Writer

Charlotte Bailey

The second wave of a new mandatory European aviation regulatory framework for information security management systems (ISMS) comes into effect on Sunday. An extension of existing safety regulations, EASA Part-IS (information security) will establish additional requirements for managing information security risks, focusing on safeguarding operations and strengthening resilience in civil aviation.
Although similar to existing protocols, Part-IS requirements also include a risk-based approach to protect digital assets and operations that—if compromised—could negatively impact aviation safety.
Recognizing that increased reliance on data requires heightened cybersecurity safeguarding EASA is implementing Part-IS in two phases. The first compliance deadline of Oct. 16, 2025, applied to EASA-approved organizations such as airlines, airport operators, air navigation service providers, maintenance organizations, and other industry stakeholders.
The February 22 deadline will also see other bodies such as aviation authorities required to take extra steps toward safeguarding and monitoring data. In practical terms, this will include conducting risk analysis of potential cyber attacks, creating a security plan, training to identify potential problems, and a robust incident response procedure.
According to EASA, an organization may use an existing cybersecurity competency framework to develop its necessary Part-IS competencies. Although no specific risk-assessment framework is mandated, the regulator recommends a combination of methodologies, including assessing potential threats to assets alongside analysis of safety consequences.

News about bills, laws, regulations and other governmental decisions affecting aviation and aerospace. Topics include FAA re-authorizations, taxes on fuel and aviation activities, environmental legislation, ICAO decisions, governmental mediation of labor conflicts and World Trade Organization disputes and decisions.

EASA Part-IS Regulations To Bolster Civil Aviation Data Security   

Safety-focused European Information Security Management Systems requirement comes fully into effect later this month

On February 22, the second wave of a new mandatory EU aviation regulatory framework for Information Security Management Systems (ISMS) comes into effect. 

EASA Part-IS Regulations To Bolster Data Security

2024 Corporate Aviation Leadership Summit

Kerry Lynch

News about environmental issues relating to aircraft operations, including noise issues, emissisions, and regulations. See Fuel for biofuel.

News and issues relating to business, corporate and private aviation, primarily regarding turbine-engine-powered airplanes and helicopters. Subjects include aircraft, engines, maintenance, operations, personnel, acquisitions, accidents, safety, security, and training.

Both measures drew bipartisan support

Bills Seek To Boost SAF Tax Credit, Ease Cert Pains

Malta-based operator receives regulatory approval from Saudi Arabia

AirX To Expand Middle Eastern Ops after GACA Approval

Curt Epstein

News and issues relating to the aerospace industry that are related to the science, engineering and business of flight in space involving civil, industrial and military applications, and similar topics related to flight in the atmosphere of the Earth that are not covered more directly by other AINonline subject channels. In other words, both astronautical and aeronautical subjects, except for those aeronautical topics that are specifically covered elsewhere on this website.

Questions swirl regarding their purpose

Surprise FAA Notams Wreak Havoc in Texas and New Mexico

Neelam Mathews

News and developments about airplanes, helicopters and unmanned air vehicles used in all varieties of operations, including airlines, military, business, commercial, general aviation and private.

News about commercial airlines, including regulations, aircraft orders, safety, acquisitions, and mergers.

India's Prime Minister Narendra Modi called for a "leapfrog to aerial mobility"

Indian eVTOL Aircraft Pioneers Seek Regulatory Progress

Gordon Gilbert

News and information on safety procedures and concerns.

News and issues relating to international air transport and cargo carriers, national airlines and regional airlines, including aircraft, engines, personnel, acquisitions, accidents, safety, security and training.

U.S. regulator sets three deadlines for affected aircraft

Turbine Biz Aircraft Included in FAA CVR Upgrade Rule

Amy Wilder

New developments and products in avionics, specifically about aircraft electronics in the cockpit.

In this article

More In Regulations and Government

Bills Seek To Boost SAF Tax Credit, Ease Cert Pains

Both measures drew bipartisan support

AirX To Expand Middle Eastern Ops after GACA Approval

Malta-based operator receives regulatory approval from Saudi Arabia

Surprise FAA Notams Wreak Havoc in Texas and New Mexico

Questions swirl regarding their purpose

Indian eVTOL Aircraft Pioneers Seek Regulatory Progress

India's Prime Minister Narendra Modi called for a "leapfrog to aerial mobility"

Turbine Biz Aircraft Included in FAA CVR Upgrade Rule

U.S. regulator sets three deadlines for affected aircraft

FAA Warns of CPDLC Confusion in North Atlantic Airspace

Gander ACC reports increased pilot errors

FAA $12B Budget Passes as Govt Ends Partial Shutdown

FAA had temporarily furloughed 10,000 workers

Gulfstream Confirms Delay over Canadian Type Certification

Gulfstream awaits Transport Canada certification for FAA- and EASA- approved jets

AIN Products

SUBSCRIPTIONS

RESOURCES

ABOUT AIN