https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.210-Information-security-risk-treatment?p=p_0gc82TybGy0&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-VIII-INFORMATION-SECURITY-Annexes-II-Part-ATCO.AR-and-III-Part-ATCO.OR-to-Regulation-EU-2015-340?p=p_0hchTvC3WWx&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-II-Main-tasks-stemming-from-the-implementation-of-Part-IS-mapped-to-the-EU-e-CF-and-the-NIST-CSF-2.0?p=p_0HIXhJRXzqS&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.260-a-Continuous-improvement?p=p_0I1l9TcATaZ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.210-a-Information-security-risk-treatment?p=p_0LingSSGzgE&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.210-Information-security-risk-treatment?p=p_0Nd0CwaVBAj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.230-c-Information-security-external-reporting-scheme?p=p_0rdW3mmjuiu&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.215-Information-security-incidents-detection-response-and-recovery?p=p_0y0azJu6uQ0&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-g-Personnel-requirements?p=p_0zJb7nd6vE6&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.215-c-Information-security-incidents-detection-response-and-recovery?p=p_1c26GDucL8e&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.I.OR.255-Changes-to-the-information-security-management-system?p=p_1H8vJGr3A62&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.220-a-Information-security-incidents-detection-response-and-recovery?p=p_1JgtvIuuxH1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.205-a-Information-security-risk-assessment?p=p_239Kbe9zCzA&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-d-Personnel-requirements?p=p_2buEB9IX8JQ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/5378459906000GM1-IS.D.OR.220-c-Information-security-incidents-detection-response-and-recovery?p=p_2gYBtZ5nvbs&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_2jN4wVKuXuD&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM4-IS.AR.220-Contracting-of-information-security-management-activities?p=p_2o2WZ8MHznJ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Signature?p=p_2QbsJi35bM2&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.230-Information-security-external-reporting-scheme?p=p_2ryOjSw4Fvd&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-IX-INFORMATION-SECURITY-Annexes-II-Part-ATM-ANS.AR-and-III-Part-ATM-ANS.OR-to-Implementing-Regulation-EU-2017-373?p=p_3gmd4X8Mu0W&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.200-e-Information-security-management-system-ISMS?p=p_3MmrsbdyNqi&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.200-a-1-Information-security-management-system-ISMS?p=p_3n5c7xJRF47&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-5-Requirements-arising-from-other-Union-legislation?p=p_3T2P2aM2ogr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.245-Record-keeping?p=p_43nremQbAWO&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.205-a-Information-security-risk-assessment?p=p_44pKvkb1G5J&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Implementing-Regulation-EU-2023-203?p=p_4ixaVesW0YV&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/5378459906000GM1-IS.AR.215-c-Information-security-incidents-detection-response-and-recovery?p=p_4Qvm80R6m5j&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-4-Requirements-arising-from-other-Union-legislation?p=p_56DsCdqO1SN&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-5-Competent-authority?p=p_56QkeOvjpr3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.205-b-Information-security-risk-assessment?p=p_5cMGkMlC5lv&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-h-Personnel-requirements?p=p_5CN8onkQK9m&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.255-Changes-to-the-information-security-management-system?p=p_5i1oWHNe4PC&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.240-Personnel-requirements?p=p_6ehOBlMw3Zo&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.225-c-Personnel-requirements?p=p_6gaIXoqCJKf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-6-Competent-authority?p=p_6UocNkpD9hd&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-h-Personnel-requirements?p=p_6VHYcOrLmkZ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-f-Personnel-requirements?p=p_78ESmqQmC01&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.235-b-Contracting-of-information-security-management-activities?p=p_7le037e8cRj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.D.OR.255-Changes-to-the-information-security-management-system?p=p_7qUJmFo8lRw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.205-b-Information-security-risk-assessment?p=p_7Rd5gMtO0yG&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-INFORMATION-SECURITY-ORGANISATION-REQUIREMENTS-PART-IS.D.OR?p=p_7SOr5FIqDus&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.I.