Navigate / EASA

66.B.15 Information security management system

Regulation (EU) 2023/203

The competent authority shall establish, implement and maintain an information security management system in accordance with Annex I (Part-IS.AR) to Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety.

[Applicable from 22 February 2026 – Regulation (EU) 2023/203]