GM1 Article 15(1)(f) Conditions for obtaining a certificate

• ED Decision 2022/022/R found in: U-space (2021/664) (May 2024)

GM1 Article 15(1)(f) Conditions for obtaining a certificate ED Decision 2022/022/R SECURITY MANAGEMENT SYSTEM Regarding the security management requirements, reference is made to point ATM/ANS.OR.A.D.010 of Subpart D of Annex III to [Regulation (EU) 2017/373](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32017R0373&qid=1710347963057). Nevertheless, it has to be noted that Opinion No 03/2021 ‘Management of information security risks’[[26]](#_ftn26) proposes amendments to both Subpart B and D of Annex III to [Regulation (EU) 2017/373](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32017R0373&qid=1710347963057). Therefore, once the related regulation is published, the provisions as regards the management of information security risks (Part-IS) will be applicable to the applicant. --- [[26]](#_ftnref26)<https://www.easa.europa.eu/en/document-library/opinions/opinion-032021>