{ "batchId": "HBU-20260815085526", "generatedAt": "2026-08-15T08:55:26.116Z", "status": "Ready for Microsoft 365 Word production", "production": { "provider": "Microsoft 365", "application": "Word", "mode": "group-approved-by-target-handbook", "callback": "/api/handbook-production/callback" }, "handbooks": [ { "targetHandbook": "CST Level 7 Handbook", "changeCount": 5, "changeTitle": "1. CST Level 7 Handbook: Board reporting: metrics without decision context\n2. CST Level 7 Handbook: NIS2 governance evidence threshold\n3. CST Level 7 Handbook: CST EMAIL INTAKE CONTROLLED TEST — 11 August 2026 – FLOW TEST\n4. CST Level 7 Handbook: CST EMAIL INTAKE CONTROLLED TEST — 11 August 2026 – FLOW TEST - API RETEST\n5. CST Level 7 Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "targetSection": "Weekly intelligence update", "approvedText": "1. CST Level 7 Handbook: Board reporting: metrics without decision context\nConsider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.\n\n2. CST Level 7 Handbook: NIS2 governance evidence threshold\nConsider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.\n\n3. CST Level 7 Handbook: CST EMAIL INTAKE CONTROLLED TEST — 11 August 2026 – FLOW TEST\nConsider incorporating this approved intelligence into the next controlled handbook update: Controlled test confirming that a structured Monday research email creates a pending item in the CST Intelligence Register.\n\n4. CST Level 7 Handbook: CST EMAIL INTAKE CONTROLLED TEST — 11 August 2026 – FLOW TEST - API RETEST\nConsider incorporating this approved intelligence into the next controlled handbook update: Controlled test confirming that a structured Monday research email creates a pending item in the CST Intelligence Register.\n\n5. CST Level 7 Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\nConsider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceEvidence": "RES-0807; REG-0810; REG-B1CAF5A144; REG-421DE5D383; RES-5EE3202ED6", "approvalRecord": "HBK-D7BBFC218B approved 2026-08-15T07:25:18.925Z; HBK-BF6D652BFA approved 2026-08-15T07:25:18.925Z; HBK-F1B2034E00 approved 2026-08-15T07:25:18.925Z; HBK-807D92F675 approved 2026-08-15T07:25:18.925Z; HBK-58BF7A18EE approved 2026-08-15T07:25:18.925Z", "changes": [ { "suggestionId": "HBK-D7BBFC218B", "sourceItemId": "RES-0807", "title": "CST Level 7 Handbook: Board reporting: metrics without decision context", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "sourceTrace": { "sourceItemId": "RES-0807" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-BF6D652BFA", "sourceItemId": "REG-0810", "title": "CST Level 7 Handbook: NIS2 governance evidence threshold", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceTrace": { "sourceItemId": "REG-0810" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-F1B2034E00", "sourceItemId": "REG-B1CAF5A144", "title": "CST Level 7 Handbook: CST EMAIL INTAKE CONTROLLED TEST — 11 August 2026 – FLOW TEST", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Controlled test confirming that a structured Monday research email creates a pending item in the CST Intelligence Register.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Controlled test confirming that a structured Monday research email creates a pending item in the CST Intelligence Register.", "sourceTrace": { "sourceItemId": "REG-B1CAF5A144" }, "decisionPathway": "Technical validation only. This is not research approved for publication.Technical validation only. This is not research approved for publication.", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-807D92F675", "sourceItemId": "REG-421DE5D383", "title": "CST Level 7 Handbook: CST EMAIL INTAKE CONTROLLED TEST — 11 August 2026 – FLOW TEST - API RETEST", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Controlled test confirming that a structured Monday research email creates a pending item in the CST Intelligence Register.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Controlled test confirming that a structured Monday research email creates a pending item in the CST Intelligence Register.", "sourceTrace": { "sourceItemId": "REG-421DE5D383" }, "decisionPathway": "Technical validation only. This is not research approved for publication.Technical validation only. This is not research approved for publication.", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-58BF7A18EE", "sourceItemId": "RES-5EE3202ED6", "title": "CST Level 7 Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceTrace": { "sourceItemId": "RES-5EE3202ED6" }, "decisionPathway": "Aviation boards and accountable managers can use the consolidated rules to verify scope, responsibility, assurance evidence and the linkage between information-security risk management and aviation safety obligations.", "approvedAt": "2026-08-15T07:25:18.925Z" } ] }, { "targetHandbook": "CST Governance Committee Handbook", "changeCount": 3, "changeTitle": "1. CST Governance Committee Handbook: Board reporting: metrics without decision context\n2. CST Governance Committee Handbook: NIS2 governance evidence threshold\n3. CST Governance Committee Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "targetSection": "Weekly intelligence update", "approvedText": "1. CST Governance Committee Handbook: Board reporting: metrics without decision context\nConsider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.\n\n2. CST Governance Committee Handbook: NIS2 governance evidence threshold\nConsider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.\n\n3. CST Governance Committee Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\nConsider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceEvidence": "RES-0807; REG-0810; RES-5EE3202ED6", "approvalRecord": "HBK-04B84FE45E approved 2026-08-15T07:25:18.925Z; HBK-8CCBA921B6 approved 2026-08-15T07:25:18.925Z; HBK-9A75F86816 approved 2026-08-15T07:25:18.925Z", "changes": [ { "suggestionId": "HBK-04B84FE45E", "sourceItemId": "RES-0807", "title": "CST Governance Committee Handbook: Board reporting: metrics without decision context", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "sourceTrace": { "sourceItemId": "RES-0807" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-8CCBA921B6", "sourceItemId": "REG-0810", "title": "CST Governance Committee Handbook: NIS2 governance evidence threshold", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceTrace": { "sourceItemId": "REG-0810" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-9A75F86816", "sourceItemId": "RES-5EE3202ED6", "title": "CST Governance Committee Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceTrace": { "sourceItemId": "RES-5EE3202ED6" }, "decisionPathway": "Aviation boards and accountable managers can use the consolidated rules to verify scope, responsibility, assurance evidence and the linkage between information-security risk management and aviation safety obligations.", "approvedAt": "2026-08-15T07:25:18.925Z" } ] }, { "targetHandbook": "CST Practitioner Handbook", "changeCount": 6, "changeTitle": "1. CST Practitioner Handbook: Board reporting: metrics without decision context\n2. CST Practitioner Handbook: NIS2 governance evidence threshold\n3. CST Practitioner Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\n4. CSTF Practitioner Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\n5. CSTF Practitioner Handbook: Board reporting: metrics without decision context\n6. CSTF Practitioner Handbook: NIS2 governance evidence threshold", "targetSection": "Weekly intelligence update", "approvedText": "1. CST Practitioner Handbook: Board reporting: metrics without decision context\nConsider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.\n\n2. CST Practitioner Handbook: NIS2 governance evidence threshold\nConsider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.\n\n3. CST Practitioner Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\nConsider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.\n\n4. CSTF Practitioner Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\nConsider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.\n\n5. CSTF Practitioner Handbook: Board reporting: metrics without decision context\nConsider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.\n\n6. CSTF Practitioner Handbook: NIS2 governance evidence threshold\nConsider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceEvidence": "RES-0807; REG-0810; RES-5EE3202ED6; RES-5EE3202ED6; RES-0807; REG-0810", "approvalRecord": "HBK-00860A27F4 approved 2026-08-15T07:25:18.925Z; HBK-B8E13B3F63 approved 2026-08-15T07:25:18.925Z; HBK-8EF73BB4E5 approved 2026-08-15T07:25:18.925Z; HBK-D76FAD6F76 approved 2026-08-15T07:25:18.925Z; HBK-2755E45EBB approved 2026-08-15T07:25:18.925Z; HBK-D3740C8CFA approved 2026-08-15T07:25:18.925Z", "changes": [ { "suggestionId": "HBK-00860A27F4", "sourceItemId": "RES-0807", "title": "CST Practitioner Handbook: Board reporting: metrics without decision context", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "sourceTrace": { "sourceItemId": "RES-0807" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-B8E13B3F63", "sourceItemId": "REG-0810", "title": "CST Practitioner Handbook: NIS2 governance evidence threshold", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceTrace": { "sourceItemId": "REG-0810" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-8EF73BB4E5", "sourceItemId": "RES-5EE3202ED6", "title": "CST Practitioner Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceTrace": { "sourceItemId": "RES-5EE3202ED6" }, "decisionPathway": "Aviation boards and accountable managers can use the consolidated rules to verify scope, responsibility, assurance evidence and the linkage between information-security risk management and aviation safety obligations.", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-D76FAD6F76", "sourceItemId": "RES-5EE3202ED6", "title": "CSTF Practitioner Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceTrace": { "sourceItemId": "RES-5EE3202ED6" }, "decisionPathway": "Aviation boards and accountable managers can use the consolidated rules to verify scope, responsibility, assurance evidence and the linkage between information-security risk management and aviation safety obligations.", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-2755E45EBB", "sourceItemId": "RES-0807", "title": "CSTF