Category: Blog

Navigating the Skies with Data & Technology – Comply365 Insights from the IATA World Data Symposium 2025

Navigating the Skies with Data & Technology – Comply365 Insights from the IATA World Data Symposium 2025

Following the IATA World Data Symposium which took place in Dublin in February, we share the Comply365 take on some of the key trends emerging from the conference sessions and discussions with airlines at the event. The IATA WDS theme ‘Digital skies, unleashing the power of Data in Aviation’ explored the latest innovations in data that are transforming the world of aviation.

Here is the Comply365 take on some of the most important themes from IATA WDS:

Real-Time Data for Real-Time Decisioning
Supplying the pilot with pertinent information to aid their decision-making process combining data from different systems that empowers the pilot to make more informed data-driven decisions over and above what aircraft instruments are displaying. 

Rapid digital decisioning is essential to the future of the connected, digital first airline. Every airline has data that holds critically important information that could transform their performance. But accessing, managing and using it can be a huge problem, especially when it’s stored in multiple formats across different departments, making it hard to identify, investigate, analyse and share in a productive and proactive way.

Sophisticated data analytics and digital decisioning tools are an absolute must to provide airlines with intuitive, intelligent data access and visualization, helping them to make faster data-driven decisions. This is something we are laser focused on at Comply365 with PureIntel – which has simplicity of data access, a highly intuitive user experience and speed to insight at its core.


Data Silos Need to be Addressed
Data silos across the airline persist and the need for integration with existing and new systems needs to be advanced. While airlines continue to have these data silos, opportunities to drive efficiencies via a 360 view of the operation will be missed.


Combining Data Provides the True Value
Airlines are increasingly recognizing that while individual data sets from various operational areas can offer useful insights on their own, the real value emerges when these disparate data sources are integrated and analyzed collectively. By combining data from different domains—such as operations, safety, and training—airlines can uncover deeper insights that would not be possible through isolated data sets. These areas are not only interconnected but are also critical to the smooth, efficient functioning and enhanced safety of airline operations. For instance, operational data might provide insights into training needs and potential safety risks, and training data can shed light on the operational readiness and effectiveness of crew members. When these datasets are combined, airlines can identify patterns and correlations that lead to more informed, data-driven decisions that enhance performance, minimize risks, improve training programs, and ultimately create a safer and more efficient flying experience. This holistic approach ensures that airlines are not just responding to isolated issues but are proactively addressing challenges across interconnected operational domains, maximizing both efficiency and safety.

Prioritization of Data Projects – Where to Invest?
Data analysts in airlines are operating in an uncertain environment – they are unsure which data projects will reap the best ROI and how to identify important data points amongst the noise. Many airline data projects fail because they start with too big of a scope and it takes too long to show the value of advanced analytics. This also presents an exciting opportunity for a data product that unearths the relevant data to drive a desired outcome for example improving operational efficiency, improving aircraft throughput etc. There is a clear demand for data products that can distill vast amounts of complex information into actionable insights, focusing on the most relevant data points that drive desired outcomes.

Data Governance Controls for AI
As the volume of data continues to grow at an unprecedented rate and becomes increasingly integrated with AI, establishing trust through robust data governance is more critical than ever. Airlines are taking proactive measures to ensure that they maintain meticulous data governance frameworks alongside a well-defined data strategy. This approach serves as a foundation for demonstrating control over how data is handled and processed, which is especially important as AI becomes a driving force in enhancing decision-making and operational efficiency. By adhering to stringent governance practices, airlines can reassure both customers and business partners that they are responsibly managing sensitive data and applying AI technologies ethically and securely.

While the goal is to leverage AI to enhance teams and supercharge efforts, this must be all while adopting a responsible approach with AI to gain confidence, experience, and gain the trust of the airline users and regulators – which requires transparency, testing, and time. By ensuring transparency and rigor in their data governance practices, airlines can foster confidence in their AI initiatives, creating a balance between technological advancement and responsible stewardship of customer data.

_________________________________________________________________________________________

At Comply365, our ongoing investment in PureIntel data analytics platform is to specifically address many of the above issues. Data is both an opportunity and an ongoing challenge to navigate given the vast data sets available. Being a data-empowered airline is the holy grail and will unlock significant efficiencies.

PureIntel by Comply365 is a dynamic business intelligence and data analytics platform that sets new benchmarks for the speed and ease of data-informed decision making across airline operations and safety. The self-serving data analytics platform enables users to create and distribute critical operational and safety insights with ease, and define data driven alerts for proactive risk management and to increase operational efficiency.

