Stay informed on COVID-19 updates from EASARead more

EASA workshop on NPA 2019-07 ‘Management of Information Security Risks’

Date & time
02/07/2019, 09:30 - 16:30

Eurocontrol’s Headquarters (EUROPA meeting room)
Rue de la Fusée, 96
1130 Brussels, BELGIUM 

The objective of RMT.0720 is to efficiently contribute to the protection of the aviation system from cyberattacks and their consequences. 

As an important milestone of this regulatory activity, on 27 May 2019 the Agency has published NPA 2019-07 proposing the introduction of provisions for the management of information security risks related to those information systems used in civil aviation. These provisions shall apply to competent authorities and organisations in all aviation domains (i.e. design, production, management of continuing airworthiness, maintenance, air operations, aircrew, air traffic management/air navigation services (ATM/ANS), and aerodromes), include high-level, performance-based requirements, and shall be supported by acceptable means of compliance (AMC), guidance material (GM), and industry standards.

The public consultation for NPA 2019-07 is open for comments until 27 September 2019. The NPA is available at:

Aim of the workshop
The workshop on NPA 2019-07 ‘Management of Information Security Risks’ is organised by EASA with the support of EUROCONTROL, and will be held on 02 July 2019 at EUROCONTROL’s headquarters in Brussels.
The aims of the workshop are that:

  •  EASA informs stakeholders about the objectives of RMT.0720;
  •  EASA informs stakeholders about the regulatory proposal published with NPA 2019-07;
  •  EASA provides clarification on the content of NPA 2019-07, as requested by stakeholders.

Target audience
The workshop is addressed to personnel of the European Institutions, agencies and organisations, members of the EASA advisory bodies, authorities of the Member States, international regulatory partners, representatives of the industry and representatives of interest groups, involved in the cybersecurity of all aviation domains.

The Agenda is anticipated to cover at least the following topics:

  • Regulatory background
  • RMT.0720 objectives & tasks
  • Presentation of the proposed requirements
  • Open discussion

Planned meeting documents
All relevant documents will be uploaded at the events webpage before the meeting.
There will be no hardcopies handed out during the meeting.

Registration is closed.

Cancellation of registration
If you have registered for the workshop and, for whatever reasons, you are not planning to eventually attend the workshop, please inform EASA as soon as possible by sending an e-mail to the following address:

  • juan.anton [at]

Accommodation and travel arrangements
Participants need to take care of their accommodation and travel arrangements themselves.
The lunch breaks are to be covered on your personal expense.