UABT Security Incident Reporting

In plain language

If your basic training system suffers a cyberattack or data breach, you must notify CAAS and explain what steps you are taking to fix it.

Requirement as structured

CAAS requires Unmanned Aircraft Basic Training Organisations (UABTOs) to notify the authority immediately upon detecting any confirmed IT security incident or data breach affecting their training system or data, along with proposed follow-up actions.

Original regulatory text

The UABTO should fully comply with the Personal Data Protection Act (PDPA) for the collection, use and disclosure of personal data and notify CAAS upon detection of any confirmed IT security incident or security breach affecting the system or its data, and provide CAAS with any follow-up actions to be taken.