft manufacturers, platforms, and even between similar aircraft. The Shift5 platform unpacks log files and automatically normalizes the data in them into a consistent format. This automation eliminates the need for teams to stitch together inconsistent data sets. It also enables the platform to quickly identify commonalities in fleet analysis globally, which improves the robustness and accuracy of the platform for all Shift5 customers.

Focus on the security events that matter most.

A single aircraft can log countless events, making manual assessment and prioritization of risks virtually impossible. Information about critical anomalies must also be made available to regulators and industry experts without delay to ensure flight safety.

When the Shift5 platform identifies a suspicious or malicious event, it assesses its impact quantitatively based on techniques in the MITRE ATT&CK™ Framework. The platform also makes it easy to package and export analysis and assessments from the Shift5 console for internal team review and prompt regulatory reporting.