ADVOKS GLOBAL · KENYA
The Civil Aviation (Aeronautical Radio Frequency Spectrum Utilization) Regulations, 2025
14. Periodic inspection, testing and security of CNS facilities
Edition: 2026-03-25 · In force
14. Periodic inspection, testing and security of CNS facilities
(1)A CNS provider shall establish a procedure for the periodic inspection and testing of the communication, navigation and surveillance systems to verify that each facility meets the applicable operational requirements and performance specifications for that facility.(2)A CNS provider shall ensure that—(a)appropriate inspection, measuring and test equipment are available for staff to maintain the operation of each facility;(b)the control, calibration and maintenance of such equipment so that they have the precision and accuracy necessary for the measurements and tests to be performed.(3)Periodic inspection shall include—(a)security of the facility and site;(b)adherence to the approved maintenance programme;(c)upkeep of the equipment, building, site and site services; and(d)adequacy of facility records and documentation.(4)The CNS provider shall implement the security programme for the communication, navigation and surveillance systems in line with the ANSP’s security procedures manual as contained in the Civil Aviation (Certification of Air Navigation Service Providers) Regulations.(5)The security programme required under subregulation (4) shall specify the physical security requirements, practices, and procedures to be followed for the purposes of minimizing the risk of destruction of, damage to, or interference with the operation of communication, navigation and surveillance facility.(6)A CNS provider shall undertake a test transmission if—(a)the transmission is necessary to test a service, facility or equipment;(b)within a reasonable time before commencing the transmission, the users have been informed about the transmission;(c)at the commencement of the transmission, the service provider identifies the transmission as a test transmission; and(d)the transmission contains information identifying it as a test transmission.(7)A CNS provider shall ensure that—(a)communication navigation and surveillance systems and services are protected against service attacks to a level consistent with the application service requirements;(b)all end-systems supporting air navigation security services shall be capable of authenticating the identity of peer end-systems, authenticating the source of messages and ensuring the data integrity of the messages;(c)strategies and best practices on the protection of critical information and communications technology systems used for civil aviation purposes are developed and implemented;(d)policies are established to ensure that, for critical aviation systems—(i)system architectures are secure by design;(ii)systems are resilient;(iii)methods for data transfer are secured, ensuring integrity and confidentiality of data;(iv)system monitoring, incident detection and reporting methods, are implemented; and(v)forensic analysis of cyber incidents is carried out.