Online & Secure

Security Update – Opscom Systems Remain Online and Secure

Security Update – Opscom Systems Remain Online and Secure

We are pleased to report that the proactive security measures deployed by our engineering team are effective, Opscom 1 and Opscom 2 remain secure and running. We will publish a more comprehensive report on the whole event next week.

Background on the Situation

PHP is a general-purpose scripting language geared heavily toward web development. Created in 1993 and released in 1995, it is maintained by the PHP Group and powers a vast majority of the internet. As one of the dominant languages for web architecture, Opscom has historically utilized PHP as the core foundation for our platforms.

This morning, our security team—along with the global IT community—received a critical security alert from the PHP Group regarding two major vulnerabilities (Remote Code Execution flaws) in the universal PHP codebase.

A universal patch will be released today at 14:00 UTC by the PHP Group. When this release is published, it will contain specific technical details about the security issues. Because the vulnerabilities are in the core language itself, it represents a severe risk to any exposed systems.

Our Action Plan, Current Mitigations, and Potential Downtime

Our engineering team is fully mobilized and we are already taking precautionary measures and applying network mitigations to protect our infrastructure. However, because the exact technical details of the vulnerability remain undisclosed by the PHP Group until the official release, we cannot yet guarantee these initial defenses are fully comprehensive.

We are continuously monitoring the situation. If we determine that our precautionary mitigations are inadequate after the release and the system remains exposed, we may temporarily take Opscom 1 and Opscom 2 offline from 14.00 UTC today.

Homepage and Status Updates

Since PHP is also the common language used for our corporate website, and many similar websites are currently at risk, we are in the process of setting up a new, secure homepage without using the problematic PHP codebase.

This static page will serve as our secure communication hub during this event. We will provide frequent, real-time updates regarding our patching progress and any required system downtime at: www.opscomsystems.com and/or https://no.linkedin.com/company/opscom-systems-as

We will respond to questions at: support@opscomsystems.com and tel: +47 47 77 55 10

Best Regards

Roar Skogstad

Opscom Systems as

Airport terminal apron with aircraft at boarding gates and ground handling operations managed by Opscom Systems
Aviation Safety, Quality & Operations SaaS

Complete safety & operational control across every flight, stand, and sector.

Trusted by 60+ airports, Air Navigation Service Providers, defense aviation, and operators. Replace fragmented spreadsheets with one ICAO, EASA, ISO 27001 & ISO 14001 compliant platform for Occurrence Reporting, Risk Management, Audits, and Management of Change.

ICAO & EASA Ready
ISO 27001 & 14001
100% Cloud & Offline App

60+

Airports & Aviation Customers

10+ Yrs

Proven Track Record (DoD, RNoAF, Police)

ISO 27001

Certified & ISO 14001 Compliant

Unlimited

Users Within Your Organization

100% SaaS

Web + Offline Mobile App

Opscom 2.0 Platform

Everything You Need for Aviation Safety, Quality & Daily Operations

Stop juggling disconnected forms, emails, and spreadsheets. Opscom unifies every stakeholder onto a single, audit-ready platform with unlimited user licenses.

Core Module 01

Occurrence Reporting & Case Management

Capture minor observations, incidents, and accidents in seconds from any mobile device or workstation. Automated routing, severity classification, root-cause analysis, and closed-loop corrective actions.

  • One-click frontline & airside mobile reporting
  • EU 376/2014 & ICAO Annex 19 aligned workflows
  • Automated follow-up & safety feedback loop
Book Demo of Module
Core Module 02

Risk Management & Hazard Library

Turn reported occurrences into proactive risk control. Maintain a live hazard register, evaluate probability and severity matrices, and track barrier effectiveness across your entire operation.

  • ISO 31000 & ICAO Doc. 9859 risk matrices
  • Centralized Hazard Library & bow-tie barriers
  • Automated review reminders & mitigation owners
Book Demo of Module
Core Module 03

Management of Change (MoC)

Plan, assess, and document operational, technical, or organizational changes with full traceability. Link risk assessments, approvals, and post-implementation reviews in one dedicated workflow.

