CAMO.B.330A Changes to the information security management system

• Regulation (EU) 2023/203 found in: Continuing Airworthiness (1321/2014) Part-M Part-145 Part-66 Part-147 Part-T Part-ML Part-CAMO Part-CAO (Jul 2024)

CAMO.B.330A Changes to the information security management system Regulation (EU) 2023/203 (a) For changes managed and notified to the competent authority in accordance with the procedure set out in point IS.I.OR.255(a) of Annex II (Part-IS.I.OR) to Implementing Regulation (EU) 2023/203, the competent authority shall include the review of such changes in its continuing oversight in accordance with the principles laid down in point [CAMO.B.300](#_DxCrossRefBm1518546128). If any non-compliance is found, the competent authority shall notify the organisation thereof, request further changes and act in accordance with point [CAMO.B.350](#_DxCrossRefBm1518546002). (b) For other changes requiring an application for approval in accordance with point IS.I.OR.255(b) of Annex II (Part-IS.I.OR) to Implementing Regulation (EU) 2023/203: (1) upon receiving the application for the change, the competent authority shall check the organisation’s compliance with the applicable requirements before issuing the approval; (2) the competent authority shall establish the conditions under which the organisation may operate during the implementation of the change; (3) if it is satisfied that the organisation complies with the applicable requirements, the competent authority shall approve the change. *[Applicable from 22 February 2026 – Regulation (EU) 2023/203]* #### CAMO.B.330A Changes to the information security management system *Regulation (EU) 2023/203* (a) For changes managed and notified to the competent authority in accordance with the procedure set out in point IS.I.OR.255(a) of Annex II (Part-IS.I.OR) to Implementing Regulation (EU) 2023/203, the competent authority shall include the review of such changes in its continuing oversight in accordance with the principles laid down in point [CAMO.B.300](#_DxCrossRefBm1203441015). If any non-compliance is found, the competent authority shall notify the organisation thereof, request further changes and act in accordance with point [CAMO.B.350](#_DxCrossRefBm1203440889). (b) For other changes requiring an application for approval in accordance with point IS.I.OR.255(b) of Annex II (Part-IS.I.OR) to Implementing Regulation (EU) 2023/203: (1) upon receiving the application for the change, the competent authority shall check the organisation’s compliance with the applicable requirements before issuing the approval; (2) the competent authority shall establish the conditions under which the organisation may operate during the implementation of the change; (3) if it is satisfied that the organisation complies with the applicable requirements, the competent authority shall approve the change. *[Applicable from 22 February 2026 – Regulation (EU) 2023/203]*