Space

Threat Landscape

The space sector combines critical national infrastructure significance with cutting-edge technology complexity. Satellite communications infrastructure supports military, civilian, and commercial operations. Ground stations and satellite command-and-control systems are attractive targets for state-sponsored actors seeking to disrupt GPS, communications, and Earth observation capabilities.

Supply chain security in space programme equipment is particularly stringent given export control and national security implications. The dual-use nature of space technology — serving both commercial and defence applications — creates a compliance multiplication effect for organisations operating across both markets.

Regulatory & Framework Landscape

Space sector organisations face export control regulations (ITAR/EAR), defence supply chain requirements (DEF STAN 05-138, NIST 800-171), and national cybersecurity obligations (NCSC CAF, NIS). The UK Space Industry Act 2018 provides the domestic regulatory framework. Organisations serving both commercial and defence markets must satisfy multiple concurrent compliance regimes.

CCM Domain Alignment

Space organisations use the mandatory baseline (D01–D13) for enterprise governance and activate the D14 OT/ICS Security overlay for satellite operations and ground station control systems. Supply chain security (D12) is particularly emphasised given the sector's export control and national security obligations.

Operating Context

How C-PAP Supports Space

C-PAP provides a unified compliance architecture bridging space-specific export control requirements (ITAR/EAR) with broader cybersecurity frameworks. A single assessment generates evidence applicable to defence supply chain audits, commercial certification, and national security obligations simultaneously.

For organisations operating across commercial and defence space markets, the platform eliminates the need for parallel compliance programmes by consolidating all framework obligations under the canonical control model.