Light
Dark
System
Log In
Loading...
Compare / EASA/
Incorporated Amendments
/
Compare & Highlight Differences
21.A.139A Information security management system
Available versions for ERULES-1963177438-21949
Regulation (EU) 2022/1645
found in: Initial Airworthiness and Environmental Protection (748/2012) Part-21 Part-21L (Jul 2024)
From
Initial Airworthin... (Nov 2025)
Initial Airworthin... (Jul 2024)
From section
To
Initial Airworthin... (Nov 2025)
Initial Airworthin... (Jul 2024)
To section
No visible text changes
0 removals
0 additions
View
Rich
Plain
Sync scrolling
Share
From
Show details
Hide details
To
Show details
Hide details
Version
Show side by side
21.A.139A Information security management system Regulation (EU) 2022/1645 In addition to the production management system required by point [21.A.139](#_DxCrossRefBm1649096881), the production organisation shall establish, implement and maintain an information security management system in accordance with [Commission Delegated Regulation (EU) 2022/1645](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R1645&qid=1705575972222)[[30]](#_ftn30) in order to ensure the proper management of information security risks which may have an impact on aviation safety. [applicable from 16 October 2025 – Regulation (EU) 2022/1645] --- [[30]](#_ftnref30) Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18).
#### 21.A.139A Information security management system *Regulation (EU) 2022/1645* In addition to the production management system required by point [21.A.139](#_DxCrossRefBm485230371), the production organisation shall establish, implement and maintain an information security management system in accordance with [Commission Delegated Regulation (EU) 2022/1645](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R1645&qid=1705575972222)[[31]](#_ftn31) in order to ensure the proper management of information security risks which may have an impact on aviation safety. --- [[31]](#_ftnref31) Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18).