Which regulation is referenced in AMC1 IS.D.OR.225 for identifying the domain-specific requirements on responding to findings?

Regulation (EU) 2022/1645, specifically point Article 2(1), is referenced for identifying the corresponding implementing regulation for the domain.

AMC1 IS.D.OR.225 Response to findings notified by the competent authority

Q: Does AMC1 IS.D.OR.225 require an organisation to respond to findings according to their categorisation?

Yes, the domain regulation may require the organisation to respond to the findings in accordance with their categorisation.

Navigate / EASA

Ask question Discover more Add to collection

AMC1 IS.D.OR.225 Response to findings notified by the competent authority

ED Decision 2023/009/R

The compliance with IS.D.OR.225 should be managed as required for each organisation in the corresponding implementing regulation for the domain as identified in point Article 2(1) of Regulation (EU) 2022/1645 concerning the response to findings notified by the competent authority. The domain regulation may require the organisation to respond to the findings in accordance with their categorisation.

Details

Source-Title: AMC1 IS.D.OR.225 Response to findings notified by the competent authority View latest amendments

Erulesid: ERULES-1963177438-21613 Compare versions

Domain: Information Security (IS)

Amendedby: Issue 1

Applicabilitydate: 22 February, 2026

Entryintoforcedate: 14 July, 2023

Regulatorysource: ED Decision 2023/009/R Navigate

Regulatorysubject: Part-IS.D.OR

Typeofcontent: GM to DR

Origin: EASA

Category: EAR