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_7tZGJAZzZMY&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-4-Requirements-for-organisations-and-competent-authorities?p=p_7ZQB4Ay26mn&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.210-Information-security-risk-treatment?p=p_84AS7ZBncj5&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.235-Continuous-improvement?p=p_8B4aFRPhVF9&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.230-Record-keeping?p=p_8bfk0UpMl5Z&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.220-b-Information-security-incidents-detection-response-and-recovery?p=p_8JsAGXb1IEd&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-4-2-Requirements-arising-from-other-Union-legislation?p=p_8LrC4IoJGx9&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/List-of-revisions?p=p_8RLgQ4Y8d39&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.235-b-Contracting-of-information-security-management-activities?p=p_8uztV5Uq9Dr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.200-a-1-Information-security-management-system-ISMS?p=p_979cYKIKMk8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.245-a-1-vi-a-5-Record-keeping?p=p_98GekR4nLpm&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-V-INFORMATION-SECURITY-Annexes-II-Part-ARO-and-III-Part-ORO-to-Regulation-EU-No-965-2012?p=p_9fif0vQLEUM&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.205-c-Information-security-risk-assessment?p=p_9tuDTIjHi7J&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.205-b-Information-security-risk-assessment?p=p_A43ydWIGmlT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.205-Information-security-risk-assessment?p=p_aDs3iKs0d1R&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.225-b-Personnel-requirements?p=p_AdUIHnW4l5e&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-III-Examples-of-aviation-services-and-interfaces?p=p_aFyHfeQZXtW&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.205-a-Information-security-risk-assessment?p=p_aj6bdY8dF12&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-6-Amendment-to-Regulation-EU-No-748-2012?p=p_AO3znQWQeoX&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.200-a-11-Information-security-management-system-ISMS?p=p_aO55nvhZf3P&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-b-Personnel-requirements?p=p_aoTyz33K4Yy&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-10-Amendment-to-Regulation-EU-No-965-2012?p=p_aqUnZUmQwXf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.205-b-Information-security-risk-assessment?p=p_arXH08PHR8w&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.235-Contracting-of-information-security-management-activities?p=p_ATgWqVmUy7j&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.215-Information-security-internal-reporting-scheme?p=p_AyB5gVFYwzs&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.245-c-d-Record-keeping?p=p_b31lydT0OPJ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-I-Examples-of-threat-scenarios-with-a-potential-harmful-impact-on-safety?p=p_b4LE529Zp7o&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.AR.220-Contracting-of-information-security-management-activities?p=p_b5QaRe5UgYI&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-2-Scope?p=p_B8W3QWeOsx8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.235-a-Continuous-improvement?p=p_b9kpvY0Hz3x&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.230-Information-security-external-reporting-scheme?p=p_bAwBerEUBCD&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.220-c-Information-security-incidents-detection-response-and-recovery?p=p_bEPx7LPrZLT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.225-a-Personnel-requirements?p=p_bEzapmMf92S&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.260-a-Continuous-improvement?p=p_BlnWEuh4rFn&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.230-c-d-Record-keeping?p=p_bPctNWwr6LP&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-8?p=p_bqlNgPTSi2M&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.220-c-Information-security-incidents-detection-response-and-recovery?p=p_BqnOzsg0nyU&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.260-b-Continuous-improvement?p=p_bsAYWSYtZdo&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.255-Changes-to-the-information-security-management-system?p=p_BvBGMJcEgJd&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.230-Information-security-external-reporting-scheme?p=p_BWlWA57YBKj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.215-b-Information-security-incidents-detection-response-and-recovery?p=p_bWVJxivc5TE&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-IV-Part-IS-requirements-mapping-to-ISO-IEC-27001-2022-clauses-and-controls-and-considerations-on-differences?p=p_BXZGEZk1jdV&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM3-IS.AR.220-Contracting-of-information-security-management-activities?p=p_bZ2xoYD7WGS&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.200-a-12-Information-security-management-system-ISMS?p=p_C0RJE745mG4&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-i-Personnel-requirements?p=p_C7ETqJoBd88&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Cover-Regulation-to-Delegated-Regulation-EU-2022-1645?p=p_CA6yDV382a8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Table-of-Contents?p=p_CD4SwfQslQO&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-e-Personnel-requirements?p=p_cHh1VUiRpYi&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.205-e-Information-security-risk-assessment?p=p_CHtcKC692YG&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.260-b-Continuous-improvement?p=p_cLJz4yBask1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.215-c-Information-security-internal-reporting-scheme?p=p_cO4OkDkWQ5A&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-5-2-Requirements-arising-from-other-Union-legislation?p=p_cqvN7ow4m7c&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.235-Contracting-of-information-security-management-activities?p=p_cv9Cxj7LIRg&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.235-Contracting-of-information-security-management-activities?p=p_CvpCEZC3NEA&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.AR.205-b-Information-security-risk-assessment?p=p_cVsCwYDXtWr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.205-Information-security-risk-assessment?p=p_cwx2iKjsfzT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-h-Personnel-requirements?p=p_czBOo91ilKF&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-7-Amendment-to-Regulation-EU-No-139-2014?p=p_D41BlQjPuo6&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.200-c-Information-security-management-system-ISMS?p=p_D4K9weGyIFf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-b-c-Personnel-requirements?p=p_D7eefg1F22G&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.235-a-Contracting-of-information-security-management-activities?p=p_Dct3Ieqs0yQ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.I.OR.205-d-Information-security-risk-assessment?p=p_de9vPKIxl2a&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.205-c-Information-security-risk-assessment?p=p_dEYVQjaE6pl&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.200-c-Information-security-management-system-ISMS?p=p_DEzrZg67JPr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.205-c-Information-security-risk-assessment?p=p_dFjd3wCAZqx&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-c-Personnel-requirements?p=p_dIvWQRJ1MUV&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.245-c-d-Record-keeping?p=p_dSZDYkeiqQv&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.255-Changes-to-the-information-security-management-system?p=p_DYKOR6di9df&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.230-c-d-Record-keeping?p=p_eB1fl4nJoyi&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.220-Information-security-incidents-detection-response-and-recovery?p=p_ECcZqUWS5j8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.245-a-1-vi-a-5-Record-keeping?p=p_EHMgXMdWzN7&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.220-b-c-Information-security-incidents-detection-response-and-recovery?p=p_ejDjZgKRSFg&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-VII-INFORMATION-SECURITY-Annexes-II-Part-145-III-Part-66-and-Vc-Part-CAMO-to-Regulation-EU-No-1321-2014?p=p_erQwIgkeOIM&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.200-a-8-Information-security-management-system-ISMS?p=p_eTscY21tocO&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.230-a-b-Information-security-external-reporting-scheme?p=p_eu3X37s7fGB&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.225-b-Personnel-requirements?p=p_EVYKPualIXM&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.245-c-d-Record-keeping?p=p_ExAY3PMEC8f&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.235-a-Continuous-improvement?p=p_f6WGz1W6dIM&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-III-Examples-of-aviation-services-and-interfaces?p=p_F8PSQ207D5u&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Disclaimer?p=p_faWuNg6Yynv&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.200-a-12-Information-security-management-system-ISMS?p=p_FdqXU0cuLSr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.260-Continuous-improvement?p=p_fmkUv633z5u&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.200-a-8-Information-security-management-system-ISMS?p=p_fPqdf68uke8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-Personnel-requirements?p=p_FqMXnoYzqFu&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.230-a-b-Information-security-external-reporting-scheme?p=p_fQRvxlm2mNg&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.255-Changes-to-the-information-security-management-system?p=p_FxyoN9OWbQs&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-c-Personnel-requirements?p=p_G11NIfqTjHE&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-VI-INFORMATION-SECURITY-Annex-II-Part-ADR.AR-to-Regulation-EU-No-139-2014?p=p_gd1cukm3mBi&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.220-c-Information-security-incidents-detection-response-and-recovery?p=p_gF4Ecf16EZt&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.230-c-Information-security-external-reporting-scheme?p=p_GIcgHxnBtGj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.200-d-Information-security-management-system-ISMS?p=p_gj44USx7nRL&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.230-a-b-Information-security-external-reporting-scheme?p=p_gQ2XfHiwpuN&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_GqZ8e7Dr5Gw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-f-Personnel-requirements?p=p_gV2rpVqevzX&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-b-c-Personnel-requirements?p=p_gYZvb1t5wW2&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-a-2-Personnel-requirements?p=p_H9MpUn0tT6w&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.215-Information-security-incidents-detection-response-and-recovery?p=p_HesWyv5cKTj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_HfaKCe62Rha&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-6-2-Competent-authority?p=p_hKGbfLDDtlf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.220-Information-security-incidents-detection-response-and-recovery?p=p_Hkh36f8wXMA&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.I.OR.205-b-Information-security-risk-assessment?p=p_Hkq4oV0L0h9&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.220-a-Information-security-incidents-detection-response-and-recovery?p=p_Hl9HkQGIgAH&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.D.OR.205-d-Information-security-risk-assessment?p=p_HO5F3lHrkX2&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.200-a-12-Information-security-management-system-ISMS?p=p_hqnGB5MNWb2&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.260-a-Continuous-improvement?p=p_HtT6EUuVQSw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.230-c-Information-security-external-reporting-scheme?p=p_hyqUKkPta6j&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.200-Information-security-management-system-ISMS?p=p_i01KoB7EFwp&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.200-d-Information-security-management-system-ISMS?p=p_i6pmByBnjNX&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.235-Contracting-of-information-security-management-activities?p=p_iDimG7fcPSm&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.200-c-Information-security-management-system-ISMS?p=p_Ig2dKPa41Ta&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM3-IS.D.OR.-215-a-b-Information-security-internal-reporting-scheme?p=p_ihJO6FQDBw8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-I-Examples-of-threat-scenarios-with-a-potential-harmful-impact-on-safety?p=p_IkNXorh9WSy&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-V-Proportionality-considerations-related-to-safety-relevance-and-aspects-of-complexity?p=p_iQGWzy0AWv3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.200-a-12-Information-security-management-system-ISMS?p=p_IQtili4kR5N&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.205-b-Information-security-risk-assessment?p=p_IrTlJ0Mpo6L&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-III-Examples-of-aviation-services-and-interfaces?p=p_itaDZOYpHG2&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/List-of-acronyms-and-abbreviations?p=p_iVheNbtHh0I&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/EXPLANATORY-MEMORANDUM?p=p_Iy31p0hwn9O&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM3-IS.I.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_j2vMYmS5z21&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.225-c-Personnel-requirements?p=p_j2wHBPb1HMe&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.215-b-c-Information-security-incidents-detection-response-and-recovery?p=p_jbMX2Yh3COB&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.200-e-Information-security-management-system-ISMS?p=p_Jd4EABQj20g&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.225-Response-to-findings-notified-by-the-competent-authority?p=p_jFTTb077xWe&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-g-Personnel-requirements?p=p_jiUJDyHoZLB&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.225-Response-to-findings-notified-by-the-competent-authority?p=p_jmrm21CIrQT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.235-a-Contracting-of-information-security-management-activities?p=p_JOmbvYn0jYZ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-13-Amendment-to-Regulation-EU-2015-340?p=p_jp2DgnwbXD3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.260-Continuous-improvement?p=p_JrA271kiXFI&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.235-b-Continuous-improvement?p=p_jt6JxwsqkcV&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-1-Subject-matter?p=p_JUTtijOfKv0&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