The document provides guidance to States and stakeholders to harmonize cyber risk management in civil aviation. It comprises a methodology that supports integrating cyber risk management into aviation safety and security, and air navigation efficiency and capacity risk management processes along with implementation examples and references to relevant general cybersecurity standards related to cyber risk assessment.
The document also include a restricted section that provides a high-level description of cyber risks impacting civil aviation and a high-level categorization of cyber threats into aviation domains and disciplines that would provide a starting point to expand from on the national or organizational levels.