ASSURE Cyber Audit

The Civil Aviation Authority (CAA), alongside the Department of Transport and the National Cyber Security Centre (NCSC) have developed the ASSURE program, an accredited cybersecurity audit scheme for the aviation sector (Airlines, Airport operating businesses, Air Navigation Service Providers). The ASSURE program is part of the UK’s National Cyber Security Strategy and is the first industry-specific application of the EU’s Directive on security of network and information systems (NIS) which became UK law in 2018.

The scheme is designed to allow the aviation industry to manage cybersecurity risks without compromising aviation safety, security, or operational resilience.

Claranet Cyber Security are an accredited ASSURE Cyber Security Assessor we offer end-to-end audit journey for an aviation organisation across all three specialisms via our experienced, qualified cyber professionals.

• Cyber audit and risk management
• Technical Cyber Security Expert
• Industrial Control Systems, operation technology expert

Our solutions provide the right data security foundation to protect your customer data and prevent data breaches that could put you out of business.

• Airlines
• Airport operating businesses
• Air Navigation Service Providers

Step 4 of CAP1753 requires an ASSURE Cyber Audit. Audits can only be provided by accredited ASSURE suppliers and provide an independent validation of the Cyber self-assessment completed by the aviation organisation in Step 3.

The audit is evidence-based, through observing processes in practice, sampling, conducting interviews and reviewing policies and other relevant documentation provided by the aviation organisation. Upon completion of the audit, a report is issued to the aviation organisation and a debrief call with the CAA is held.