Learn more about PureIntel by Comply365

Ensuring Aviation Safety & Cybersecurity Compliance in 2025: What You Need to Know

EASA PART IS REGULATION

As the aviation industry continues to evolve, 2025 brings a wave of significant cybersecurity regulatory changes that Safety, Risk, and Compliance Officers must navigate to ensure operational efficiency and regulatory compliance. With new mandates from global authorities such as ICAO and EASA, staying informed is critical and being proactive ensures seamless compliance.

Cybersecurity Regulatory Changes in 2025

ICAO Cybersecurity Strategy

The International Civil Aviation Organization (ICAO) has been at the forefront of aviation cybersecurity efforts. Its Aviation Cybersecurity Strategy, first introduced in 2019, is built on seven key pillars:

  • International Cooperation
  • Governance
  • Effective Legislation and Regulations
  • Cybersecurity Policy
  • Information Sharing
  • Incident Management and Emergency Planning
  • Capacity Building, Training, and Cybersecurity Culture

In 2022, ICAO updated its Cybersecurity Action Plan, urging states to implement rules to manage aviation safety risks from cybersecurity events. As we enter 2025, many jurisdictions are still working to align with these requirements.

EASA Part-IS Regulation

The European Union Aviation Safety Agency (EASA) has taken significant steps to address cybersecurity threats through the Part-IS Regulation, which mandates aviation organizations to:

  • Identify, assess, and manage information security (IS) risks impacting aviation safety.
  • Implement an Information Security Management System (ISMS) within their operations.

Compliance Deadlines:

  • October 2025 – Applicable to Production Organizations (EASA Part 21).
  • February 2026 – Applicable to Air Operators and Maintenance Organizations.

For Safety, Risk, and Compliance Managers, this regulation is vital as it directly impacts an organization’s approval to operate and extends compliance responsibilities into IT activities. For more information on EASA Part IS and what it means for your airline, check out our detailed guide EASA Part-IS Regulation: Navigating the New Skies of Cybersecurity Regulations

Steps to Developing an Effective Information Security SMS

To meet these regulatory requirements, aviation organizations should follow a structured approach, here we also share some ways SafetyNet by Comply365 helps support airlines in this effort:

  1. GAP Analysis: Conduct an internal audit to identify IT systems and functions that could impact aviation safety.
    •  SafetyNet by Compl365 helps to document findings and raise corrective actions.
  2. System Updates: Assess risks and document the necessary controls and mitigations.
    •  SafetyNet by Comply365 centralizes all compliance tracking.
  3. Stakeholder Collaboration: Involve cross-functional teams in planning and training to ensure seamless integration.
    • SafetyNet and DocuNet for improved communication and documentation sharing.
  4. Monitor & Adjust: Continuously capture potential incidents to refine and enhance ISMS effectiveness.
    • SafetyNet analytics via PureIntel by Comply365 helps identify trends and inform proactive adjustments.

Best Practices for Ongoing Compliance

Staying compliant is an ongoing process that requires strategic planning and technological support. Engaging the best SMS partners to help address the ongoing safety compliance needs will be essential. Some best practices include:

  • Implementing an Advanced Safety Management Solution: Automate processes to reduce manual effort and human error.
  • Staying Informed: Keep track of evolving regulations through centralized compliance resources.
  • Leveraging Data: Utilize analytics tools such as PureIntel by Comply365 to drive data-based decision-making.
  • Fostering a Safety Culture: Promote compliance awareness at all organizational levels to embed a safety-first mindset.

Ensuring Compliance Beyond 2025

Compliance doesn’t stop once the initial regulatory deadlines are met. Solutions like SafetyNet by Comply365, alongside tools like DocuNet and PureIntel, empower aviation organizations to stay ahead of evolving regulations while optimizing operational efficiency.

By integrating cybersecurity risk management with existing compliance processes, organizations can ensure sustained regulatory alignment and a strong safety culture across the entire operation. Are you ready to meet the cybersecurity challenges of 2025? Start preparing today and ensure your organization remains consistently compliant, efficient, and resilient.

Detailed Guide Here

Defense Aviation Safety – Protecting Key Tenets of Safety While Driving Operational Efficiency

Defense Aviation Safety 2024

Learnings from the SAE Media Defence Aviation Safety Conference 2024: Enhancing Aviation Safety Through Innovation, Analysis, Training and Responsibility.

