Questions on Part-IS? Don't keep them to yourself!

Questions on Part-IS? Don't keep them to yourself!

Following the publication of the Part-IS regulatory package (Delegated Regulation (EU) 2022/1645 & Implementing Regulation (EU) 2023/203) and the corresponding AMC/GM, a  number of questions has been raised by the stakeholders of the Cybersecurity in Aviation community.

Currently the EASA team working in this field is gathering those questions received with the aim of providing a dedicated Frequently Asked Questions (FAQ) section in the EASA website.

Do you have any questions regarding the implementation of Part-IS in your domain and/or organisation?

We want to hear from you! Please provide your question in the comments below and it will be considered during the preparation of the FAQs.

Kindly note that the main purpose of this post is to collect questions and not to provide any detailed answers in the comments below. The answers will be provided in the questions that will be included in the dedicated FAQ section.

PS. Short quiz: Do you know the answer in the question below?

“My organisation is not in the list of the organisations that have to comply with Part-IS but it does provide services to such organisations. Do we have to comply with Part-IS?”