EASA Part-IS Implementation In AOC Operations

This 2-day course is designed to provide personnel of Air Operator Certificate (AOC) holders with a comprehensive understanding of cybersecurity and information security requirements, aligned with EASA Part-IS and relevant global standards. By the end of the course, participants will be able to:

• Understand the relevance and linkage of EASA Part-IS to global frameworks (e.g., NIST, ISO/IEC 27001, NIS1/2, EUROCAE ED-202/ED-203)

• Assess the impact of information security risks on aviation safety and flight operations

• Interpret and apply Part-IS requirements in the context of commercial air transport

• Design and implement an Information Security Management System (ISMS) suitable for AOC operations

• Understand tools, methods, and governance frameworks for effective cyber risk management

• Move beyond regulatory compliance to establish a proactive security culture

• Prepare for authority oversight and ensure ongoing improvement

1: Cybersecurity in the CAMO Environment
2: EASA Cybersecurity Regulations – Part-IS.I.OR Overview
3: Embedding Cybersecurity into Air Operator Procedures
4: Building an ISMS for a Air Operator
5: Risk Management in Aviation IT and Ops Systems
6: Internal Cyber Incident Reporting
7: External Reporting & Authority Coordination
8: Creating a Cyber Incident Response Plan
9: Managing Cybersecurity in Outsourced IT & Third-Party Ops Providers
10: Record-Keeping & Audit Readiness