.I.OR.235-a-Contracting-of-information-security-management-activities?p=p_JxdhvMSEDqQ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.220-b-Information-security-incidents-detection-response-and-recovery?p=p_JY2OHrlqhyR&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-a-3-Personnel-requirements?p=p_k3zqylxoMKa&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.250-Information-security-management-manual-ISMM?p=p_kBbOheYBUHz&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-I-Examples-of-threat-scenarios-with-a-potential-harmful-impact-on-safety?p=p_kcDMEt7tne0&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-II-Main-tasks-stemming-from-the-implementation-of-Part-IS-mapped-to-the-EU-e-CF-and-NIST-CSF-2.0?p=p_KChDsqcY6n7&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.205-d-Information-security-risk-assessment?p=p_kCMVergGOg1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.I.OR.235-Contracting-of-information-security-management-activities?p=p_KKbMV7asLin&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-9-Amendment-to-Regulation-EU-No-748-2012?p=p_KkdeVYkD0Yc&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.200-Information-security-management-system-ISMS?p=p_klzNFMIKiUy&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.245-a-1-vi-a-5-Record-keeping?p=p_KmPMfs5MKNi&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.205-Information-security-risk-assessment?p=p_kt173RyEFc5&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-5-2-Competent-authority?p=p_KtBJQ3j9spa&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.205-c-Information-security-risk-assessment?p=p_l3Nj2rkvnl1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.260-Continuous-improvement?p=p_L5HLjkeCjeR&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.205-d-Information-security-risk-assessment?p=p_LHeDbhLdOE1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.260-Continuous-improvement?p=p_LiyUoPYSP1q&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.235-Continuous-improvement?p=p_llg7FtWQVFj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.235-b-Contracting-of-information-security-management-activities?p=p_Ltmx3DcPDkf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.210-a-Information-security-risk-treatment?p=p_lunj18tZ5ph&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.200-a-9-Information-security-management-system-ISMS?p=p_LxlPl4PLknU&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.220-b-Information-security-incidents-detection-response-and-recovery?p=p_M4QYVfThiO1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-I-INFORMATION-SECURITY-AUTHORITY-REQUIREMENTS-PART-IS.AR?p=p_mb6jWQJaTz0&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.260-Continuous-improvement?p=p_mbdgEwZECFk&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.225-d-Personnel-requirements?p=p_MbHGyqwcbgt&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.200-c-Information-security-management-system-ISMS?p=p_MfEcfBHRQ2B&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.D.OR.235-a-Contracting-of-information-security-management-activities?p=p_mJ7JZwX0VDG&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.200-Information-security-management-system-ISMS?p=p_MQv2x97Zk53&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-a-3-Personnel-requirements?p=p_mScFqK3t2GJ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.225-Response-to-findings-notified-by-the-competent-authority?p=p_MTlLhHPYttY&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.215-c-Information-security-internal-reporting-scheme?p=p_MvEyI6gtpr1&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.205-e-Information-security-risk-assessment?p=p_mVKHlQjrL0v&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-3-Definitions?p=p_mZbV51GPnck&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.250-a-Information-security-management-manual-ISMM?p=p_N7oTKFWLdyy&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.215-a-Information-security-incidents-detection-response-and-recovery?p=p_naQe36rhzK5&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.235-a-Contracting-of-information-security-management-activities?p=p_nAqsJGpkgLr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.225-Personnel-requirements?p=p_NEw5Qe2Jkjz&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-11-Amendment-to-Regulation-EU-No-139-2014?p=p_ni206tPaZ6n&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-h-Personnel-requirements?p=p_NIb18ZMWQMX&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.235-Continuous-improvement?p=p_NKkF1Qn42P3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.250-Information-security-management-manual-ISMM?p=p_NKMPC8t1lXh&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.200-a-13-Information-security-management-system-ISMS?p=p_NnJDCiG6Si0&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-a-3-Personnel-requirements?p=p_nQtrfGWehKf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