Navigate / EASA
Ask question Discover more Add to collection

ORGH.MGM.201 Information security management system

Regulation (EU) 2025/20

The ground handling organisation shall establish, implement and maintain an information security management system in accordance with the Annex (Part-IS.D.OR) to Commission Delegated Regulation (EU) 2022/1645[21] to ensure the proper management of information security risks which may have an impact on aviation safety.

[point ORGH.MGM.201 applicable from 27 March 2031 — Regulation (EU) 2025/20]

[21] Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18, ELI: http://data.europa.eu/eli/reg_del/2022/1645/oj).
Details
Source-Title: ORGH.MGM.201 Information security management system View latest amendments
Erulesid: ERULES-1963177438-23679 Compare versions
Domain: Ground Handling
Applicabilitydate: 27 March, 2028
Entryintoforcedate: 27 March, 2025
Regulatorysource: Regulation (EU) 2025/20 Navigate
Regulatorysubject: Part-ORGH
Typeofcontent: DR (Delegated rule)
Origin: EASA
Category: EAR