This October, London became the nexus for over 15 nations’ armed forces, coming together for the Fifth Annual Defence Aviation Safety Conference. With the global defense sector facing a degree of flux in many ways unmatched since WWII, fueled by the rapid evolution of battlefield and technology, a shift in collective consciousness has seen the role of safety go from a desirable operational outcome to a critical factor in military effectiveness.  

As with the wider aviation sector, defense aviation faces new and evolving challenges related to resources, technology and environment. Geopolitical complexity and the burden of legacy technology are compounded by growing rates of attrition across defense personnel. Echoing the conference’s theme of ‘Enhancing Aviation Safety through Innovation, Analysis, Training and Responsibility’, the summit saw defense sector leaders discussing the pivotal function of safety in matching the increasing pace of change posed by adversaries/modern warfare. With the US Air Force’s Col. Jesse S. Doyle observing ‘Powerful competition has driven a need for evolution’, the gathered forces discussed how they were responding to the drive for ever more agile, resilient and effective strategies with safety underpinning all operations.  

In today’s complex geopolitical environment, safety is a multi-faceted and rapidly evolving element of modern defense. To best leverage safety for military effectiveness, it must be broken down into its various elements, before we can understand how to apply ensuing technological and practical developments. In the following six key takeaways from the event, we will explore critical developments, from safety culture to its role in a resilient operating model, as well as technological advancements driving the efficacy of safety:  

  1. Safety Culture – understanding human factors for a proactive safety approach  
  1. Operational Resilience – protecting key safety tenets while driving efficiency  
  1. Risk Management and Mitigation – creating a sturdy foundation for safety 
  1. Data and the Drive for Digitization – streamlining legacy processes with effective data handling  
  1. Artificial Intelligence – understanding the difference between Large Language Models, Machine Learning and Artificial Intelligence, as well as their potential implementations 
  1. Industry and Defense – what can civil aviation learn from the defense sector, and vice versa?  

Safety Culture 

In the words of Air Commodore Howard Edwards, ‘Defense aviation is about delivering effect… The primary role is to survive and to defeat – to do that you must be safe.’ In many ways, safety culture is both the driving force behind, and a product of, the value, perception and practice of safety in an operational environment. Marking a pivotal moment in attitudes towards safety as being proactive, as much as reactive, the 2009 ‘Nimrod Review’ proved a catalyst for fundamental cultural change in the British Armed Forces. In response to the largest loss of life of British service personnel in a single incident in theatre which occurred in 2006, the government appointed Charles Haddon-Cave QC to conduct a review into the avoidable incident. In the publication. Haddon-Cave spoke for a ‘Just Culture’ which ‘strikes a sensible balance between ‘blame culture’ and a ‘blame-free culture’, i.e. between holding people properly accountable for their acts or omissions and ensuring the right lessons are learned for the future.’ In the 15 years since the review’s publication, the RAF, alongside other air forces, have followed this doctrine, implementing its message into a comprehensive Safety Management System (SMS), exemplified by the words of Edwards. By encouraging proactive reporting, with a non-punitive response championed by many of the conference’s speakers, air forces are able to take a pre-emptive approach to hazards, in order to gain the critical operational advantage by preserving the life of personnel and the platforms they crew.  

Though safety culture is unquantifiable, its impact manifests in numerous ways. Many speakers highlighted a rise in hazard reporting as evidence of a growing safety culture; if personnel recognize the value in reporting a hazard before it causes an incident, overall safety will improve, while providing greater data for preventative measures. Therefore, the higher the ratio of hazards to incidents reported, the better the force-wide safety culture. Similarly, other metrics used to measure cultural change include the ratio of reports to flying hours, and the number of individuals reporting.  

In the words of the US Combat Readiness Center’s Brigadier General Johathan Byrom, safety is a product of ‘training, discipline, safety culture and mitigating risk’. Thus, the approach to safety culture should be motivated by discipline and a recognition of value, as with other elements of operations. While air forces are reinforcing this messaging through regular training, publishing safety articles, and top-down leadership, there is still progress to be made and obstacles to overcome. As a result of outdated, labor-intensive processes, one speaker shared that soldiers were failing to report as they viewed it as an arduous, unnecessary administrative task, demonstrating the significant operational opportunity presented by reporting on mobile devices. To leverage the benefits of proactive reporting, militaries must modernize processes, embracing innovative and specialized software systems as demonstrated by the MAA, whose ASIMS platform has seen a 40% year on year growth in reporting through ease of use, intuitive UX, and cross-platform functionality. Through diligent training, reinforced by positive outcome-focused messaging, safety culture will grow to form a solid foundation for global defense forces.  