.D.OR.205-b-Information-security-risk-assessment?p=p_NRIh8GWR5RD&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.235-b-Continuous-improvement?p=p_NsmU0kY0Wba&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.235-a-Contracting-of-information-security-management-activities?p=p_NT4Ftfiye1c&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.D.OR.235-Contracting-of-information-security-management-activities?p=p_NwVoFHvXXhx&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-3-Definitions?p=p_O1Edh8xF7Oe&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.240-Personnel-requirements?p=p_o58MTX1L2bO&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.200-c-Information-security-management-system-ISMS?p=p_O6bbtScWinP&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.205-c-Information-security-risk-assessment?p=p_o7yu01kEo1D&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Cover-Regulation-to-Implementing-Regulation-EU-2023-203?p=p_oArvCc3TEQU&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM3-IS.D.OR.235-Contracting-of-information-security-management-activities?p=p_oC4jcNG3SbT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.200-d-Information-security-management-system-ISMS?p=p_olcYbH9FgIZ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.205-c-Information-security-risk-assessment?p=p_OrV9iAWDcZD&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.230-a-1-iv-a-4-Record-keeping?p=p_oRw1OVtnCYJ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.210-a-Information-security-risk-treatment?p=p_oUEz6KUoErn&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.200-c-Information-security-management-system-ISMS?p=p_oz7IQT01xuP&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.225-e-Personnel-requirements?p=p_p37pLYal6ty&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-i-Personnel-requirements?p=p_p8qwTD52RIx&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.220-b-Information-security-incidents-detection-response-and-recovery?p=p_pbYFzuqz07n&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.225-Personnel-requirements?p=p_pcbUHV5ZOYv&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.235-b-Contracting-of-information-security-management-activities?p=p_PCCRna83Da3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.210-Information-security-risk-treatment?p=p_PeZAW5Bv96s&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.230-Record-keeping?p=p_pJ0XFuAZT4f&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-b-Personnel-requirements?p=p_pjU9AOfOKNS&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-V-Proportionality-considerations-related-to-indicators-of-complexity?p=p_pkqVTTHGfwa&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.225-Response-to-findings-notified-by-the-competent-authority?p=p_pO9SMq4dBmX&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.200-e-Information-security-management-system-ISMS?p=p_pqRJW2zqb7Z&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-IV-Part-IS-requirements-mapping-to-ISO-IEC-27001-2022-clauses-and-controls-and-considerations-on-differences?p=p_pr6seE4IS5p&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.225-e-Personnel-requirements?p=p_q90MisOiQAp&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.205-Information-security-risk-assessment?p=p_Q9umVwCG4Bl&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-III-INFORMATION-SECURITY-ANNEXES-VI-Part-ARA-and-VII-Part-ORA-to-Regulation-EU-No-1178-2011?p=p_QCTkwOmbs9R&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Delegated-Regulation-EU-2022-1645?p=p_QDg3S4YuxAx&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-g-Personnel-requirements?p=p_qhK0vvdGEBi&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-3-Definitions?p=p_qjFCuQun7NS&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.245-Record-keeping?p=p_qKKB4X5Ggdj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-e-Personnel-requirements?p=p_QkM6AFOmBko&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.220-Information-security-incidents-detection-response-and-recovery?p=p_qm4cfbAXqUq&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.100-Scope?p=p_QrfCrcQKg22&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.260-Continuous-improvement?p=p_qRJdJ6W24qS&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.200-Information-security-management-system-ISMS?p=p_qVPmOlDH6dR&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.220-Contracting-of-information-security-management-activities?p=p_Qx86RWKbvus&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.215-a-Information-security-incidents-detection-response-and-recovery?p=p_qZtlS10Gp9q&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-IV-Part-IS-requirements-mapping-to-ISO-IEC-27001-2022-clauses-and-controls-and-considerations-on-differences?p=p_r2pLxn9CMPE&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.250-a-Information-security-management-manual-ISMM?p=p_R7tVadWR862&