RTCA Paper No. 142-14/SC216-053 July 16, 2014 Summary of the Twenty-Fourth Meeting SC-216 Aeronautical Systems Security DATE: PLACE: June 11-13, 2014 RTCA, Inc. 1150 18th Street, NW, Suite 450 Washington, DC 20036 The Committee wishes to thank RTCA for hosting this meeting. ATTENDEES: SC-216 Co-Chairs Johnson, Daniel Royalty, Chuck (by phone) Honeywell International, Inc. The Boeing Company SC-216 Secretary Schatz, Derek The Boeing Company Designated Federal Official: DeCerchio, Raymond Federal Aviation Administration (FAA) Members attended: Varun Khanna Guy de Langis Phil Watson Mohammed Waheed Kevin Meier Claudio Castro Mitchell Trope Bill Johns? Allison Snyder Tong Vu Xiaogong Lee Terry Davis Scott Edwards Bryan Zelley FAA Bombardier Panasonic Avionics Rockwell Collins Cessna Embraer Garmin US Dept of Homeland Security US General Accounting Office FAA (WJH Technical Center) FAA (WJH Technical Center) MicroSystems Automation Group Piper Aircraft MITRE Page 1 of 3 Members attended by phone: Bill Adams Chuck Royalty Larry Hannert Darlene Hughes Steve Sterling Cédric Cyprien Laurent Fabre David Pierce Andrew Kornecki John Flores Thomas Parmer Charles Kilgore FAA The Boeing Company LCH Engineering Universal Avionics Canada Dept. of National Defence Airbus Critical Systems Labs GE Aviation Embry-Riddle Aeronautical Univ. FAA FAA FAA (WJH Technical Center) Note: Attendance was recorded via the verbal roll-call, the sign-in sheets at the meeting, and the list of people logged into the WebEx. Apologies if anyone was missed. In accordance with the Federal Advisory Committee Act, Raymond DeCerchio, Federal Aviation Administration (FAA), was the Designated Federal Official. The first two days of the meeting consisted of a Subgroup 2 working meeting to finalize comments and review editorial issues on the DO-yy3 “Airworthiness Security Methods and Considerations” document. The third day was a plenary session for the committee to vote on whether to advance this document to the Final Review and Comment (FRAC) phase. Unlike most previous meetings, this was not a joint meeting with Eurocae WG-72. They are meeting separately in July in Europe to continue work on ED-203, which will not be published with the initial SC-216 DO-yy3 document. The outline for this meeting summary is organized around the published agenda. SC-216 presentations and documents can be found at the committee’s Workspace site at http://workspace.rtca.org . Contact either SC-216 co-chair for access to the site. Details of document edits are generally incorporated by reference in this summary. The agenda was published in advance of the meeting, and is available from the RTCA website. Meeting Summary Day 1 Working group session The meeting was initiated by the co-chair present with introductions made around the room and some general comments. The working group reviewed the comments that had been received to date on the DO-yy3 document. Page 2 of 3 Day 2 Working group session The working group discussed the FAA’s proposed Five Year Plan for cyber security and the proposed revised Terms of Reference (ToR) for SC-216 until shortly after lunch. The group then continued reviewing DO-yy3 in more detail for editorial issues. Day 3 Plenary session Dan Johnson, co-chair, kicked off the meeting and introductions were made again around the room and on the phone for those who had not attended the previous two days. The summary of the twenty-third meeting of SC-216 was reviewed and approved. A motion was made to enter the DO-yy3 document into the FRAC phase. No objections were received and consensus was declared by Dan Johnson. The document and meeting schedule was reviewed. The FRAC period will run from June 24 to July 24, 2014. The committee working group will meet August 5-7 to review the comments received during FRAC, with a separate plenary session on August 22 to vote on approval of DO-yy3 for publication. The RTCA Program Management Committee (PMC) will meet on September 23, 2014 and vote to accept the document for publication. RTCA leadership was present at this meeting and confirmed this plan. The group discussed the potential future role of the committee once the primary deliverables defined in the TOR are completed (DO-326A, DO-355, and the upcoming DO-yy3). Interest has been expressed that a standing group be instantiated to provide cyber security support and advisory capability to RTCA and the FAA. The group will endeavor to complete a revised TOR for review and acceptance at the August meeting. As potential input to that effort, WG-72 OK’d general distribution of that committee’s proposed revised TOR. Business completed, the meeting was adjourned by late morning. /s/ Derek Schatz Secretary, SC-216 CERTIFIED as a true and accurate summary of the meeting /s/ Chuck Royalty Co-Chairman, SC-216 /s/ Daniel Johnson Co-Chairman, SC-216 Page 3 of 3