Cybersecurity Audits of the Supply Chain within the Galileo Ground Control Segment

Auditing the compliance of cybersecurity processes, regulations, requirements, and policies in the navigation sector is a real challenge. The number of interdependencies and the stakeholders in the new navigation systems make the processes truly complex, and the increasing trend in subcontracting big parts of a system hides some of those interdependencies and other details in a huge number of assets and other regulatory and legal documentation obliges the auditors to become archeologists to assess the cybersecurity status. In this article, the authors introduce the experience of cybersecurity audits in the navigation sector within the ground control segment (GCS) andexplain some of the factors that contribute to the complexity of this activity.