Automatic Dependent Surveillance-Broadcast has established itself as a critical component for the integration of unmanned systems into airspace. Satellite-based positioning with continuous data transmission achieves a level of precision that significantly exceeds that of conventional SSR systems.
System architecture and data flow
Bidirectional communication via air-to-air and air-to-ground links enables symmetrical information distribution between aircraft and ATC. ADS-B input provides pilots with the same situational awareness as air traffic control, thereby realizing the concept of cooperative surveillance.
b.r.m. Operational Implementation
We use ADS-B for air situation awareness in our 3,600 km² BVLOS flight area, Hatten-UAS. Data processing is carried out via our future USSP infrastructure, with both manned and unmanned systems being recorded and coordinated in real time. From our new location at Bremen Airport, we are developing the IT architectures for these critical surveillance systems.
Integration into DAA architectures
ADS-B acts as an essential component for detect and avoid systems. In combination with TCAS, it enables reliable detection and tracking of cooperative targets. As an IT service provider with aviation expertise, b.r.m. develops software solutions that seamlessly integrate these systems.
As a designated U-Space service provider, we develop ADS-B-based UTM services for seamless ATM/UTM integration. Data processing in our GDPR-compliant green IT data center ensures both operational efficiency and regulatory compliance. With the EASA standardization of ADS-L, we are continuously expanding our monitoring capabilities for UAS-specific requirements.
Technology leadership from Bremen
b.r.m. combines IT expertise with aviation expertise. Our solutions enable customers to make optimal use of ADS-B technology, from system integration to operational implementation in U-Space. ADS-B remains the standard for cooperative surveillance. At b.r.m., we make it usable.
In today's digital world, the IT security of corporate data and digital business assets is of paramount importance and has a highlighted relevance. The new SonicWall Cyber Threat Report 2024 offers revealing insights into the current cyber security and IT security situation that every company should be aware of. As one of the leading regional IT service providers in Bremen, b.r.m. IT & Aerospace offers customized solutions to master these challenges. We specialize in IT service, IT security and green IT.
Strong growth in cyber threats
The new report from SonicWall shows an alarming growth in digital threats. Cases of malware, encrypted threats and cryptojacking attacks are on the rise. The rapid 659% increase in cryptojacking is particularly critical. These findings underline the need for a robust and professional IT security strategy for companies.
Customized IT service for companies in Bremen
At b.r.m. IT & Aerospace, we are convinced that every company has individual security needs and benefits from a customized IT service. Our experts use the latest findings and modern technologies to develop security measures tailored to your needs. This enables us to protect your company - today and tomorrow. Offensive measures are the best defense. With proactive monitoring and threat intelligence, we can identify threats before they can cause damage.
Cyber Threat Report underlines the relevance of professional IT service
The findings of the SonicWall Cyber Threat Report 2024 highlight the need for a strong IT service. As a professional company with over 30 years of experience, b.r.m. IT & Aerospace is ready to support you and your company with first-class IT service and customized security solutions. Please contact our managing director Harald Rossol to find out more about our IT service in Bremen. You can reach us by phone at +49 421 34 14 94 and by e-mail at brm@brm.de.
The path to certification in accordance with ISO/IEC 27001 "Information security, cyber security and data protection - Information security management systems - Requirements" is arduous and time-consuming. The first hurdles have already been successfully overcome and the first audit successfully completed.
The further certification steps will take place in the course of Q2-Q3/2024.
Following the successful recertification of the EcoStep 5.1 certification for our integrated management system in February of this year, we are rounding off our future activities as a USSP (U-Space Service Provider) with ISO/IEC 27001 as a whole.
Mr. Marius Ammermann will be happy to provide you with further information. You can reach us by phone at +49 421 34 14 94 and by e-mail at brm@brm.de.
Conferencing solutions have become an integral part of today's working world. They enable location-independent phone calls with cameras and document sharing. However, not all providers offer data protection.
Given the large number of providers, user-friendliness and data security are particularly important. In addition, installation effort and costs vary significantly between the different providers. Even if a video conference with a cloud connection initially seems compliant, it should always be borne in mind that the service provider has complete control over the data. Compliance with the GDPR is required by law for all data processing and data storage. It should be noted that although the providers encrypt the data in transit through the internet, decryption takes place on the provider's servers, i.e. on the cloud servers. Although the providers must comply with the GDPR, the user is dependent on the trust of the providers. As this trust is very questionable in terms of data protection, a secure alternative should be found.
Conference solutions at b.r.m.
The Bremen-based company b.r.m. IT & Aerospace offers its customers GDPR-compliant conference solutions through its Green IT-certified data center. The files are stored at b.r.m. unlike conventional providers, the files are not decrypted on the cloud servers in the USA, but on b.r.m.'s servers in Bremen. The use of Zoom, for example, is therefore GDPR-compliant, as Zoom no longer has control over the data. Several privacy principles as well as technical and organizational measures (TOM) ensure that the data of the conference solution is sustainably protected and handled in compliance with the GDPR.
