How does the competent authority handle changes to the information security management system that are managed and notified under IS.D.OR.255(a) of Delegated Regulation (EU) 2022/1645?

The competent authority shall include the review of such changes in its continuing oversight in accordance with the principles laid down in point ARGH.OVS.300. If any non-compliance is found, the competent authority shall notify the organisation thereof, request further changes and act in accordance with point ARGH.OVS.325.

What action must the competent authority take if it finds non-compliance during the review of changes notified under IS.D.OR.255(a)?

The competent authority shall notify the organisation of the non-compliance, request further changes, and act in accordance with point ARGH.OVS.325.

Which regulation establishes the applicability date for point ARGH.MGM.211?

Regulation (EU) 2025/23 establishes that point ARGH.MGM.211 is applicable from 27 March 2031.

When does point ARGH.MGM.211 become applicable according to the section?

Point ARGH.MGM.211 is applicable from 27 March 2031, as stated in Regulation (EU) 2025/23.

ARGH.MGM.211 Changes to the information security management system of a ground handling organisation

Q: For changes to the information security management system that are not managed and notified under IS.D.OR.255(a) but fall under IS.D.OR.255(b), what is the competent authority's obligation?

The competent authority shall check the ground handling organisation's compliance with the applicable requirements as part of the oversight tasks.

Navigate / EASA

Ask question Discover more Add to collection

ARGH.MGM.211 Changes to the information security management system of a ground handling organisation

Regulation (EU) 2025/23

(a) For changes managed and notified to the competent authority in accordance with the procedure set out in point IS.D.OR.255(a) of the Annex to Delegated Regulation (EU) 2022/1645, the competent authority shall include the review of such changes in its continuing oversight in accordance with the principles laid down in point ARGH.OVS.300 of this Annex. If any
non-compliance is found, the competent authority shall notify the organisation thereof, request further changes and act in accordance with point ARGH.OVS.325 of this Annex.

(b) For other changes referred to in point IS.D.OR.255(b) of the Annex to Delegated Regulation
(EU) 2022/1645, the competent authority shall check the ground handling organisation’s compliance with the applicable requirements as part of the oversight tasks.

[point ARGH.MGM.211 applicable from 27 March 2031 — Regulation (EU) 2025/23]

Details

Source-Title: ARGH.MGM.211 Changes to the information security management system of a ground handling organisation View latest amendments

Erulesid: ERULES-1963177438-23639 Compare versions

Domain: Ground Handling

Applicabilitydate: 27 March, 2031

Entryintoforcedate: 27 March, 2025

Regulatorysource: Regulation (EU) 2025/23 Navigate

Regulatorysubject: Part-ARGH

Typeofcontent: IR (Implementing rule)

Origin: EASA

Category: EAR