EASA Part-IS Implementation In Part-CAMO

This 2-day course is designed to provide personnel of EASA Part-CAMO Continuing Airworthiness Management Organisations with a comprehensive understanding of cybersecurity and information security requirements, aligned with EASA Part-IS and relevant global standards. By the end of the course, participants will be able to:

• Understand the relevance and linkage of EASA Part-IS to global frameworks (e.g., NIST, ISO/IEC 27001, NIS1/2, EUROCAE ED-202/ED-203)

• Assess the impact of information security risks on aviation safety and continuing airworthiness activities

• Interpret and apply Part-IS requirements in the context of a CAMO environment

• Design and implement an Information Security Management System (ISMS) suitable for CAMO operations

• Understand tools, methods, and governance frameworks for effective cyber risk management

• Move beyond regulatory compliance to establish a proactive security culture

• Prepare for authority oversight and ensure ongoing improvement

1: Cybersecurity in the CAMO Environment
2: EASA Cybersecurity Regulations – Part-IS.I.OR Overview
3: Embedding Cybersecurity into CAMO Processes
4: Building an ISMS for a CAMO Organisation
5: Risk Management in CAMO IT Systems
6: Internal Cyber Incident Reporting
7: External Reporting & Authority Coordination
8: Creating a Cyber Incident Response Plan
9: Managing Cybersecurity in Outsourced IT & Maintenance Organisation Interfaces
10: Record-Keeping & Audit Readiness