Behind this slightly technical name — Part-IS for Information Security — sits a set of rules defined in European regulations (EU) 2023/203 and (EU) 2022/1645.
The idea is simple: require all aviation actors to secure their data and IT systems.
That means setting up an Information Security Management System (ISMS), an arrangement that ensures information remains protected, reliable, and accessible only to those who need it.
The stakes? Reduce cyber risk and make sure aeronautical activities remain safe and reliable, even in the event of an IT incident.
Part-IS does not replace existing rules: it complements them by introducing a structured cybersecurity approach focused on protecting systems, data, and services that are critical to operations.
Part-IS EASA leaves almost no one out: it concerns nearly everyone in aviation. Airlines, whether they carry passengers or cargo, maintenance organisations that repair aircraft, manufacturers that build them, training organisations, and even the authorities that oversee all of this.
The deadlines to get compliant are approaching: October 2025 for those who already hold an EASA approval, February 2026 for others. That leaves some room, but it is better not to wait.
Complying with Part-IS EASA is not just ticking a box. First you need to map your systems to identify weaknesses: which systems are critical, who accesses them, what data flows through them, and where the points of failure are.
Then you need to build that ISMS, with clear rules and the right tools to address the risks.
It does not stop there: you will need to monitor what is happening continuously and report any serious issue to the competent authority.
💡 Already feels tedious? Make it easier with Comply Air!
Cyber risk in aviation is not theoretical. We have already seen airlines blocked by ransomware, and attempted attacks on critical networks stopped just in time.
When a simple IT outage can ground aircraft, imagine what a determined attacker could do. With Part-IS EASA, Europe wants to avoid the worst and build aviation that is more resilient to these modern threats.
To avoid being caught off guard, a few steps are essential.
With Part-IS EASA, European aviation is giving itself the means to operate confidently in a digital world.
It is an opportunity to modernise practices and protect what matters most: everyone’s safety. So take the lead and get started without delay.
