Cybersecurity

Hello, Part-IS adds ISMS requirements, I understand. My question is how the European EASA regulations interpret the storage of data outside the European Union and therefore not subject to the GDPR ? Concretely, will we have a map of the servers in order to guarantee that the data stored there is indeed governed by the security rules that apply to us ? Mapping the risk will otherwise be complicated, and this without going into the detail of the processing of data subject to 15 CFR 730-774.

You are right, Grégoire, implementation can be a challenge. Each mitigating measure will require an impact analysis, but activities are underway.

Hi Paolo, this is a very good idea and it is also something that we currently discuss internally. Apart from participating and raising awareness about initiatives like ECCSA, we are currently in the prepatory phase of a number of other activities that will take place in 2024 and info-sharing activities is a part of this agenda. More updates on the events planned for this year are expected within the next weeks so stay tuned in the community and the EASA website ;)

Happy New Year!