AF Standard · First Edition
Aerospace Digital Systems, Software & Cybersecurity
Lifecycle assurance for software, programmable hardware, connected systems, secure updates and trustworthy digital evidence.
First Edition and supporting resources
Read the standard. Find the document for the task.
Each AF Standard has a defined technical scope and its own document collection. The original PDFs are available to view online or download from this page.
Requirements and applicability
Start with the First Edition for definitions, requirements, technical boundaries and the relationship between normative and informative content.
Practical implementation resources
Find policies, manuals, procedures, profiles, checklists and records by document code or subject. Supporting tools do not replace the standard.
Purpose
AF 9500 — the technical framework.
AF 9500 provides a lifecycle assurance framework for aerospace software, programmable hardware, connected digital systems and cybersecurity-dependent technical evidence. It connects engineering, digital configuration, secure development, resilience, updates, recovery and maintainability.
Why this subject matters
Digital failures can arise from code, configuration, dependencies, data integrity, access, insecure updates, unsupported components or weak recoverability. Cybersecurity is considered throughout the technical lifecycle.
Intended application
Where the technical field applies.
The published framework can apply across aerospace lifecycle responsibilities, according to actual activity and scope.
- Avionics and embedded software
- Programmable hardware
- Spacecraft and ground systems
- Mission and UAS control software
- Manufacturing and inspection software
- Connected products and production OT
- Digital engineering and cloud-dependent technical services
Application domains
Requirement architecture
How AF 9500 is organized.
Digital lifecycle & architecture
Requirements, implementation, integration, release and retirement.
Configuration & provenance
Source, builds, dependencies, toolchains and released identity.
Verification & regression
Interfaces, abnormal conditions, target configuration and anomalies.
Secure development
Security requirements, versions and vulnerability exposure.
Identity & access
Privileged actions, machine identities and remote maintenance.
Dependency integrity
Software component inventory and provenance.
Connected systems & OT
Segmentation, compatibility and degraded operation.
Updates & recovery
Origin, rollback, incident response and return-to-service confidence.
Digital evidence & maintainability
Trustworthy records and preservation of technical knowledge.
First Edition / publication package
The standard and its supporting documents.
Read AF 9500 for the technical requirements and application boundaries. Use the supporting policies, manuals, procedures, profiles and records for the relevant implementation task.
Aerospace Digital Systems, Software & Cybersecurity
Lifecycle assurance for software, programmable hardware, connected systems, secure updates and trustworthy digital evidence.
- Edition
- First Edition
- Extent
- 69 pages
- Language
- English
- Supporting set
- 147 documents
AF 9500 / supporting documents
Document collection
Continue with 148 PDFs in 12 groups: policies, manuals, procedures, technical profiles and practical records alongside the controlling standard.
AF 9500 · First Edition. Supporting documents identify their own edition and scope. Implementation tools do not replace the controlling standard; completed forms and checklists are not independent approvals.
148 documents in the collection
View online or download the original PDFStandard1
Aerospace Digital Systems, Software & Cybersecurity
First Edition
Foundation2
Standard-to-Document Coverage Matrix
First Edition
Master Document List
First Edition
Policies5
Digital Product Integrity and Eligible Decisions
First Edition
Secure Development, Supply and Build Integrity
First Edition
Identity, Data and Cryptographic Trust
First Edition
Resilient Operations, Updates and Incident Recovery
First Edition
Model Assurance, Responsible Automation and Claims
First Edition
Manuals4
Software Development and Release Manual
First Edition
Aerospace Integration and Mission Assurance Handbook
First Edition
Model Assurance and AI-Assisted Engineering Handbook
First Edition
Cybersecurity Operations and Recovery Manual
First Edition
Companions3
Interpretation Questions and Boundary Cases
First Edition
Implementation Guide
First Edition
Quantitative Methods and Worked Calculations
First Edition
Procedures30
Scope, Context and Consequence Review
First Edition
Integrated Safety-Security Risk Assessment
First Edition
Requirements and Interface Traceability
First Edition
Architecture and Isolation Assurance
First Edition
Lifecycle Gates, Competence and Independent Review
First Edition
Supplier and Software Dependency Assurance
First Edition
Configuration Baseline and Change Control
First Edition
Software Implementation and Code Review
First Edition
Protected Build, Pipeline and Signing
First Edition
Tool, Model and Formal-Method Assurance
First Edition
Verification, Validation and Authorized Security Testing
First Edition
Coverage, Test Data and Anomaly Disposition
First Edition
Timing, Concurrency and Resource Assurance
First Edition
Identity, Privilege and Emergency Access
First Edition
Cryptographic Profile and Key-Trust Lifecycle
First Edition
Data Integrity, Privacy and Retention
First Edition
Communications, Platform and Trust-Boundary Verification
First Edition
Cloud and Industrial Environment Assurance
First Edition
Aviation, Space and Remote-Mission Integration
First Edition
Machine-Learning Model and Data Assurance
First Edition
AI-Assisted Engineering and Agent Action Control
First Edition
Secure Configuration and Deployment Readiness
First Edition
Update, Offline Delivery and Rollback Management
First Edition
Logging, Detection and Monitoring Validation
First Edition
Vulnerability Applicability and Remediation
First Edition
Incident Response and Evidence Preservation
First Edition
Backup, Recovery and Semantic Reconciliation
First Edition
Assurance Case, Release and Legacy Continued Use
First Edition
Retirement, Authority Removal and Data Disposition
First Edition
Assurance Review, Records and Local Adoption
First Edition
Technical profiles18
Common Digital Assurance Parameters
