ORA.GEN.200A Information security
management system
Regulation
(EU) 2023/203
In addition to the management
system referred to in point ORA.GEN.200, the organisation shall establish, implement and
maintain an information security management system in accordance with Implementing
Regulation (EU) 2023/203 in order to ensure
the proper management of information security risks which may have an impact
on aviation safety.
[applicable from 22 February
2026 — Implementing Regulation (EU) 2023/203]