What is the title of Appendix VI in the EASA Easy Access Rules that adapts a European cybersecurity skills framework?

The title of Appendix VI is 'Adaptation of the EU Cybersecurity Skills Framework (ECSF)'.

Which EASA decision is associated with Appendix VI on the adaptation of the EU Cybersecurity Skills Framework?

The associated decision is ED Decision 2025/014/R.

Does Appendix VI contain any textual requirements or only visual content?

Appendix VI contains only visual content, specifically a series of images (image025 through image041), with no textual requirements or provisions.

Which regulation is referenced in the footnotes as the basis for the EU Cybersecurity Skills Framework adaptation?

The footnotes reference Regulation (EU) 2018/1139 of the European Parliament and of the Council on common rules in the field of civil aviation and establishing the European Union Aviation Safety Agency.

What is the publication date of the consolidated version of the document containing Appendix VI?

The publication date of the consolidated version is 2025-12-05.

Which image files are included in Appendix VI?

The included image files are image025.png through image041.png, as listed in the section.

Is there any mention of a specific date of application for the provisions in Appendix VI itself?

No, Appendix VI itself does not state any applicability date; the only date mentioned in the section is the publication date of the consolidated version (2025-12-05) and the application date for EGNOS (1 January 2026) in a footnote.

What is the purpose of the footnotes in the section containing Appendix VI?

The footnotes provide references to legal acts, such as Regulation (EU) 2018/1139, Implementing Regulation (EU) 2017/373, and others, as well as explanations about publication dates and applicability dates.

Which regulation is referenced in footnote 6 regarding the EGNOS air navigation service provider?

Footnote 6 references Implementing Regulation (EU) 2017/373.

Appendix VI -- Adaptation of the EU Cybersecurity Skills Framework (ECSF)

Q: What is the main date of application for the EGNOS air navigation service provider subject to Implementing Regulation (EU) 2017/373, as referenced in the footnotes?

For the EGNOS air navigation service provider subject to Implementing Regulation (EU) 2017/373, the application date is 1 January 2026.

Navigate / EASA

Ask question Discover more Add to collection

Appendix VI — Adaptation of the EU Cybersecurity Skills Framework (ECSF)

ED Decision 2025/014/R

A close-up of a computer application

AI-generated content may be incorrect.

A close-up of a document

AI-generated content may be incorrect.

A document with text on it

AI-generated content may be incorrect.

A close-up of a document

AI-generated content may be incorrect.

A diagram of a diagram

AI-generated content may be incorrect.

A document with text and images

AI-generated content may be incorrect.

A close-up of a document

AI-generated content may be incorrect.

A screenshot of a computer

AI-generated content may be incorrect. A document with text on it

AI-generated content may be incorrect.

A close-up of a document

AI-generated content may be incorrect.

A document with text on it

AI-generated content may be incorrect.

A screenshot of a computer

AI-generated content may be incorrect.

A document with text on it

AI-generated content may be incorrect.

A document with text and a black text

AI-generated content may be incorrect.

[1] The published date represents the date when the consolidated version of the document was generated.

[2] Euro-Lex, Important Legal Notice: http://eur-lex.europa.eu/content/legal-notice/legal-notice.html.

[3] The published date represents the date when the consolidated version of the EAR book was generated.

[4] Euro-Lex, Important Legal Notice: http://eur-lex.europa.eu/content/legal-notice/legal-notice.html.

[5] This is the main date of application (i.e. the date from which an act or a provision in an act produces its full legal effects) as defined in the relevant regulation article. Some provisions of the regulations though may be applicable at a later date (deferred applicability). Besides, there may be some opt-outs (derogations from certain provisions) notified by the Member States.

[6] ‘As regards the case of the EGNOS air navigation service provider subject to Implementing Regulation (EU) 2017/373 it shall apply from 1 January 2026.’.

[7] OJ L 212, 22.8.2018, p. 1.

[8] Commission Implementing Regulation (EU) 2015/1998 of 5 November 2015 laying down detailed measures for the implementation of the common basic standards on aviation security (OJ L 299, 14.11.2015, p. 1).

[9] Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (OJ L 194, 19.7.2016, p. 1).

