Learn the standards on our BCS-accredited course, then build all 14 cyber security artefacts with the Artefact Builder. Try it free before you decide.
What is DO-326A?
DO-326A (ED-202A in Europe) is the Airworthiness Security Process Specification. With its companion DO-356A / ED-203A, it sets out how you find the ways an aircraft or system could be attacked, work out the risk, decide what to do about it and show the regulator your evidence. The evidence is a set of 14 documents, the artefacts. Regulators in civil aviation and UK Defence now ask for them before they will certify a new aircraft or a change to one.
DO-326A / ED-202A gives the process. DO-356A / ED-203A gives the methods and the evidence expected. Together they are the Cyber Security Risk Management Framework. Our course teaches both.
Seven at aircraft level, from the Plan for Security Aspects of Certification (PSecAC) through to the operator guidance, and seven at system level. Our Artefact Builder compiles them for you.
EASA and the UK CAA for civil aircraft, through AMC 20-42, which points to these standards. The UK Military Aviation Authority for military air systems, through RA 5890, which does the same. Def Stan 23-015 Part 6 brings the same approach to the UK land domain.
Cyber Security Certification training. Practitioner led, BCS accredited. A 2-day course covering DO-326A / ED-202A and DO-356A / ED-203A and all 14 artefacts, rated 4.7 out of 5 by the last cohort.
Reserve a place Course detailsDO-326A compliance is hard. Very hard. Our Artefact Builder is easy. Very easy. Describe your aircraft or system once and it compiles the artefacts in the background, exported as submission-ready Word documents.
See the Artefact Builder Book a demoTry it free. Then decide. The Lite version lets you build a real artefact for your own platform before you talk to us about the full tool.
Try Artefact Builder LiteResources
A free plain-English guide to the 14 artefacts and what the regulator expects in each.