Security and Compliance


Security Concern & Compliance Reporting

GE Aerospace

We want to hear from you if you are aware of a vulnerability or threat to GE Aerospace.

    GE Aerospace
    Product Vulnerability & Incident Reporting.
    To report a potential vulnerability or security incident involving a GE Aerospace product, contact GE Aerospace Product Security Incident Response Team (GE Aerospace PSIRT) using the form below.
    Report a Product Issue
    GE Aerospace PSIRT PGP Key

    Fingerprint: E937 26AE 5203 5699 F9C4 5D5C 34FD DF5E F97F 1031
    GE Aerospace
    Cybersecurity Reporting
    To report a potential threat to GE Aerospace’s data or network, or if you believe you have discovered an incident involving either, contact GE Aerospace Cyber Incident Response Team (GE Aerospace CIRT) using the form below.
    Report a Cyber Issue
    GE Aerospace
    NOMS in a Box
    If you are a GE Aerospace supplier requiring access to the NOMS in a Box (NIAB) software, please submit your request using the following form.
    Request Access To NIAB

    Frequently asked questions

    Answer
    GE Aerospace PSIRT Product Security Incident and Vulnerability Management procedures are consistent with ISO 29147 and 30111 for identifying, validating, mitigating, and communicating vulnerabilities in GE Aerospace products. Consistent with these standards and our company’s security culture, GE Aerospace regularly partners with researchers, academia, government, and coordinating authorities to continuously assess for vulnerabilities and improve security in our products. In addition, GE Aerospace regularly discloses to its customers mitigations and remediation for GE Aerospace product vulnerabilities, both directly and in cooperation with coordinating authorities. Consistent with responsible disclosure practices, GE Aerospace does not publicly communicate information concerning vulnerabilities unless a remediation is available. Public disclosure is the release, either intentionally or unintentionally, of vulnerability information to any individual or organization other than GE Aerospace, the individual or entity that identified the vulnerability, and a coordinating authority (ex – NCCIC/ICS-CERT).