Is the requirement for an information security management system under ADR.OR.D.005A a delegated requirement or an acceptable means of compliance?

It is a delegated requirement, as indicated by the label 'Delegated' and the reference to Regulation (EU) 2022/1645.

Does ADR.OR.D.005A specify an applicability date for the information security management system requirement?

No, the section does not state any applicability date.

ADR.OR.D.005A Information security management system

Q: What must an aerodrome operator establish, implement and maintain to ensure proper management of information security risks that may affect aviation safety?

An information security management system in accordance with Delegated Regulation (EU) 2022/1645.

Q: Which specific regulation defines the requirements for the information security management system that an aerodrome operator must follow?

Delegated Regulation (EU) 2022/1645.

Q: What is the purpose of the information security management system required by ADR.OR.D.005A?

To ensure the proper management of information security risks which may have an impact on aviation safety.

Q: Which organisations are covered by the delegated regulation referenced in ADR.OR.D.005A?

Organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014, as stated in the footnote.

Navigate / EASA

Ask question Discover more Add to collection

ADR.OR.D.005A Information security management system

Delegated Regulation (EU) 2022/1645

The aerodrome operator shall establish, implement and maintain an information security management system in accordance with Delegated Regulation (EU) 2022/1645[17] in order to ensure the proper management of information security risks which may have an impact on aviation safety.

[17]Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18).

Details

Source-Title: ADR.OR.D.005A Information security management system View latest amendments

Erulesid: ERULES-1963177438-20207 Compare versions

Domain: Aerodromes

Applicabilitydate: 16 October, 2025

Entryintoforcedate: 16 October, 2022

Regulatorysource: Delegated Regulation (EU) 2022/1645 Navigate

Regulatorysubject: Part-ADR.OR

Typeofcontent: DR (Delegated rule)

Origin: EASA

Category: EAR