Operational Resilience – protecting key tenets of safety while maintaining operational efficiency  

In the wider context of the modern military, which (much like commercial aviation) is seeing a shortage in SQEP (Suitably qualified and experienced persons) and wider resource scarcity, a profound understanding of safety is crucial to making informed decisions in the field. In an increasingly common effort to ‘do more with less’, forces are maintaining operational resilience by leveraging their understanding of risk, bolstered by a strong reporting culture, coupled with innovative technology to complement the efforts of personnel. By making informed, risk-conscious decisions, forces are able to protect the key tenets of safety while driving efficiency.  

With pressure caused by time-scarcity and attrition, safety is integral in maintaining operational resilience. In his briefing discussing increasing combat power through risk management and analysis, the USAF Safety Center’s Colonel Michael Thomas observed, ‘We want to be able to train people to make well informed decisions. We no longer have the time or the people to create the scenario to practice ahead of time.’ By ensuring a thorough understanding of a mission’s risk, commanders enable warfighters to make informed decisions while operating in austere conditions, improving efficiency thanks to safety, rather than at its cost.   

Similarly, the Luftwaffe’s Brigadier General Armin Havenith posed the question, ‘Does flight safety impede military operations?’. Speaking of the fine balance between mission efficiency and measures for maximum safety, such as pre-emptive grounding of aircraft which disrupts operational tempo, Havenith made the case for safety as a driving factor for resilience. By shifting the approach from reactive to proactive, using data-driven decisions to act before incidents occur, there need not be a trade-off between the key tenets of safety and overall efficiency – maintaining airworthiness while enhancing capabilities even in resource-constrained environments.  

Risk Management and Mitigation   

In an era defined by growing global conflict, the MoD’s Dir. Gen Air Keith Bethell explored measures for ‘enhancing support to the warfighter, safely.’ Navigating a complex ecosystem of new technology and evolving operating models, Bethell echoed the sentiments of all attendees, focusing on ‘delivering programs with a shift towards operational excellence in terms of project delivery, done in a sensible, risk-conscious manner’. Striking a balance between defense output and safety is therefore weighted towards the bifold approach to risk – awareness and mitigation. In his address, Bethell highlighted the role of risk management in, ‘Delivering the outputs our armed forces need today, to sharpen defense’s edge for tomorrow.’ By doing so, soldiers are able to maximize output and minimize incidents which would disrupt operations. The core message is to take an informed approach in to be ‘risk sensible’, not ‘risk averse’‘We don’t want to be risk cavalier, but being risk averse is deluding our capacity.’  

Military aviation is intrinsically unsafe by definition. As one speaker observed, the key difference between civil and military aviation is the presence of the enemy. Therefore, in an environment where operations are inherently unsafe, there has been a drive to shift the focus from practical safety to risk management, with the end goal of risk mitigation. With combat demanding ever more advanced strategy and technology in a ‘more hostile, heated and congested’ airspace, forces are promoting risk management as an integral factor in maintaining air superiority. Exemplified by Bethell’s presentation, armed forces are using the shift in safety’s definition to enable readiness through risk management.  

Data and the Drive for Digitization 

With a universal drive towards risk mitigation through informed decision-making, leveraging vast amounts of historic data was recognized as one of the key factors in safety. However, the rate at which data analysis was being undertaken formed a noticeable divide in the gathered attendees, proving a deciding factor in technological advancement. While legacy data is understood to be a valuable tool for mapping trends, understanding cause and effect, and making informed risk-conscious decisions, ‘data-lakes’ grow by the day, and being able to efficiently decipher the information therein is becoming a barrier, rather than a useful weapon in the safety armory.  

As observed by Air Commodore Rob Caine, ‘At an operational and strategic level, we have ‘analysis paralysis’ – by not making decisions, we are making decisions, and often they are worse.’ This typifies the double-edged sword of data analysis: while it is an invaluable source of information, leveraging it is also seen as labor-intensive, presenting an arduous task for already resource-scarce forces. The use of business intelligence tools to replace manual processes is not as commonplace in defense as it is in civil aviation; however, where tools such as PureIntel are being used, leaders are able to free up key personnel for more strategic operations, saving resource and streamlining legacy processes.  

