---
title: "Information security risk — EASA Definition · Avioverse"
description: "Article 3, Regulations (EU) 2023/203 and 2022/1645: ‘information security risk’ means the risk to organisational civil aviation operations, assets…"
url: "https://avioverse.aero/glossary/easa/information-security-risk"
---

# information security risk

EASA defines “information security risk” in one regulation. The wording below is reproduced verbatim from the EASA Easy Access Rules, with a link to the paragraph it comes from.

> ‘information security risk’ means the risk to organisational civil aviation operations, assets, individuals, and other organisations due to the potential of an information security event. Information security risks are associated with the potential that threats will exploit vulnerabilities of an information asset or group of information assets;

Article 3 · Information Security (Part-IS) · Regulations (EU) 2023/203 and 2022/1645 · Easy Access Rules, 5 Dec 2025 revision · [Read Article 3](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/cover-regulation-to-implementing-regulation-eu#article-3)

## Defined in the same article

- [incident](https://avioverse.aero/glossary/easa/incident)
- [information security](https://avioverse.aero/glossary/easa/information-security)
- [information security event](https://avioverse.aero/glossary/easa/information-security-event)
- [Threat](https://avioverse.aero/glossary/easa/threat)
- [vulnerability](https://avioverse.aero/glossary/easa/vulnerability)