  • Structured step-by-step MoC approval gates
  • Integrated hazard identification per change
  • Complete audit trail for CAA / EASA inspectors
Book Demo of Module
Core Module 04

Audits, Inspections & Checklists

Digitize internal and external quality audits, airside runway/apron inspections, and regulatory compliance checklists. Track non-conformities (findings) from detection to verified closure.

  • Pre-built & customizable digital checklist library
  • Finding classification (Level 1 / Level 2 / Obs)
  • Automated deadline escalation & evidence upload
Book Demo of Module
Core Module 05

Training, Approvals & Personnel Control

Eliminate expired certificates and spreadsheets. Monitor staff qualifications, operational competencies, recurrent training schedules, simulator (FSTD) approvals, and visitor/airside access.

  • Competence matrix & expiry notifications
  • Role-based access with unlimited user licenses
  • Visitor & contractor safety briefing tracking
Book Demo of Module
Core Module 06

Management Dashboard & Offline Mobility

Give Accountable Managers and Safety Officers real-time KPIs and SPIs at a glance. Opscom 2.0 works seamlessly across smartphones and tablets — including a dedicated offline app that syncs automatically.

  • Real-time Safety Performance Indicators (SPIs)
  • 100% responsive mobile UI + offline sync app
  • Zero on-premise servers required (Cloud SaaS)
Book Demo of Module

Ready to see how Opscom fits your safety & quality workflows?

No server installation required. Up and running immediately with unlimited users and full mobile & offline support.

Tailored Industry Solutions

Built for Every Aviation Operation Type

Choose the Opscom configuration pre-aligned with your sector's exact ICAO, EASA, and ISO regulatory requirements.

Aerodrome Operations

Unified airside operations, SMS & compliance for airports of every size.

Connect every stakeholder at the aerodrome on a single platform for daily airside operations, runway/apron inspections, wildlife & FOD reporting, hazard tracking, and Management of Change.

Regulatory Alignment

ICAO SMS Doc. 9859 ICAO Annex 14 & 19 (EU) 139/2014 (EU) 376/2014 ISO 31000

Air Operators (Fixed-Wing & Heli)

End-to-end flight safety, AOC compliance & crew oversight.

Built for commercial airlines, helicopter operators, police aviation, and special-mission fleets. Streamline flight occurrence reporting, risk assessments, crew currency, and AOC quality assurance.

Regulatory Alignment

ICAO Annex 6 & 19 (EU) 965/2012 (EU) 2019/1384 (EU) 376/2014 ISO 31000

Air Traffic Management (ATM / ANSP)

High-assurance safety & quality management for ANSPs and ATS units.

Support tower, approach, and area control operations with transparent occurrence investigation, functional system change management (MoC), and ATCO competence tracking.

Regulatory Alignment

ICAO Doc. 4444 ICAO Annex 11 & 19 (EU) 2017/373 (EU) 2015/340 (EU) 376/2014

Ground Handling (GHSP)

Turnaround safety, ramp inspections & GSE quality control.

Empower ramp agents and station managers at 60+ airports to report apron hazards, audit ground support equipment (GSE), track turnaround safety KPIs, and align with airline & airport SMS.

Regulatory Alignment

ICAO Doc. 9859 ICAO Annex 19 (EU) 2019/1384 (EU) 376/2014 ISO 31000

Unmanned Aircraft Systems (UAS)

Scalable SORA/SMS & operational control for commercial drone fleets.

Manage BVLOS/specific-category UAS operations, pre-flight checklists, pilot competencies, occurrence logs, and airspace integration compliance in one lean cloud platform.

Regulatory Alignment

ICAO Annex 6 & 19 (EU) 2018/1139 (EU) 2019/947 ISO 31000

Training Organizations (ATO & FSTD)

Safety, compliance & device qualification tracking for academies and simulators.

Purpose-built for Approved Training Organisations and Flight Simulation Training Device operators to manage Part-ORA compliance, instructor/student records, and simulator issue tracking.

Regulatory Alignment

ICAO Annex 1 & 19 (EU) 1178/2011 CS-FSTD(A&H) (EU) 376/2014

Technical Services & MRO

Quality assurance & airworthiness compliance for technical stakeholders.