Artificial Intelligence  

An increasingly divisive topic, Artificial Intelligence was a prominent feature in the conference’s discussions. Immediately apparent was the misappropriation of the term AI in discussions surrounding subfields such as Large Language Models (LLM) and Machine Learning (ML). While both require training on vast amounts of extant data, LLM must be trained on text, enabling them to generate language, summarize information, and answer questions. ML uses algorithms trained on data sets to create models, such as analyzing data, and predicting future outcomes.  

While such technologies are in their nascent iterations in a military context, there have been several successful applications. Training a system on the data gathered in 327,000 hours of Typhoon maintenance, the RAF have been able to optimize engineering by overlaying information into an LLM. While the process will inevitably not replace human input, by handling 90% of data sorting and analysis, this application of AI optimizes processes to free human resource.  

Although a promising result, the discussion was tempered with the restrictions of a largely experimental technology in critical environments with zero room for error. Attendees were reminded that in order to effectively train any form of artificial intelligence to an operational standard, it must be trained on large quantities of exquisite data. Thus, a focus on collecting high-quality data through effective reporting, input and handling is critical to AI’s future use. Furthermore, replacing human input with AI leads to the question of accountability – should an error occur, liability is challenging, requiring diligent deployment and constant monitoring. As a result, the overall message of those in attendance was to focus on optimizing your data now and create comprehensive strategies for gathering it, in order to provide the best foundation for future use once it has reached sufficient capability for widespread application.  

In many cases, readily available alternatives to AI are far more effective, infallible and efficient: business intelligence platforms are able to analyze large amounts of data, presenting it in digestible and configurable dashboards for department-agnostic use; intuitive SMS guide the reporter to input better quality data to help analysts observe trends more clearly. While the promise of AI appeals to a resource-scarce sector, one must not sacrifice the safety of personnel and systems in an effort to drive efficiency.  

Industry and Defense 

Although differentiated by aircraft flown and environments operated within, civil and military aviation are united in their drive towards safety. While combat necessitates innovation in operational strategy and technology, factors in commercial aviation such as strict regulatory authorities, insurers and customers have created a rigorous safety culture in many ways unmatched in defense.  

In spite of such differences, defense is making a marked effort to learn from commercial aviation, with the establishment of industry partnerships, and the adoption of data-driven safety strategies to foster a culture of reporting. By leveraging software developed in the commercial sector, militaries can increase the pace of digitization in order to free up human resource.  

As mentioned, each armed force has vast quantities of data which they can use to inform future strategy. However, the availability of such information is poor and siloed within each force. The European Union Aviation Safety Agency has demonstrated the value it holds in sharing data for common good with its Data4Safety program. By collating data from airlines, manufacturers, airports, training organizations and MROs, Data4Safety provides a collaborative analysis and Big Data platform to create metrics, directed studies, blind benchmarking and vulnerability studies to promote safety sector-wide. Although data sharing presents risks, EASA’s partnership is testament to a shared effort echoing the mantra ‘we do not compete on safety’. 

The New Era For Rail Operational Content

If your railroad’s paper-based operational documents are a thing of the past – now ready to become a collector’s item on eBay – congratulations! Digital transformation for rail’s paper-based grips, bulletins, timetables, general orders, rule books and manuals are a big accomplishment and should be celebrated. But taking the next digital step is where even more value comes in. First movers in rail experienced the cost reductions, efficiencies, and safety gains of digitizing documents. But the journey continues to a broader transformation – the era of smart content delivery.

The days of searching for content are gone. Smart operational content now follows a crew member based on their roles, duties, or routes.


Railroads can deliver tremendous value to their mobile end users by delivering content that provides a more personalized and targeted experience. This starts during the authoring process by creating smart content that is tailored and automatically delivered based on attributes of every user (role, locomotive, segment, and more). Crew members no longer need to search through a ton of irrelevant bulk information to find the relevant information they need. By empowering the mobile end user with the right content, right when they need it, they increase the safety and efficiency of the operation. Digital Transformation in RailComply365 has been partnering with rail operators to provide support at every step of their digital transformation journey, including delivery of smart content to engineers and conductors. In this Railway Age article, read more about three major initiatives where our technology is at the cornerstone. Ready to learn more? Reach out to us for more details on how you can start delivering smart content to your mobile end users.