First Edition
Embedded and Critical Software
First Edition
Aviation and Ground-System Integration
First Edition
Space and Remote-Mission Systems
First Edition
Cloud and Shared Digital Services
First Edition
Industrial, Test and Maintenance Systems
First Edition
Platform, Firmware and Boot Integrity
First Edition
Identity, Cryptography and Trust Services
First Edition
Supplied Components and Software Dependencies
First Edition
Build Pipelines and Engineering Tools
First Edition
Real-Time and Resource-Constrained Systems
First Edition
Communications and Distributed Authority
First Edition
Data, Privacy and Digital Evidence
First Edition
Machine-Learning and Adaptive Functions
First Edition
AI-Assisted Engineering and Agentic Workflows
First Edition
Remote Support and Human-System Operations
First Edition
Legacy Systems and Long-Life Support
First Edition
Incident, Recovery and Continuity
First Edition
Checklists24
Scope, Context and Parameter Baseline
First Edition
Integrated Risk, Architecture and Isolation
First Edition
Requirements and Interface Traceability
First Edition
Lifecycle, Competence and Independence
First Edition
Suppliers and Dependency Transparency
First Edition
Configuration and Controlled Change
First Edition
Implementation and Code Review
First Edition
Build, Provenance and Signing
First Edition
Tools, Models and Formal Evidence
First Edition
Verification, Coverage and Anomalies
First Edition
Timing, Concurrency and Resources
First Edition
Identity, Privilege and Cryptographic Trust
First Edition
Data Integrity and Privacy
First Edition
Communications and Platform Integrity
First Edition
Cloud and Industrial Environments
First Edition
Aviation, Space and Remote Integration
First Edition
Machine-Learning Model Assurance
First Edition
AI-Assisted Work and Agent Boundaries
First Edition
Deployment and Secure Configuration
First Edition
Updates, Rollback and Fleet Confirmation
First Edition
Logging and Detection
First Edition
Vulnerability and Incident Handling
First Edition
Recovery and Human Operations
First Edition
Release, Legacy, Retirement and Assurance
First Edition
Forms30
Scope, Context and Consequence Review Record
First Edition
Integrated Safety-Security Risk Assessment Record
First Edition
Requirements and Interface Traceability Record
First Edition
Architecture and Isolation Assurance Record
First Edition
Lifecycle Gates, Competence and Independent Review Record
First Edition
Supplier and Software Dependency Assurance Record
First Edition
Configuration Baseline and Change Control Record
First Edition
Software Implementation and Code Review Record
First Edition
Protected Build, Pipeline and Signing Record
First Edition
Tool, Model and Formal-Method Assurance Record
First Edition
Verification, Validation and Authorized Security Testing Record
First Edition
Coverage, Test Data and Anomaly Disposition Record
First Edition
Timing, Concurrency and Resource Assurance Record
First Edition
Identity, Privilege and Emergency Access Record
First Edition
Cryptographic Profile and Key-Trust Lifecycle Record
First Edition
Data Integrity, Privacy and Retention Record
First Edition
Communications, Platform and Trust-Boundary Verification Record
First Edition
Cloud and Industrial Environment Assurance Record
First Edition
Aviation, Space and Remote-Mission Integration Record
First Edition
Machine-Learning Model and Data Assurance Record
First Edition
AI-Assisted Engineering and Agent Action Control Record
First Edition
Secure Configuration and Deployment Readiness Record
First Edition
Update, Offline Delivery and Rollback Management Record
First Edition
Logging, Detection and Monitoring Validation Record
First Edition
Vulnerability Applicability and Remediation Record
First Edition
Incident Response and Evidence Preservation Record
First Edition
Backup, Recovery and Semantic Reconciliation Record
First Edition
Assurance Case, Release and Legacy Continued Use Record
First Edition
Retirement, Authority Removal and Data Disposition Record
First Edition
Assurance Review, Records and Local Adoption Record
First Edition
Registers15
Digital Assets and Deployed Configuration
First Edition
Requirements and Evidence States
First Edition
Safety-Security Scenarios and Assumptions
First Edition
Software Dependencies and Supply Duties
First Edition
Configuration Changes and Effectivity
First Edition
Engineering Tools and Models
First Edition
Anomalies, Defects and Verification Gaps
First Edition
Identity, Key and Trust References
First Edition
Vulnerabilities and Remediation
First Edition
Incidents and Affected Outputs
First Edition
Deployment and Update Population
First Edition
Models, Data and Operating Domains
First Edition
Exceptions, Legacy Use and Compensating Controls
First Edition
Release Statements and Operating Conditions
First Edition
Retirement and Retained Evidence
First Edition
Schedules7
Lifecycle Gates and Operational Handover
First Edition
Access, Key and Trust Reviews
First Edition
Verification, Tool and Model Reassessment
First Edition
Vulnerability and Update Programme
First Edition
Recovery Exercises and Backup Validation
First Edition
Supplier and Independent Assurance Reviews
First Edition
Migration, Support and Retirement Planning
First Edition
Work instructions9
Verify Digital Object and Target Identity
First Edition
Reconcile a Release Dependency Inventory
First Edition
Check Build Inputs and Provenance
First Edition
Record a Code Review and Analysis Finding
First Edition
Capture a Verification Result
First Edition
Provision or Revoke Bounded Access
First Edition
Verify Package Authenticity and Trust Conditions
First Edition
Perform Deployment Readiness Checks
First Edition
Reconcile Update and Activation States
First Edition
No matching AF 9500 documents.
Try another title, document code or group.
Programme relationships
Connected scope, separate requirements.
AF 9100:2026 provides the published organizational and lifecycle assurance foundation. AF 9500 addresses a distinct technical discipline with its own First Edition and supporting resources; conformity with one AF Standard does not automatically establish conformity with another.
Technical connections
Relevant Technical Committees.
These connections identify subject expertise relevant to the scope. Formal drafting and publication decisions follow separate technical review and approval processes.