Skip to content
Chapter 17 of 23 · SeMS · Security Management

Threats classified againstICAO Annex 17.

Security events share the same operational picture as safety. Acts of unlawful interference are classified against ICAO Annex 17 on intake. A security event that also creates a safety hazard is one record, visible to both teams under their own access scope, sensitive fields stay inside the security perimeter.

NGXNORTHGALE AIR · SYNTHETIC OPERATION
The breach reports
A contractor tailgates through a Northgale airside door. The security event enters the same way the tug contact did: structured, classified, linked to the access control barrier it defeated, on the same graph.
In the operation
SeMSSecurity Management
4capabilities
1record types
3linked modules
Why it holds

Security and safety in one operational picture.

A threat that creates a safety hazard is one record, visible to both teams under their own access scope. Security-sensitive fields stay inside the security perimeter even when the underlying event is shared.

What it does

The capabilities, on one record.

Annex 17 classification

Every security event is classified against the ICAO Annex 17 taxonomy on intake, a closed list, audit-ready.

Threat-impact severity

Severity is set by the security officer with an AI-assisted threat-vulnerability-impact view, proposed, never auto-applied.

Shared safety picture

A security event that also creates a safety hazard is one linked record, sensitive fields scoped to the security perimeter.

Corrective measures

Protective and corrective actions close through the same effectiveness gate as the rest of the operation.

The records it produces

Real records, one reference each.

Every record carries a stable reference and a source on every field. Nothing is silently overwritten, and the trail is the record.

Classification aligned to ICAO Annex 17

Severity is officer-set and AI-assisted, never auto-applied

Security and safety share one operational picture

Sensitive fields stay behind the security perimeter

SEC
Security events
Incidents and threats, Annex 17 classified.
The gate

Security rides the same spine.

Security events carry sensitivity tiers and restricted access, and still link to the barriers and actions of the one operation. Confidential never means disconnected.

◉ CHAPTER 17 / 23NORTHGALE AIR · SYNTHETIC OPERATION
Next chapter
18 · Document Control

The operation is guarded. The next chapter is the paper that proves all of it: documents under control.