[10] Regulation (EU) 2021/696 of the European Parliament and of the Council of 28 April 2021 establishing the Union Space Programme and the European Union Agency for the Space Programme and repealing Regulations (EU) No 912/2010, (EU) No 1285/2013 and (EU) No 377/2014 and Decision No 541/2014/EU

[11] Commission Implementing Regulation (EU) 2017/373 of 1 March 2017 laying down common requirements for providers of air traffic management/air navigation services and other air traffic management network functions and their oversight, repealing Regulation (EC) No 482/2008, Implementing Regulations (EU) No 1034/2011, (EU) No 1035/2011 and (EU) 2016/1377 and amending Regulation (EU) No 677/2011, (OJ L 062 8.3.2017, p. 1)

[12] https://www.easa.europa.eu/document-library/opinions

[13] Commission Regulation (EU) No 1321/2014 of 26 November 2014 on the continuing airworthiness of aircraft and aeronautical products, parts and appliances, and on the approval of organisations and personnel involved in these tasks (OJ L 362, 17.12.2014, p. 1).

[14] Commission Regulation (EU) No 965/2012 of 5 October 2012 laying down technical requirements and administrative procedures related to air operations pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council (OJ L 296, 25.10.2012, p. 1)

[15] Commission Regulation (EU) No 748/2012 of 3 August 2012 laying down implementing rules for the airworthiness and environmental certification of aircraft and related products, parts and appliances, as well as for the certification of design and production organisations (OJ L 224, 21.8.2012, p. 1).

[16] Commission Regulation (EU) No 1178/2011 of 3 November 2011 laying down technical requirements and administrative procedures related to civil aviation aircrew pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council (OJ L 311, 25.11.2011, p. 1).

[17] Commission Regulation (EU) 2015/340 of 20 February 2015 laying down technical requirements and administrative procedures relating to air traffic controllers' licences and certificates pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council, amending Commission Implementing Regulation (EU) No 923/2012 and repealing Commission Regulation (EU) No 805/2011 (OJ L 63, 6.3.2015, p. 1).

[18] Commission Implementing Regulation (EU) 2017/373 of 1 March 2017 laying down common requirements for providers of air traffic management/air navigation services and other air traffic management network functions and their oversight, repealing Regulation (EC) No 482/2008, Implementing Regulations (EU) No 1034/2011, (EU) No 1035/2011 and (EU) 2016/1377 and amending Regulation (EU) No 677/2011 (OJ L 62, 8.3.2017, p. 1).

[19] Commission Implementing Regulation (EU) No 2021/664 of 22 April 2021 on a regulatory framework for the U-space (OJ L 139, 23.4.2021, p. 161).

[20] Commission Implementing Regulation (EU) 2023/1769 of 12 September 2023 laying down technical requirements and administrative procedures for the approval of organisations involved in the design or production of air traffic management/air navigation services systems and constituents and amending Implementing Regulation (EU) 2023/203 (OJ L 228, XX.9.2023, p. 19).

[21] Commission Implementing Regulation (EU) 2024/1109 of 10 April 2024 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council as regards competent authority requirements and administrative procedures for the certification, oversight and enforcement of the continuing airworthiness of certified unmanned aircraft systems, and amending Implementing Regulation (EU) 2023/203 (OJ L, 2024/1109, 17.5.2024, ELI: http://data.europa.eu/eli/reg_impl/2024/1109/oj).

[22] Commission Implementing Regulation (EU) 2015/1998 of 5 November 2015 laying down detailed measures for the implementation of the common basic standards on aviation security (OJ L 299, 14.11.2015, p. 1).

[23] Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (OJ L 194, 19.7.2016, p. 1).

[24] Regulation (EU) No 376/2014 of the European Parliament and of the Council of 3 April 2014 on the reporting, analysis and follow-up of occurrences in civil aviation, amending Regulation (EU) No 996/2010 of the European Parliament and of the Council and repealing Directive 2003/42/EC of the European Parliament and of the Council and Commission Regulations (EC) No 1321/2007 and (EC) No 1330/2007 (OJ L 122, 24.4.2014, p. 18) (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32014R0376&qid=1669377456448).

[25] Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002, (OJ L 97, 9.4.2008, p. 72).