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.205-Information-security-risk-assessment?p=p_r90poBLSYlL&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-IV-INFORMATION-SECURITY-Annex-I-Part-21-to-Regulation-EU-No-748-2012?p=p_rdDeQrhH5qF&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.215-Information-security-internal-reporting-scheme?p=p_rK3Pod0P5bJ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.220-Information-security-incidents-detection-response-and-recovery?p=p_rLt1wyFJ4zw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.205-d-Information-security-risk-assessment?p=p_rNC0Acx77G3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.215-d-Information-security-internal-reporting-scheme?p=p_RnKJTSsyQZE&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.245-Record-keeping?p=p_RP5EwYU4mdt&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.225-a-Personnel-requirements?p=p_rpsZ00HR9Ab&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-b-Personnel-requirements?p=p_rrWpe8FYY9q&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.220-a-Information-security-incidents-detection-response-and-recovery?p=p_rtQsBr9VHsk&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-d-Personnel-requirements?p=p_ryBK7AVp7uN&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.260-b-Continuous-improvement?p=p_S3W0IOGSQaf&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.200-a-13-Information-security-management-system-ISMS?p=p_S5HTtKFu6b3&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-8-Amendment-to-Regulation-EU-No-1178-2011?p=p_sejme3wkFxV&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.260-a-Continuous-improvement?p=p_SGaCt8MtP7U&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-14-Amendment-to-Regulation-EU-2017-373?p=p_sghdgebp18r&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-1-Subject-matter?p=p_sJs0TVCzNs8&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Signature?p=p_skAZtu7dAZK&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.220-Contracting-of-information-security-management-activities?p=p_SkVyGhw5e9X&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.255-Changes-to-the-information-security-management-system?p=p_SuUhWUX3K1E&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.205-a-Information-security-risk-assessment?p=p_sUXyyHL2yeT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.200-a-1-Information-security-management-system-ISMS?p=p_SvpY9ZvDPOp&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-a-3-Personnel-requirements?p=p_SXGDwR3XUrY&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.220-a-Information-security-incidents-detection-response-and-recovery?p=p_T2G5EKUSBdw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.230-c-Information-security-external-reporting-scheme?p=p_T5416O3Ae9P&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.AR.205-d-Information-security-risk-assessment?p=p_TAy63ifpDg6&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Note-from-the-editor?p=p_tH1hOpHiekA&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.210-Information-security-risk-treatment?p=p_TIyBpfbBZMw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.245-a-1-vi-a-5-Record-keeping?p=p_Tjf7wY80kuU&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-g-Personnel-requirements?p=p_tNmBuIKXwiO&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.225-Response-to-findings-notified-by-the-competent-authority?p=p_TnReVRQFqUw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Incorporated-amendments?p=p_tpB4ANwac6z&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.220-Contracting-of-information-security-management-activities?p=p_Tv3xf3TwPjN&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.200-Information-security-management-system-ISMS?p=p_tvVrtENRatA&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/ANNEX-II-INFORMATION-SECURITY-ORGANISATION-REQUIREMENTS-PART-IS.I.OR?p=p_TWXfI3TaR2Z&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.205-a-Information-security-risk-assessment?p=p_txBfxwDLfLR&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.240-a-2-Personnel-requirements?p=p_u02PpguzstL&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_u0AuJpU4oi6&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-7-Submission-of-relevant-information-to-NIS-competent-authorities?p=p_U7f3uoWTK8R&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.200-a-1-Information-security-management-system-ISMS?p=p_uEj5xpS0LhP&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-4-1-Requirements-arising-from-other-Union-legislation?p=p_uhPOAnBMje6&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-2-Scope?p=p_uNwN8je7aW5&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-VI-Adaptation-of-the-EU-Cybersecurity-Skills-Framework-ECSF?p=p_UoFvcandaMr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.245-c-d-Record-keeping?p=p_UrzBduNcu3C&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.230-a-b-Information