The UK's Civil Aviation Authority (CAA) and accreditation body CREST have joined forces to launch ASSURE, the new cyber security scheme to help the aviation sector manage security risks without compromising safety, security or resilience.
We are delighted that NCC Group has been named as one of the first companies approved under the scheme to assess compliance with the NIS Regulations (NIS-R) on behalf of the CAA.
Under the ASSURE scheme, organisations such as airlines, airport operating firms and air navigation service providers will conduct a self-assessment of their current cyber security posture and then engage with an accredited ASSURE cyber provider, such as NCC Group, who will audit the outcome and findings.
Chris Proctor, Senior Advisor, NCC Group commented: “The aviation industry relies on a complex environment involving everything from airport operational systems, passenger services, aircraft systems and air traffic management. The complex interactions between these various systems, protocols and technologies can result in serious cyber security concerns.
Through our Transport Assurance Practice we have a wealth of experience in advising organisations in the transport sector, including aviation, on how to become more cyber resilient and will bring this to bear as we support clients as part of the ASSURE scheme.”
In line with our mission to make the world safer and more secure NCC Group supports organisations in being certified and evaluated against a range of frameworks and standards, including NCSC’s Cyber Assessment Framework, ISO27001, NIST CSF and Cyber Essentials (Plus).
NCC Group is listed on CREST’s website as an ASSURE Cyber Supplier https://www.crest-approved.org/assure/index.html