The GDPR applies to all personal data that is processed on the internet. This means that every provider is required to comply with it. Violations lead to fines of 20 million euros and, in the case of tech giants, up to four percent of global turnover. We offer you the solution to this issue. The advice and support provided by b.r.m. enables security analyses and risk assessments of your data flow. If you have any questions about our GDPR-compliant conference solution, you can contact our data protection expert Harald Rossol at any time.
The certificate was presented by the external security experts Mr. Thorsten Brendel and Mr. Daniel Köster.
But this is only the beginning of the safe path...
The timetable for the upcoming ISO 27001 audit and certification was also defined today. The project is expected to take a very short time.
This can simply be attributed to the very good and existing certifications, guidelines, management systems and assets at b.r.m.. The imminent turn of the year at b.r.m. is "standardized"
Compliance with the DSGVO and GDPR is more important than ever in the age of the internet. They are the basic rules of data protection and data security. They also form the basis of transparent handling, which is intended to limit the misuse of data.
What is the GDPR?
The General Data Protection Regulation (GDPR) originates from the European Union and provides rules for the processing of personal data. The regulation must be applied if data is stored or is to be stored in a file system during processing.
These apply throughout the EU in both the private and public sectors. This means that every company that processes personal data must comply with the GDPR. This also applies to natural and legal persons, as well as to companies working on behalf of a third party.
What does GDPR stand for?
The General Data Protection Regulation (GDPR) forms the new legal framework of the European Union. The regulation defines exactly how personal data may be collected and processed.
Since May 2018, these regulations have applied to all organizations based in the EU that process personal data. It also applies to all organizations worldwide that process the data of EU citizens.
DSGVO and GDPR at b.r.m.
The Bremen-based IT service provider b.r.m. is known for its GDPR-compliant data center. In addition, b.r.m. has strengthened its security through several parameters. From technical and organizational measures (TOM) to security analyses and risk assessments, business ressource management is ideally positioned.
In addition, Harald Rossol and Thorsten Brendel from b.r.m. are engaged as company data protection officers. They are experts in data protection and will be happy to answer any questions you may have.
In an increasingly digital world, modern IT services are more in demand than ever, as is an attitude towards solid IT security. In addition to qualitative and rapid processing of upcoming tasks by effective service providers, the area of data and network security, or IT security for short, is still an often underestimated sub-area.
As stated by our expert partner Sonicwall in the latest annual report, cyber attacks by ransomware and encrypted threats are increasing significantly. Ransomware attacks in particular have risen by 105% compared to the previous year and by as much as 232% compared to 2019.
In addition to our data protection resources through Harald Rossol and Thorsten Brendel, we also have extensive expertise in IT security and GDPR. Together with our partners, we have the concepts to keep your security up to date.
Ransomware - money or computer?
The method of extorting a 'ransom' by blocking the computer has increased considerably in recent years. The user of a computer then only sees the attackers' 'ransom note' on the monitor. The particularly perfidious thing about this is that if the victim agrees to the demand, their computer usually remains blocked anyway. It is therefore very rare to be able to 'buy your way out'.
Ransomware no longer affects just one operating system. Whether Linux, Mac OS or Windows, all users are affected by this digital form of highway robbery. There have also long been many instructions for building ransomware, known as 'crimeware kits', on the DarkNet. Ransomware usually does not encrypt the entire computer, but rather the data that is important to the user, such as the 'My Documents' folder under Windows.
Protection against ransomware is similar to protection against other viruses or Trojans. For example, a user receives an email with the attachment of an unpaid invoice, with a threat of punishment from the Federal Criminal Police Office, or with alleged usage violations by GEMA. Anyone who opens such an attachment has then handed the blackmailers the 'house key' themselves.
You should therefore NEVER open an e-mail attachment that does not come from an absolutely trustworthy source. GEMA and the BKA still use the good old letter post. It is also important to regularly back up all relevant data on external data carriers, as this keeps it out of reach of the blackmailers. Browsers can be protected against the execution of Java commands by installing applications such as 'NoScript', and ad blockers also offer increased protection.
Firewall: Overcoming walls
A program must always open a 'port' - or at least a porthole - if its generated content is also to be visible on other monitors worldwide. As in the case of a homepage, for example. Where something can leave such a 'port' or 'harbor' into the virtual world, something can of course also enter it. This is why 'firewalls' were created to protect a computer from unwanted access from the network. These security programs make sure that only the desired guests enter the home port according to defined rules. As a rule, every access must overcome two such protective walls: the first at the provider, the second at the client on the network computer.
Privacy by design - IT security as a holistic concept
The two terms 'privacy by design' and 'privacy by default' are older than the new General Data Protection Regulation (GDPR). However, the law has given them a whole new meaning (Art. 25 GDPR).
'Privacy by design' means that the technical structure of a data processing system must be designed in such a way that data protection is automatically integrated into the system. In other words, data protection and IT security must be a system feature. This is done through the 'Technical and Organizational Measures' (TOM) when installing the computers and implementing their programs. This is the manufacturer's turn.
