Under AMC1 IS.I.OR.240(d), what must be established and communicated to the common responsible person?

The scope and boundaries of the organisations must be established and communicated to the common responsible person.

According to AMC1 IS.I.OR.240(d), who must have direct access to the accountable manager?

The common responsible person must have direct access to the accountable manager.

In the coordination criteria of AMC1 IS.I.OR.240(d), what must be done with early warning signs of non-compliance?

Early warning signs of non-compliance must be documented and acted upon.

What does AMC1 IS.I.OR.240(d) require regarding the requirements of the Regulation in the context of coordination?

The requirements of this Regulation must be communicated to and shared with the common responsible person.

AMC1 IS.I.OR.240(d) Personnel requirements

Q: What are the criteria for establishing coordination to ensure adequate integration of information security management within an organisation under AMC1 IS.I.OR.240(d)?

The criteria are: (a) the scope and boundaries of the organisations have been established and communicated to the common responsible person; (b) the requirements of this Regulation have been communicated to and shared with the common responsible person; (c) the common responsible person has direct access to the accountable manager; (d) issues are proactively managed and any early warning signs of non-compliance are documented and acted upon.

Q: How should issues be managed according to the coordination criteria in AMC1 IS.I.OR.240(d)?

Issues must be proactively managed, and any early warning signs of non-compliance must be documented and acted upon.

Navigate / EASA

Ask question Discover more Add to collection

AMC1 IS.I.OR.240(d) Personnel requirements

ED Decision 2023/009/R

COORDINATION

The criteria to establish coordination that ensures adequate integration of the information security management within the organisation are the following:

(a) the scope and boundaries of the organisations have been established and communicated to the common responsible person;

(b) the requirements of this Regulation have been communicated to and shared with the common responsible person;

(d) issues are proactively managed and any early warning signs of non-compliance are documented and acted upon.

Details

Source-Title: AMC1 IS.I.OR.240(d) Personnel requirements View latest amendments

Erulesid: ERULES-1963177438-21756 Compare versions

Domain: Information Security (IS)

Amendedby: Issue 1

Applicabilitydate: 22 February, 2026

Entryintoforcedate: 14 July, 2023

Regulatorysource: ED Decision 2023/009/R Navigate

Regulatorysubject: Part-IS.I.OR

Typeofcontent: AMC to IR (Acceptable means of compliance to implementing rule)

Parentir: IS.I.OR.240 Personnel requirements

Origin: EASA

Category: EAR