Navigate / EASA
AMC1 IS.AR.225(b) Personnel requirements

ED Decision 2023/010/R

SUFFICIENT PERSONNEL

To determine the sufficiency of the personnel, the following elements should be taken into consideration:

(a) the organisational structures, policies, processes and procedures subject to information security management;

(b) the amount of coordination required with other organisations, contractors and suppliers;

(c) the level of risk associated with the activities performed by the authority.