[26] Regulation (EU) 2021/696 of the European Parliament and of the Council of 28 April 2021 establishing the Union Space Programme and the European Union Agency for the Space Programme and repealing Regulations (EU) No 912/2010, (EU) No 1285/2013 and (EU) No 377/2014 and Decision No 541/2014/EU (OJ L 170, 12.5.2021, p. 69).

[27] Regulation (EU) 2018/1139 of the European Parliament and of the Council of 4 July 2018 on common rules in the field of civil aviation and establishing a European Union Aviation Safety Agency, and amending Regulations (EC) No 2111/2005, (EC) No 1008/2008, (EU) No 996/2010, (EU) No 376/2014 and Directives 2014/30/EU and 2014/53/EU of the European Parliament and of the Council, and repealing Regulations (EC) No 552/2004 and (EC) No 216/2008 of the European Parliament and of the Council and Council Regulation (EEC) No 3922/91 (OJ L 212, 22.8.2018, p. 1) (https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1535612134845&uri=CELEX:32018R1139).

[28] https://www.easa.europa.eu/document-library/notices-of-proposed-amendment/npa-2019-07

[29] OJ L 212, 22.8.2018, p. 1.

[30] Commission Implementing Regulation (EU) 2015/1998 of 5 November 2015 laying down detailed measures for the implementation of the common basic standards on aviation security (OJ L 299, 14.11.2015, p. 1).

[31] Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (OJ L 194, 19.7.2016, p. 1).

[32] Commission Regulation (EU) No 748/2012 of 3 August 2012 laying down implementing rules for the airworthiness and environmental certification of aircraft and related products, parts and appliances, as well as for the certification of design and production organisations

[33] Commission Regulation (EU) No 139/2014 of 12 February 2014 laying down requirements and administrative procedures related to aerodromes pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council

[34] https://www.easa.europa.eu/document-library/opinions

[35] OJ L 123, 12.5.2016, p. 1.

[36] Commission Delegated Regulation (EU) 2025/20 of 19 December 2024 supplementing Regulation (EU) 2018/1139 of the European Parliament and of the Council by laying down requirements for the safe provision of ground handling services and for organisations providing them (OJ L, 2025/20, 7.3.2025, ELI: http://data.europa.eu/eli/reg_del/2025/20/oj).

[37] Regulation (EU) No 376/2014 of the European Parliament and of the Council of 3 April 2014 on the reporting, analysis and follow-up of occurrences in civil aviation, amending Regulation (EU) No 996/2010 of the European Parliament and of the Council and repealing Directive 2003/42/EC of the European Parliament and of the Council and Commission Regulations (EC) No 1321/2007 and (EC) No 1330/2007 (OJ L 122, 24.4.2014, p. 18) (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32014R0376&qid=1669377456448).

[38] Regulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72).

[39] Commission Implementing Regulation (EU) 2025/23 of 19 December 2024 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the oversight of ground handling services and organisations providing them (OJ L, 2025/23, 7.3.2025, ELI: http://data.europa.eu/eli/reg_impl/2025/23/oj).

[40] Commission Regulation (EU) No 139/2014 of 12 February 2014 laying down requirements and administrative procedures related to aerodromes pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council (OJ L 44, 14.2.2014, p. 1).

[41] Regulation (EU) No 376/2014 of the European Parliament and of the Council of 3 April 2014 on the reporting, analysis and follow-up of occurrences in civil aviation, amending Regulation (EU) No 996/2010 of the European Parliament and of the Council and repealing Directive 2003/42/EC of the European Parliament and of the Council and Commission Regulations (EC) No 1321/2007 and (EC) No 1330/2007 (OJ L 122, 24.4.2014, p. 18).

Details

Source-Title: Appendix VI -- Adaptation of the EU Cybersecurity Skills Framework (ECSF) View latest amendments

Erulesid: ERULES-1963177438-24033 Compare versions

Domain: Information Security (IS)

Applicabilitydate: 22 February, 2026

Entryintoforcedate: 25 July, 2025

Regulatorysource: ED Decision 2025/014/R Navigate

Regulatorysubject: Part-IS.D.OR

Typeofcontent: GM to IR (Guidance material to implementing rule)

Origin: EASA

Category: EAR