Insights
Aviation cybersecurity guides for small teams
Eight practical guides written for eVTOL and UAS developers, small operators and maintenance organizations, grounded in my own peer-reviewed research rather than vendor claims. Each one ends with something you can act on this month.
Start here
Start with the evidence
For eVTOL and UAS developers
Build security into the aircraft
Airworthiness security for eVTOL and UAS: getting DO-326A right from day one
The DO-326A/ED-202A process in plain language, the eVTOL/UAS attack surface, what accident data says about failure modes, and what to prepare before your first certification meeting.
Read the guide →Building a cybersecurity program at an aviation start-up: the first 90 days
Who owns security in a ten-person company, the asset inventory and risk register, protecting design IP and test data, and what investors, partners and authorities will ask.
Read the guide →For operators and MROs
Keep flying when something goes wrong
Incident response and ransomware readiness for small aviation organizations
A one-page incident plan, the preparations that decide whether ransomware is a bad week or a bad year, reporting obligations, and a 90-minute tabletop exercise.
Read the guide →EFB cybersecurity for operators: securing Electronic Flight Bags
Where the risk sits in an EFB program, what FAA, EASA and Transport Canada guidance expects, and controls and crew procedures that don't turn pilots into IT administrators.
Read the guide →Cyber risk in the MRO and aviation supply chain
Why maintenance organizations are targets, how record integrity became an airworthiness problem, a ten-question vendor assessment, and zero trust sized for a small shop.
Read the guide →For everyone
Frameworks and people
Aviation cybersecurity frameworks compared: which one fits a small company?
NIST CSF 2.0, ISO/IEC 27001, CIS Controls, DO-326A, EASA Part-IS and ICAO guidance compared on scope, certification, effort and who will ask for them.
Read the guide →Aviation cybersecurity awareness training that works: role-based, short, measured
The three ideas everyone should own, the threats that differ for pilots, technicians, engineers and dispatch, and how to measure whether training changed anything.
Read the guide →Looking for the papers?
The peer-reviewed research behind these guides, with abstracts, DOIs and open datasets, is on the Research page.