GM1 IS.AR.225(a) Personnel requirements

• ED Decision 2023/010/R found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)

GM1 IS.AR.225(a) Personnel requirements ED Decision 2023/010/R The person referred to in point [IS.AR.225](#_DxCrossRefBm1193569459) (a) should be capable of managing the authority’s information security strategy and its implementation to ensure the achievement of the objectives described in Article 1. According to the European Cybersecurity Skills Framework (ECSF) published by ENISA in September 2022, this person may be described for instance as: (Chief) Information Security Officer, Cybersecurity Programme Director or Information Security Manager. However, it should be noticed that these descriptions and the related skills do not consider the aviation safety perspective that is required in [Article 1](#_DxCrossRefBm1193569433). ##### GM1 IS.AR.225(a) Personnel requirements *ED Decision 2023/010/R* The person referred to in point [IS.AR.225](#_DxCrossRefBm1749084193) (a) should be capable of managing the authority’s information security strategy and its implementation to ensure the achievement of the objectives described in Article 1. According to the European Cybersecurity Skills Framework (ECSF) published by ENISA in September 2022, this person may be described for instance as: (Chief) Information Security Officer, Cybersecurity Programme Director or Information Security Manager. However, it should be noticed that these descriptions and the related skills do not consider the aviation safety perspective that is required in [Article 1](#_DxCrossRefBm1749084164).