Which regulation identifies the domain-specific requirements for responding to findings under IS.I.OR.225?

Regulation (EU) 2023/203, specifically point Article 2(1), identifies the domain-specific requirements for responding to findings notified by the competent authority.

Which ED decision is associated with AMC1 IS.I.OR.225?

ED Decision 2023/009/R is associated with AMC1 IS.I.OR.225.

AMC1 IS.I.OR.225 Response to findings notified by the competent authority

Q: How should an organisation manage compliance with IS.I.OR.225 when responding to findings notified by the competent authority?

Compliance with IS.I.OR.225 should be managed as required for each organisation in the corresponding implementing regulation for the domain as identified in point Article 2(1) of Regulation (EU) 2023/203 concerning the response to findings notified by the competent authority.

Q: Under AMC1 IS.I.OR.225, what is the basis for determining how to respond to findings?

The basis is the corresponding implementing regulation for the domain as identified in point Article 2(1) of Regulation (EU) 2023/203, which may require response in accordance with the categorisation of the findings.

Navigate / EASA

Ask question Discover more Add to collection

AMC1 IS.I.OR.225 Response to findings notified by the competent authority

ED Decision 2023/009/R

The compliance with IS.I.OR.225 should be managed as required for each organisation in the corresponding implementing regulation for the domain as identified in point Article 2(1) of Regulation (EU) 2023/203 concerning the response to findings notified by the competent authority. The domain regulation may require the organisation to respond to the findings in accordance with their categorisation.

Details

Source-Title: AMC1 IS.I.OR.225 Response to findings notified by the competent authority View latest amendments

Erulesid: ERULES-1963177438-21779 Compare versions

Domain: Information Security (IS)

Amendedby: Issue 1

Applicabilitydate: 22 February, 2026

Entryintoforcedate: 14 July, 2023

Regulatorysource: ED Decision 2023/009/R Navigate

Regulatorysubject: Part-IS.I.OR

Typeofcontent: AMC to IR (Acceptable means of compliance to implementing rule)

Parentir: IS.I.OR.225 Response to findings notified by the competent authority

Origin: EASA

Category: EAR