Regulatory Training

Part IS Training

An introduction to EASA information security requirements

The Part IS Training course provides a comprehensive overview of EASA Part-IS regulations, focusing on information security obligations for aviation organisations. It is designed for teams responsible for safeguarding systems, data, and operational integrity.
This course can be delivered on-site or remotely.

Course Overview

This course explains the regulatory framework of Part-IS, the structure of an Information Security Management System (ISMS) and the requirements for maintaining organisational compliance. Participants learn how to develop and implement an Information Security Management Manual (ISMM) and prepare for Competent Authority oversight.
  • Regulatory framework and structure of EASA Part-IS
  • Information Security Management Manual (ISMM) development
  • Organisational responsibilities and compliance pathways
  • Competent Authority oversight processes
  • Considerations for subcontracting and third-party arrangements
  • Compliance managers
  • IT and cybersecurity leads
  • Postholders
  • Accountable managers
  • Staff involved in information security governance
  • On-site at your organisation
  • Remote live delivery
  • Customised content available on request

Duration: Typically delivered over multiple days (based on course scope)

Strengthen Your Information Security Competence

This course prepares your organisation to meet EASA’s information security expectations and implement a compliant ISMS.