EASA Part-IS Implementation In Part-21 POA

This 2-day course is designed to provide personnel of EASA Part-21 Production Organisations with a comprehensive understanding of cybersecurity and information security requirements, aligned with EASA Part-IS and relevant global standards. By the end of the course, participants will be able to:

• Understand the relevance and linkage of EASA Part-IS to global frameworks (e.g., NIST, ISO/IEC 27001, NIS1/2, EUROCAE ED-202/ED-203)

• Assess the impact of information security risks on aviation safety and production operations

• Interpret and apply Part-IS requirements in the context of a production environment (POA)

• Design and implement an Information Security Management System (ISMS) suitable for POA operations

• Understand tools, methods, and governance frameworks for effective cyber risk management

• Move beyond regulatory compliance to establish a proactive security culture

• Prepare for authority oversight and ensure ongoing improvement

1: Cybersecurity in the Design and Production Environment
2: EASA Cybersecurity Regulations – Part-IS.I.OR Overview
3: Embedding Cybersecurity into Design and Production Activities
4: Building an ISMS for a Production Organisation
5: Risk Management in POA IT Infrastructure
6: Internal Cyber Incident Reporting
7: External Reporting & Authority Coordination
8: Creating a Cyber Incident Response Plan
9: Managing Cybersecurity in Outsourced IT & Design/Production Interfaces
10: Record-Keeping & Audit Readiness