-security-external-reporting-scheme?p=p_UYsQGT2LgID&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.205-Information-security-risk-assessment?p=p_UZmlo3epzbQ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-1-Subject-matter?p=p_V7fgxybWPtC&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.AR.100-Scope?p=p_VChWEJFVLai&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.200-a-1-Information-security-management-system?p=p_vGmDh2gvSkC&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-f-Personnel-requirements?p=p_Vn4jXp2WI2A&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.255-Changes-to-the-information-security-management-system?p=p_VNAUH6I5JNP&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-3-Definitions?p=p_vOCuISypvuj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.200-e-Information-security-management-system-ISMS?p=p_voNN1FRtPYB&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Powers-and-recitals?p=p_vPxrICvPkAy&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.215-b-Information-security-incidents-detection-response-and-recovery?p=p_VXjXzbpvarV&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.240-Personnel-requirements?p=p_vyHv579AvPe&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.I.OR.205-d-Information-security-risk-assessment?p=p_w8jJcQy6CWh&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.200-a-1-Information-security-management-system-ISMS?p=p_W9icC23m0F4&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.230-a-1-iv-a-4-Record-keeping?p=p_WBcurImp2oA&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-16?p=p_wiVZLuGjREw&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM2-IS.D.OR.215-a-b-Information-security-internal-reporting-scheme?p=p_Wn8hyPVDKEM&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.I.OR.100-Scope?p=p_wOO32DBXB6A&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM3-IS.I.OR.235-Contracting-of-information-security-management-activities?p=p_wPHPGfGjQEB&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.205-a-Information-security-risk-assessment?p=p_WQHVeCMhTiS&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.215-d-Information-security-internal-reporting-scheme?p=p_wSXd72M44bT&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-1-Subject-matter?p=p_wUvf9bIseWI&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.240-i-Personnel-requirements?p=p_Wy3158nidIQ&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-15-Amendment-to-Regulation-EU-2021-664?p=p_wZbFsbPneyj&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.D.OR.260-b-Continuous-improvement?p=p_WZSPtWYwthr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-VI-Adaptation-of-the-EU-Cybersecurity-Skills-Framework-ECSF?p=p_X6UmwzXQ0De&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.210-Information-security-risk-treatment?p=p_XCYylDHPIBr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-f-Personnel-requirements?p=p_xFR9NkP8WEI&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Powers-and-recitals?p=p_ximRYvnilev&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/IS.D.OR.245-Record-keeping?p=p_XkDQnIzkXRL&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/EASA-eRules?p=p_XLU5kD9dtxO&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.230-Information-security-external-reporting-scheme?p=p_xMBj2GEdzCB&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.200-Information-security-management-system-ISMS?p=p_xWt8Ibxorp4&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-Article-5-1-Requirements-arising-from-other-Union-legislation?p=p_yfpiwYjnsff&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.AR.205-d-Information-security-risk-assessment?p=p_YIzECtjz8t2&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Appendix-II-Main-tasks-stemming-from-the-implementation-of-Part-IS-mapped-to-the-EU-e-CF-and-the-NIST-CSF-2.0?p=p_YmcEUBJ6ngr&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM5-IS.AR.220-Contracting-of-information-security-management-activities?p=p_YVQkWd5Aobz&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.225-d-Personnel-requirements?p=p_z40Jjgd182U&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/AMC1-IS.AR.205-d-Information-security-risk-assessment?p=p_zgomRnX6TRn&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.D.OR.205-b-Information-security-risk-assessment?p=p_ZKywhWG603d&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-b-Personnel-requirements?p=p_ZNH7t5Z4tqk&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.220-b-c-Information-security-incidents-detection-response-and-recovery?p=p_ZNOePU7Yd4y&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/Article-12-Amendment-to-Regulation-EU-No-1321-2014?p=p_zNXs7dfs76q&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.240-i-Personnel-requirements?p=p_ZoldEHcC9JK&s=1https://aviation.bot/EASA/INFORMATION-SECURITY-DEC-2025/GM1-IS.I.OR.225-Response-to-findings-notified-by-the-competent-authority?p=p_zrPXAUZWd0h&s=1