Rezcomm has achieved a cybersecurity accreditation equivalent to the U.S. Department of Defense’s NIST SP 800-171 Level 2 Lite standard, through the UK government’s Cyber Essentials Plus (CE+) certification. This independent verification confirms Rezcomm’s commitment to protecting client data and securing airport systems worldwide.
Rezcomm is the only airport marketplace supplier with this level of accreditation. A crucial milestone in an era where the aviation industry faces mounting cybersecurity threats.
A higher standard in a high-risk sector
Cyber threats targeting airports are growing more frequent and more sophisticated. From ransomware attacks that ground flights to breaches that expose sensitive customer data, the aviation and wider mobility sector is now a frontline target. Yet many suppliers in this space still treat cybersecurity as a back-office function.
Rezcomm takes a different view.
Security is embedded into the core of our platform – from customer transactions and reservation flows to CRM, marketing, and analytics. With CE+ now in place, we can prove that commitment goes far beyond policy. Our systems have been independently audited and technically verified, including simulated real-world attack scenarios.
This isn’t a checkbox exercise. It’s a rigorous review of how we protect our platform, our clients, and their passengers.
What is Cyber Essentials Plus?
Cyber Essentials Plus is governed by the National Cyber Security Centre (NCSC) – part of GCHQ, the UK equivalent of the National Security Agency (NSA). Unlike basic certification, which is self-assessed, CE+ requires:
- Independent audits of systems, users, and devices
- Penetration testing to simulate real-world attacks
- Full validation of patching, firewall, and antivirus controls
- End-to-end reviews of live environments, not just admin machines
CE+ represents the same level of assurance required by UK defense contractors and government departments. It aligns with NIST SP 800-171 Level 2 Lite, ensuring Rezcomm’s practices meet rigorous U.S. cybersecurity standards. The certification is also recognized by national frameworks in Canada and Singapore, underscoring its global credibility.
Why it matters
As airports digitize more operations, the risk surface expands. Cyberattacks can disrupt services, compromise revenue, and erode public trust. The U.S. Transportation Security Administration (TSA) and Federal Aviation Administration (FAA) have both issued new directives calling for stronger cybersecurity resilience across airport systems.
Rezcomm’s CE+ certification offers equivalent assurance to those standards. Our systems have been stress-tested against real-world attack scenarios, setting a new benchmark for digital commerce platforms in transport and aviation.
The importance of this approach is underscored by ACI EUROPE’s recently published penetration testing guidelines for operational technology and industrial control systems in airports. While ACI EUROPE’s new framework focuses on operational systems such as baggage handling and airfield lighting, the philosophy is the same: proactive, structured testing. Rezcomm applies that same discipline to the airport’s digital commerce layer, backed by Cyber Essentials Pus certification.
A word from our DPO
“Cybersecurity isn’t just a technical requirement; it’s a foundation of trust. CE+ demonstrates that Rezcomm goes beyond checkbox compliance, it shows independent validation that our defenses protect airports, operators, and passengers. As U.S. and European agencies push for stronger resilience testing, Rezcomm is leading by example.”
— Gio Wallace, Data Protection Officer, Rezcomm
What this means for our clients, partners, and the industry
For airport clients: You gain a technology partner that meets the highest standards of cyber resilience – reducing your risk, ensuring compliance, and strengthening public trust in your digital services.
For partners and integrators: CE+ confirms our systems are secure by design, making integrations more reliable and supporting secure data flows across complex vendor ecosystems.
For the aviation industry: Rezcomm sets a new benchmark. As digital transformation accelerates, security must keep pace. Our CE+ certification shows it’s possible to combine innovation with integrity, without compromise.