Support Part-145 / Part-CAMO / CNS technical providers with structured audit trails, tool & calibration oversight, occurrence reporting, and regulatory compliance monitoring.

Regulatory Alignment

ICAO Annex 8 & 19 (EU) 748/2012 (EU) 1321/2014 (EU) 2015/640 (EU) 376/2014
Why Opscom Systems

Proven in Demanding Defense, Police & Commercial Aviation Environments

Headquartered at Bodø Airport in Norway, Opscom Systems AS has delivered safety, security, and quality management software for more than 10 years to over 60 airports, national service providers, the Department of Defense (DoD), Royal Norwegian Air Force (RNoAF), and Police Aviation.

01

Zero Server Installation (Turnkey SaaS)

No local IT infrastructure or maintenance required. With an internet connection, Opscom is up and running with automatic updates and backups.

02

100% Mobility & Offline App

Report occurrences, complete airside checklists, and inspect stands directly from smartphones or tablets — even offline in hangars or remote locations.

03

ISO/IEC 27001 Certified, ISO 14001 Compliant & Unlimited Users

Enterprise cybersecurity certified to ISO/IEC 27001, ISO 14001 environmental management compliant, and EU GDPR compliant — with no per-seat cap so every employee and contractor can report hazards.

Closed-Loop Safety & Risk Architecture

Opscom connects frontline reporting directly to your Hazard Library, ISO 31000 Risk Matrix, Management of Change (MoC), and Executive KPI Dashboards.

Step 1

Frontline Occurrence

Logged via mobile, tablet, or web in under 60 seconds.

Step 2

Hazard & Risk Analysis

Classified & scored against ICAO / ISO 31000 matrices.

Step 3

Mitigation & MoC

Corrective actions & change approvals assigned and tracked.

Step 4

Audit & SPI Dashboard

Continuous verification and real-time safety KPIs.

Want a personalized walkthrough?

Talk directly with our aviation specialists

Book Demo

Global Partners & Aviation Ecosystem

Opscom builds long-term partnerships with aviation consultancies and technology innovators worldwide:

Hypera Designer Pilots Latam Logistic Sky'deas Aviation Consulting Green Tech Aerospace
News & Insights

Latest from Opscom Systems

Company announcements, research collaborations, aviation safety milestones, and platform updates.

On the wings with FLAIT to Qatar
Opscom News

On the wings with FLAIT to Qatar

5. May 2025 Qatar has embraced Norwegian research on artificial intelligence in aviation, and a delegation from Bodø recently participated in a workshop in Doha,…

Permalink ↗
Opscom Systems affiliated company Airside Innovation is getting national attention
Opscom News

Opscom Systems affiliated company Airside Innovation is getting national attention

There have been several articles and media events related to safer airports using AI. Online news article about the project and the planned products from…

Permalink ↗
Artificial intelligence will make airports even safer
Opscom News

Artificial intelligence will make airports even safer

Tomas Norvoll, State Secretary in the Ministry of Digitization and Administration, was on his first official mission and got to see a review of the…

Permalink ↗
We’d like to welcome Mr. Erik Andersen to the Opscom team.
Opscom News

We’d like to welcome Mr. Erik Andersen to the Opscom team.

Erik is a Danish citizen and also living in Denmark. He will be responsible for building and supporting our partner network in Europe.   Erik has…

Permalink ↗
Opscom Systems AS at Inter Airport
Opscom News

Opscom Systems AS at Inter Airport

Opscom Systems as at Inter Airport. This year with a larger stand (45 m2) and together with several good partners. There were a lot of…

Permalink ↗
Inter Airport Europe 2021
Opscom News

Inter Airport Europe 2021

Going to the largest airport exhibition in the world in Munich, starting 9-12 November under the theme” Runway to Recovery” Opscom System as is there,…

Permalink ↗
Schedule a Meeting With Us →
Opscom News

Book a Live Demo or Contact Sales

See Opscom in Action

Schedule a tailored walkthrough of Opscom 2.0 for your aviation operation, or send our team in Bodø a message.

ISO/IEC 27001, ISO 14001 & EU GDPR compliant. Your details are used strictly to respond to your request.