ISO/AWI 26390

Cybersecurity requirements for uncrewed aircraft systems

Scope

This document specifies cybersecurity requirements for uncrewed aircraft systems (UAS) to mitigate cybersecurity vulnerabilities and associated threats identified in relation to their operational environment, structural characteristics, and lifecycle, including the supply chain and software updates. 
This document is not applicable to:
— UAS traffic management systems;
— Organizational management aspects for UAS and its component producers.
 
NOTE This document complements ISO 21384-3, ISO 21895, and ISO 23629-12, which respectively address operational procedures, classification of civil UAS, and requirements for UAS traffic management service providers. Those documents do not specify technical requirements addressing cybersecurity risks to UAS components or interfaces.