First Easy Access Rules for Information Security (Regulations (EU) 2023/203 and 2022/1645)

October 2023 — Available in pdf, online & xml format
Publication Date
31/10/2023
Related domains
Aerodromes
Air Operations
Air Traffic Management
Aircraft & products
Aircrew & Medical
Rotorcraft & VTOL
Easy Access Rules for Part-IS

The first Easy Access Rules (EAR) for Information Security (Regulations (EU) 2023/203 and 2022/1645) include the requirements for the management of information security risks with a potential impact on aviation safety for organisations and competent authorities and the relevant acceptable means of compliance and guidance material (AMC and GM), displayed in a consolidated, easy-to-read format with advanced navigation features through links and bookmarks.

The EAR for Information Security incorporate the following rules:

  • Commission Implementing Regulation (EU) 2023/203 laying down rules for the application of Regulation (EU) 2018/1139, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations and competent authorities covered by Commission Regulation (EU) No 1178/2011, and amending said Regulation;
  • Commission Delegated Regulation (EU) 2022/1645 laying down rules for the application of Regulation (EU) 2018/1139, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014, and amending said Regulations;
  • ED Decision 2023/008/R ‘Management of information security risks’ that provides for AMC & GM to the Articles of Regulation (EU) 2022/1645 and Regulation (EU) 2023/203;
  • ED Decision 2023/009/R ‘Management of information security risks’ that provides for AMC & GM to support the Part-IS regulatory package implementation — Part-IS.D.OR and Part-IS.I.OR; and
  • ED Decision 2023/010/R ‘Management of information security risks’ that provides for AMC & GM to support the Part-IS regulatory package implementation — Part-IS.AR.

As the EAR for Information Security are generated through the eRules platform, they will be updated regularly to incorporate further changes and evolutions to the implementing and delegated acts, and AMC & GM.

Please send any feedback and comments by using the Easy Access Rules area on the contact us form.