'As quickly as possible', 'create transparency', 'minimize', 'enable' - all phrases that have so far created little more than a wide scope for interpretation. In short, the rule of 'privacy by design' does not allow for a standardized answer; it depends on the respective data protection requirements. However, it is clear that the possible requirements of the GDPR must be taken into account when setting up a data processing system and when selecting and implementing the technology and software used.
Interested readers can find the complete Cyber Thread Report 2022 from our partner Sonicwall here.
The term 'Binding Corporate Rules' (BCR) first appeared in the EU Data Protection Working Party in June 2003. The idea was to create a flexible instrument for data transfer that would also meet the requirements of data protection law. The result was a procedure that allows companies to individually structure data protection when transferring data to third countries, provided that the Binding Corporate Rules applied meet certain minimum standards.
These included, among others:
1. development and implementation of a security concept 2. data protection training for employees 3. mandatory participation in an audit program 4. payment of compensation in the event of violations 5. regulated complaints procedure 6. assurance of transparency 7. definition of the scope of application.
The advantage of the introduction of 'corporate binding rules' seemed to be the possibility of individually structuring data transfers to 'unsafe third countries'. The main disadvantage was the high organizational effort and the lengthy review process. However, as data protection was subsequently not guaranteed even in the 'safe third countries' (see, for example, the Facebook scandal and Cambridge Analytica), a European General Data Protection Regulation (GDPR) has now replaced a European General Data Protection Regulation (GDPR) the BCR. The new regulation provides for unexpectedly high penalties for companies that do not handle data protection responsibly.
A familiar picture: at the end of a customer meeting, the partners exchange their business cards. Both of them later enter the data contained on them into their respective customer databases, but they have already violated the new General Data Protection Regulation (GDPR) several times. At least if you take the wording of the law at its word. This is because the GDPR is primarily intended to create 'more data transparency'. Every partner would therefore have to be informed immediately about which personal business card data is processed and how, and which rights of objection this person has in the course of data processing.
How these information obligations are to be fulfilled is described in particular in Articles 13 and 14 of the GDPR. It also states that this information must be provided immediately. So if two people hand over their business cards to each other, for example at a trade fair, then both would have to inform each other about the reciprocal handling of the data in accordance with Art. 13 GDPR. However, a short sentence is by no means sufficient for this; the required data protection information would barely fit on an A4 page. In reality, compliance with the GDPR would therefore be more like a slapstick act, with both parties 'texting' each other for pages on end. It would also be far removed from reality to hand the other person a piece of paper with data protection information when handing over business cards. Combined with the request to confirm this in writing. Especially as this would pose a problem in terms of subsequent verifiability.
In view of the impracticability of the GDPR, politicians are already fiddling around, and not just on this point. A spokesperson for the Berlin supervisory authority said that the mere "receipt of the business card does not in itself trigger an obligation to provide information". This 'duty to inform' would only arise in cases where the data contained on the card is stored. Although this would make things easier, it would still contradict the intention of why business cards are exchanged in the first place. Companies store the data from business cards handed over in their customer data management program so that they can expand their own partner network in the business interests of both sides. Quite apart from this, the supervisory authority also fails to state the legal basis on which it arrived at its unusual opinion. This is because the statement by the above-mentioned employee contradicts the wording of the regulation. In other words, the GDPR is still in conflict with reality in many respects.
Bitkom Managing Director Dehmel recommends informing every person who has handed over a business card promptly afterwards about the mandatory information in accordance with Art. 13 GDPR in order to offer them the opportunity to object to the data processing at a later date. Such a solution would still contradict the direct wording of the law, but at least it seems more 'practicable'. What the GDPR lacks above all, however, are concrete and legally certain statements and assistance from the supervisory authorities. The GDPR urgently needs practical 'implementing provisions'.
The main reason for the infringement is the technical process used by Facebook subsidiary WhatsApp Inc. in California. A user registers there with their mobile phone number and the messenger service then reads the address book of users on their smartphones unnoticed. Ostensibly to locate other WhatsApp users. This comparison is repeated at regular intervals.
Despite all the data collection mania, the company is trying to keep a 'lean foot' on its own shoulders: Users alone are responsible for the legality of data transmission. In the event of a case, the criminal provisions of the GDPR would then also apply to the users alone. According to its 'Privacy Policy', WhatsApp also uses the data obtained for its own purposes: The company reserves the right to make extensive use of the information collected, for example for "measurement, analysis and other company services". In addition, WhatsApp generally shares information with other Facebook companies.
The conclusion of the German data protection experts: "The transmission of contact data from the address book to WhatsApp is regularly inadmissible." To make matters worse, possible sanctions under the GDPR would only affect the company that allowed the use of WhatsApp in its area of responsibility.
The advice to companies and organizations can therefore only be this: Ban the use of WhatsApp at all operational levels.
You are currently viewing placeholder content from Turnstile. To access the actual content, click the button below. Please note that doing so will result in data being shared with third-party providers.
You are currently viewing a placeholder content from Facebook. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from Instagram. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from X. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