Practitioner Handbook: Board reporting: metrics without decision context", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "sourceTrace": { "sourceItemId": "RES-0807" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-D3740C8CFA", "sourceItemId": "REG-0810", "title": "CSTF Practitioner Handbook: NIS2 governance evidence threshold", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceTrace": { "sourceItemId": "REG-0810" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" } ] }, { "targetHandbook": "CST Executive Handbook", "changeCount": 6, "changeTitle": "1. CST Executive Handbook: Board reporting: metrics without decision context\n2. CST Executive Handbook: NIS2 governance evidence threshold\n3. CST Executive Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\n4. CSTF Executive Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\n5. CSTF Executive Handbook: Board reporting: metrics without decision context\n6. CSTF Executive Handbook: NIS2 governance evidence threshold", "targetSection": "Weekly intelligence update", "approvedText": "1. CST Executive Handbook: Board reporting: metrics without decision context\nConsider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.\n\n2. CST Executive Handbook: NIS2 governance evidence threshold\nConsider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.\n\n3. CST Executive Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\nConsider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.\n\n4. CSTF Executive Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)\nConsider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.\n\n5. CSTF Executive Handbook: Board reporting: metrics without decision context\nConsider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.\n\n6. CSTF Executive Handbook: NIS2 governance evidence threshold\nConsider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceEvidence": "RES-0807; REG-0810; RES-5EE3202ED6; RES-5EE3202ED6; RES-0807; REG-0810", "approvalRecord": "HBK-6B75311EB6 approved 2026-08-15T07:25:18.925Z; HBK-7F8571D95B approved 2026-08-15T07:25:18.925Z; HBK-BE197AB5E5 approved 2026-08-15T07:25:18.925Z; HBK-B377C1E1D6 approved 2026-08-15T07:25:18.925Z; HBK-D65B4153B8 approved 2026-08-15T07:25:18.925Z; HBK-EC0C6D30AB approved 2026-08-15T07:25:18.925Z", "changes": [ { "suggestionId": "HBK-6B75311EB6", "sourceItemId": "RES-0807", "title": "CST Executive Handbook: Board reporting: metrics without decision context", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "sourceTrace": { "sourceItemId": "RES-0807" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-7F8571D95B", "sourceItemId": "REG-0810", "title": "CST Executive Handbook: NIS2 governance evidence threshold", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceTrace": { "sourceItemId": "REG-0810" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-BE197AB5E5", "sourceItemId": "RES-5EE3202ED6", "title": "CST Executive Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceTrace": { "sourceItemId": "RES-5EE3202ED6" }, "decisionPathway": "Aviation boards and accountable managers can use the consolidated rules to verify scope, responsibility, assurance evidence and the linkage between information-security risk management and aviation safety obligations.", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-B377C1E1D6", "sourceItemId": "RES-5EE3202ED6", "title": "CSTF Executive Handbook: Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: EASA consolidates the EU information-security regulations and associated acceptable means of compliance and guidance material for aviation organisations and authorities in a maintained, searchable rules resource.", "sourceTrace": { "sourceItemId": "RES-5EE3202ED6" }, "decisionPathway": "Aviation boards and accountable managers can use the consolidated rules to verify scope, responsibility, assurance evidence and the linkage between information-security risk management and aviation safety obligations.", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-D65B4153B8", "sourceItemId": "RES-0807", "title": "CSTF Executive Handbook: Board reporting: metrics without decision context", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Additional dashboards do not improve governance unless technical signals are translated into consequence and explicit choice.", "sourceTrace": { "sourceItemId": "RES-0807" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" }, { "suggestionId": "HBK-EC0C6D30AB", "sourceItemId": "REG-0810", "title": "CSTF Executive Handbook: NIS2 governance evidence threshold", "summary": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "targetSection": "Weekly intelligence update", "proposedOperation": "insert-contextually", "proposedInsertion": "Consider incorporating this approved intelligence into the next controlled handbook update: Committee papers should show exposed outcomes, accountable ownership and the evidence threshold for residual-risk acceptance.", "sourceTrace": { "sourceItemId": "REG-0810" }, "decisionPathway": "", "approvedAt": "2026-08-15T07:25:18.925Z" } ] } ] }