BoostAeroSpace and usd AG: A Partnership for More Security in the Aerospace Industry

12. May 2025

In today’s business environment, companies rely on a broad network of partners and service providers to deliver their services efficiently. Digital supply chain integration offers significant gains in efficiency – but it also increases the risk of cyberattacks. Suppliers with smaller IT infrastructures are particularly vulnerable and are becoming an increasingly frequent target for attackers. In sectors with extensive supply chains and highly sensitive data – such as the European Aerospace & Defense industry – cybersecurity across all tiers of the supply chain has long since become essential. 

To address this challenge, BoostAeroSpace – a joint initiative of leading European aerospace companies including Airbus, Dassault Aviation, Safran and Thales – launched the AirCyber program back in 2018. Its objective is to establish unified standards for assessing and enhancing the cybersecurity posture of suppliers. 

For mission critical projects such as our AirCyber Program, working together with skilled assessor companies is crucial”, says Romain Bottan, Chief Information Security Officer at BAS. “In usd, we have found a partner with outstanding assessment experience of relevant security standards and an expert workforce large enough to perform a significant number of assessments on short notice.”

Since 2021, usd AG has been an authorized partner for conducting AirCyber Maturity Assessments in the German-speaking region. The structured process includes a self-assessment by the supplier company and an independent on-site audit carried out by certified cybersecurity assessors. 

As one of the leading cybersecurity audit company, we are proud to apply our many years of experience to the aerospace sector. Our partnership with BoostAeroSpace reflects our shared mission: more security.

Anna-Magdalena Kohl, Head of Sales – Security Audits, usd AG

Jan Kemper, trägt Hemd und Anzug, lächelt in die Kamera

As a strategic audit partner, we support AirCyber in reliably assessing suppliers through structured maturity assessments. This creates tangible value for all companies involved and contributes to strengthening supply chain security in the long term.

Jan Kemper, Head of Security Audits, usd AG

About BoostAeroSpace

BoostAeroSpace SAS was founded by Airbus, Dassault Aviation, Safran and Thales. The consortium provides digital platforms for secure, standardized collaboration within the European aerospace and defense industry. With solutions for Product Lifecycle Management (PLM), Supply Chain Management (SCM), and collaborative work environments, BoostAeroSpace strengthens the resilience and competitiveness of the industry. The AirCyber program was developed to establish unified cybersecurity standards across the supply chain and to promote Europe’s digital sovereignty.

https://boostaerospace.com/about-boostaerospace

Also interesting:

Security Advisories on PRTG Network Monitor

Security Advisories on PRTG Network Monitor

The pentest professionals at usd HeroLab examined the PRTG Network Monitor web application as part of web application pentests and identified several vulnerabilities. Two vulnerabilities relate to cross-site scripting (XSS), which allows attackers to inject JavaScript...

PCI Secure Software Standard v2.0: What You Should Know

PCI Secure Software Standard v2.0: What You Should Know

On 15 January 2026, the PCI Security Standards Council (PCI SSC) released version 2.0 of the PCI Secure Software Standard. This is the first comprehensive revision since the introduction of the standard. Insight into the Key Changes The new version streamlines the...

Part-IS and ISO 27001: How to Leverage Synergies for Your Compliance

Part-IS and ISO 27001: How to Leverage Synergies for Your Compliance

On 22 February 2026, the EU Regulation Part-IS for aviation organizations will come into force. They must manage information security risks in a way that best protects civil aviation safety. Many already rely on an ISMS according to ISO 27001 – but is that enough for...

Categories

Categories