As the EU Cyber Resilience Act (CRA) comes into force, aviation manufacturers, operators and cybersecurity professionals must understand what it means for the flight deck. The CRA introduces stringent cybersecurity requirements for products with digital elements, including cockpit systems and avionics, placing greater emphasis on secure-by-design development, continuous vulnerability management and rapid incident reporting.
While aviation already benefits from established cybersecurity frameworks through EASA, ICAO and industry airworthiness standards, the CRA introduces additional horizontal obligations that will influence how cockpit technologies are designed, maintained and monitored throughout their lifecycle. Understanding how these regulations interact is essential for achieving effective and compliant cyber resilience.
This webinar will explore the operational impact of the CRA on cockpit systems, from securing software updates and protecting connected avionics to strengthening incident detection, reporting and long-term lifecycle security. It will also examine how organisations can manage the overlap between the CRA and existing aviation-specific regulations to develop a practical compliance strategy.
Join us to gain a clear understanding of how the CRA is reshaping cybersecurity expectations in the cockpit, what it means for manufacturers and operators, and the practical steps needed to strengthen resilience against evolving cyber threats while maintaining regulatory compliance.
Delegates will learn:
- What the EU Cyber Resilience Act means for cockpit systems and connected avionics.
- How the CRA complements and overlaps with existing aviation cybersecurity regulations.
- The new requirements for secure-by-design development, vulnerability management and software updates.
- How incident detection, reporting and response obligations will affect flight operations.
- Best practices for managing cybersecurity throughout the lifecycle of cockpit hardware and software.
- Practical approaches to building a compliant and resilient cybersecurity strategy for modern flight decks.
Before EUROCAE, she has gained experience in international relations and ICT policy, working both for the private and public sectors. She was consultant on satellite regulation and ICT market access in London, advising the leaders of the industry. She also worked for the French embassy in Beijing and Tsinghua University, and at a Brussels-based think tank.
Anna holds a Bachelor’s degree in Chinese Studies from the INALCO / Langues’O in Paris, and a Master’s degree in Political sciences from the Vrije Universiteit Amsterdam. She also has a CISSP certification in information system security and an HAREC radio licence.
He is a recognized expert in certifying high-integrity systems across the aeronautics, space, railway, and automotive domains, including certifying run-time libraries and qualifying verification tools and automatic code generators from modeling languages.
His contributions include defining programming language profiles for embedded systems and designing and implementing run-time libraries for bare-metal execution on constrained targets. His current work brings certifiable technologies to modern embedded architectures and safety-critical development workflows.
