Part NIS

I help you make sense of EASA’s Part-IS — and turn it into something that actually works in practice. From gap analysis to incident reporting, I make the process structured, lean, and tailored to your ops.

Get started

Every org is different. I start by understanding your environment (technical, regulatory, cultural), then I help build or tune what you already have — not overcomplicate it.

Adipiscing

Where to start?

If you're navigating EASA Part‑IS, this is a good place to start. You might not need help — but if you do, I’m available.

Information Security (Part-IS)

What is Part IS?

Part‑IS is the section of EASA regulations that deals with information security in aviation. It applies to organizations like airlines, MROs, ANSPs, OEMs, and others with EASA approvals.It’s made up of two main parts:IS.AR – Authority Requirements
What national aviation authorities (like LBA, FOCA, etc.) must do — including oversight, risk review, incident reporting, and audits.IS.OR – Organisation Requirements
What approved organizations must do — including establishing an Information Security Management System (ISMS), managing risks, reporting incidents, and integrating with their existing management systems.Under these, EASA provides AMC/GM (Acceptable Means of Compliance and Guidance Material) to help interpret the rules in practice.The structure mirrors other EASA frameworks like Part-CAMO or Part-145 — but focused entirely on cyber/information security.EASA Easy Access Rules for Information Security (EU 2023/203):
This document provides the consolidated and easy-to-read version of the EU regulation on information security in aviation, covering requirements for managing information security risks in civil aviation organisations and authorities.Check out the link below

Easy Access Rules

Still need help?

If you still need help understanding how this regulation applies to your organisation or have questions about specific parts of it, feel free to reach out — I’m happy to provide more context, explain the key points, or help translate it into something more practical.

Send us a mail