ISO 23629-12-2022 PDF

Full title and description

UAS traffic management (UTM) — Part 12: Requirements for UTM service providers. This international standard specifies organisational, safety, security, privacy and compliance-monitoring requirements that UTM service providers should meet when delivering UAS traffic management services.

Abstract

This document includes compliance monitoring, safety, security, privacy and other organisational requirements for providers in the context of UAS traffic management services. It is intended to ensure that providers operate UTM services with appropriate governance, risk controls, incident handling and protection of personal and operational data.

General information

• Status: Published (International Standard)
• Publication date: 29 July 2022
• Publisher: ISO (International Organization for Standardization)
• ICS / categories: 49.020, 03.080.99
• Edition / version: Edition 1 (2022)
• Number of pages: 25

Key bibliographic and lifecycle metadata as published by ISO (status: published; under review for eventual revision).

Scope

Specifies organisational and management requirements for entities providing UTM services — including compliance monitoring, safety management, security (including cyber and information security) and privacy/data protection measures — so that UTM services can be operated safely, securely and in a manner that protects users and affected third parties. The scope focuses on provider responsibilities and does not define detailed technical protocols for data exchange or system architecture (those are covered in other parts of the ISO 23629 series).

Key topics and requirements

• Governance and organisational structure for UTM service providers (roles, responsibilities, accountability).
• Safety management: risk assessment, hazard identification, safety cases and continuous safety assurance.
• Compliance monitoring and reporting, including recordkeeping and auditability.
• Security requirements: information security, access control, resilience and incident response.
• Privacy and data protection measures for personal and operational data processed by UTM services.
• Operational continuity, business continuity planning and service availability expectations.
• Incident reporting, investigation and corrective/preventive actions.
• Personnel competence, training and qualification expectations for provider staff.
• Interoperability and conformance considerations with other UTM/UTM-related standards and stakeholders.

Typical use and users

Primary users are UTM service providers and operators who design, deploy or operate UTM services. Secondary users include air navigation service providers, national aviation authorities and regulators, system integrators, UTM platform vendors, safety and security managers, procurement teams, certification bodies and large drone operators (including urban air mobility stakeholders) who must assess provider capability and compliance.

Related standards

Part of the ISO 23629 series on UAS traffic management. Complementary and related documents include ISO/TR 23629-1 (survey results on UTM), ISO 23629-5 (UTM functional structure) and other parts addressing functional/performance requirements, remote identification and related UTM topics. Several additional parts of ISO 23629 are published or under development to cover functions, performance, remote ID and implementation guidance.

Keywords

UAS traffic management, UTM, UTM service provider, unmanned aircraft systems, safety management, compliance monitoring, cybersecurity, privacy, data protection, operational continuity, ISO 23629

FAQ

Q: What is this standard?

A: ISO 23629-12:2022 is an international standard that defines organisational, safety, security, privacy and compliance-monitoring requirements for providers of UAS traffic management (UTM) services.

Q: What does it cover?

A: It covers provider responsibilities such as governance, safety management, security and privacy controls, compliance monitoring, incident reporting and business continuity for entities operating UTM services. It does not prescribe low-level technical data-exchange protocols (those are addressed in other parts of the ISO 23629 series).

Q: Who typically uses it?

A: UTM service providers, regulators and certification bodies; system integrators and vendors of UTM platforms; large drone operators and organizations assessing or procuring UTM services.

Q: Is it current or superseded?

A: The standard was published in July 2022 (Edition 1) and is listed as published but subject to periodic review; a committee draft to revise Part 12 has been registered, so users should check for updates or a future revised edition before assuming it remains the final authority.

Q: Is it part of a series?

A: Yes — ISO 23629 is a multipart series covering UAS traffic management (UTM). Relevant parts include TR 23629-1 (survey), 23629-5 (functional structure), 23629-8 (remote identification) and others under development that address functionality, performance and implementation topics.

Q: What are the key keywords?

A: UTM, UAS traffic management, service provider requirements, safety management, compliance monitoring, cybersecurity, privacy, ISO 23629.