Security and Compliance


Security Concern & Compliance Reporting

GE Aerospace

We want to hear from you if you are aware of a vulnerability or threat to GE Aerospace.

    GE Aerospace
    Product Vulnerability & Incident Reporting.
    To report a potential vulnerability or security incident involving a GE Aerospace product, contact GE Aerospace Product Security Incident Response Team (GE Aerospace PSIRT) using the form below.
    Report a Product Cyber Issue
    GE Aerospace
    Cybersecurity Reporting
    A potential cybersecurity risk, threat, or incident related to GE Aerospace’s data, applications, network, or a GE Aerospace affiliated third-party entity, contact GE Aerospace Cybersecurity.
    Report a Cyber Issue

    Frequently asked questions

    Answer
    GE Aerospace PSIRT Product Security Incident and Vulnerability Management procedures are consistent with ISO 29147 and 30111 for identifying, validating, mitigating, and communicating vulnerabilities in GE Aerospace products. Consistent with these standards and our company’s security culture, GE Aerospace regularly partners with researchers, academia, government, and coordinating authorities to continuously assess for vulnerabilities and improve security in our products. In addition, GE Aerospace regularly discloses to its customers mitigations and remediation for GE Aerospace product vulnerabilities, both directly and in cooperation with coordinating authorities. Consistent with responsible disclosure practices, GE Aerospace does not publicly communicate information concerning vulnerabilities unless a remediation is available. Public disclosure is the release, either intentionally or unintentionally, of vulnerability information to any individual or organization other than GE Aerospace, the individual or entity that identified the vulnerability, and a coordinating authority (ex – NCCIC/ICS-CERT).