21.A.139A Information security management system

• Regulation (EU) 2022/1645 found in: Initial Airworthiness and Environmental Protection (No 748/2012) Part-21 Part-21L (Jul 2024)

21.A.139A Information security management system Regulation (EU) 2022/1645 In addition to the production management system required by point [21.A.139](#_DxCrossRefBm1649096881), the production organisation shall establish, implement and maintain an information security management system in accordance with [Commission Delegated Regulation (EU) 2022/1645](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R1645&qid=1705575972222)[[30]](#_ftn30) in order to ensure the proper management of information security risks which may have an impact on aviation safety. [applicable from 16 October 2025 – Regulation (EU) 2022/1645] --- [[30]](#_ftnref30) Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18).