Stay compliant with EASA’s new information security regulations
Meet the latest EASA Part-IS requirements with AeroEx’s comprehensive information security solutions.
remaining until EASA Part-IS regulations take effect
Understanding EASA’s latest information security regulation: Part-IS
The new EASA Part-IS regulation (Commission Implementing Regulation (EU) 2023/203 and Commission Delegated Regulation (EU) 2022/1645) introduces a robust framework for identifying, assessing, and managing information security risks that impact aviation safety.
Effective October 2025 for some organizations, and February 2026 for others, this regulation emphasizes a proactive approach to information security, covering areas such as:
- Governance and risk management
- Event detection and response
- Continuous improvement and reporting standards
To comply, EASA-approved organizations will need to integrate an Information Security Management System (ISMS) within their Safety Management System (SMS), ensuring seamless cross-functional coordination and enhanced cyber resilience.
Why compliance with EASA’s Part-IS is crucial
- Mitigate cyber threats to safety
- Increase resilience against cyber-attacks
- Promote standardized safety and compliance measures across the aviation ecosystem
Information security services
Comprehensive information security services by AeroEx
AeroEx offers a suite of specialized services designed to meet the new EASA Part-IS requirements and protect your organization from cyber risks. Our offerings include:
Information security advisory
Information security & data protection audits
Comprehensive audits to evaluate and improve your data protection and security practices.
External data protection & security officers
GAP analyses & risk assessments
Identify vulnerabilities and assess risks to enhance your information security framework.
Assistance with investigations
Expert support for investigating security breaches and compliance violations.
ISM manual preparation & revision
Training courses (on-site & online)
AMAS.aero toolkits
Utilize the AMAS.aero platform for seamless compliance management and real-time security monitoring.
  View toolkits
Cybersecurity insurance
Don’t wait until regulatory deadlines approach or a security incident occurs. AeroEx’s tailored solutions will help you navigate EASA’s latest regulations and build a resilient, compliant ISMS. Contact us today to discuss your needs, and let us guide you toward a compliant and secure future in aviation.
AMAS.aero Information Security Toolkits
Tailored solutions to meet EASA’s information security regulations
Our specialized toolkits with the AMAS.aero platform help your organization comply with EASA’s Part-IS (EU) 2023/203 regulations. Whether you are just starting to implement your Information Security Management System (ISMS) or need a comprehensive solution to support ongoing compliance and improvement, our toolkits provide everything you need.
Key benefits of our toolkits:
Compliance with legal requirements
Holistic approach
Efficient integration
Risk reduction
Continuous improvement
Proactive monitoring
Standardized processes
Data protection
Starter Toolkit
- AMAS.aero applications: Standards & Regulations, Manuals, Questionnaires, Information Collection
- 1 named user/editor (primary user)
- Information Security Management Manual (ISMM) template, with annual revision service
- EASA Information Security Regulation Bundle: IS.AR, IS.D.OR, IS.I.OR, and Occurrence Reporting
- Forms, guidance material, and annual revision service
- Cross-reference list to ensure compliance, with annual revision service
- Information security audit checklist, with annual updates
- Webinar “How to use the Starter Toolkit”
- Implementation plan to set up ISMS
Best suited for:
- Organizations just beginning to implement an ISMS and looking for a straightforward, cost-effective solution.
- Small to medium-sized companies that need to meet basic regulatory compliance without extensive internal resources.
Advanced Toolkit
- AMAS.aero applications: Compliance and Safety Management Suite, Manuals
- 5 named users/editors (primary users)
- Information Security Management Manual (ISMM) template, with annual revision service
- EASA Information Security Regulation Bundle: IS.AR, IS.D.OR, IS.I.OR, and Occurrence Reporting
- ISO 27001 Information security management systems
- Forms, guidance material, and annual revision service
- Cross-reference list to ensure compliance, with annual revision service
- Information security audit checklist, with annual updates
- Webinar “How to use the Advanced Toolkit”
- Implementation plan for full ISMS setup
- Consulting service: 8 hours/year of expert consultation
- Online training for each user, including certificates
Best suited for:
- Organizations with complex operational needs that require an integrated solution for ongoing risk management, compliance monitoring, and continuous improvement.
- Companies needing to meet both EASA Part-IS and ISO 27001 standards for information security.
Stay compliant, stay secure.
Information security packages
Comprehensive assessments to ensure full compliance with EASA’s Part-IS standards.
Why choose AeroEx for information security compliance?
Our solutions are tailored specifically to the aviation industry, ensuring comprehensive compliance with Part-IS. AeroEx provides:
Industry expertise
Leveraging our extensive experience and deep-rooted expertise in the aerospace industry, we deliver unmatched insights and robust support.
Customized solutions
We understand that every organization’s security needs are unique and design solutions to fit your specific requirements.
AMAS.aero platform integration
Leverage our AMAS.aero platform for seamless compliance management, real-time updates, and automated reporting features.
End-to-end support
From initial assessments to continuous improvements, our team provides support at every compliance stage, ensuring your systems evolve with regulations.
Strategic Partnership with DEUDAT
In collaboration with DEUDAT, a leader in information security and data protection, we bring unparalleled expertise and insight to every project. This strategic partnership enables AeroEx to deliver top-tier guidance and support, leveraging DEUDAT’s specialization in cybersecurity to address evolving aviation industry needs and ensure robust protection for your organization.
Your roadmap to EASA Part-IS compliance
Stay secure, stay compliant with AeroEx’s integrated approach to information security and data protection. Let us guide you through the complexities of EASA regulations, offering you the peace of mind and operational efficiency to focus on what matters most — safe, secure aviation operations.
© 2024 by AeroEx GmbH
