Navigate / EASA
Ask question Discover more Add to collection

IS.AR.220 Contracting of information security management activities

Regulation (EU) 2023/203

The competent authority shall ensure that when contracting any part of the activities referred to in point IS.AR.200 to other organisations, the contracted activities comply with the requirements of this Regulation and the contracted organisation works under its oversight. The competent authority shall ensure that the risks associated with the contracted activities are appropriately managed.
Details
Source-Title: IS.AR.220 Contracting of information security management activities View latest amendments
Erulesid: ERULES-1963177438-19968 Compare versions
Domain: Information Security (IS)
Applicabilitydate: 22 February, 2026
Entryintoforcedate: 22 February, 2023
Regulatorysource: Regulation (EU) 2023/203 Navigate
Regulatorysubject: Part-IS.AR
Typeofcontent: IR (Implementing rule)
Origin: EASA
Category: EAR
Related sections: