---
title: "ADR.OR.D.005A Information security management system — Part-ADR.OR · Avioverse"
description: "The aerodrome operator shall establish, implement and maintain an information security management system in accordance with Delegated Regulation (EU)…"
url: "https://avioverse.aero/regulations/easa/aerodromes/organisation-requirements-part-adr-or/subpart-d/adr-or-d-005a"
---

# ADR.OR.D.005A Information security management system

ANNEX III — Organisation Requirements (Part-ADR.OR) · Regulation (EU) No 139/2014 · EAR revision 13 Mar 2026

IR Implementing rule

## ADR.OR.D.005A Information security management system

The [aerodrome operator](https://avioverse.aero/glossary/easa/aerodrome-operator) shall establish, implement and maintain an information security management system in accordance with Delegated Regulation (EU) 2022/1645 in order to ensure the proper management of information security risks which may have an impact on aviation safety.

IR · ADR.OR.D.005A — Regulation (EU) No 139/2014 · Delegated Regulation (EU) 2022/1645 · Aerodromes Easy Access Rules · EAR revision 13 Mar 2026

[All rules in SUBPART D — MANAGEMENT — AERODROME OPERATORS (ADR.OR.D)](https://avioverse.aero/regulations/easa/aerodromes/organisation-requirements-part-adr-or/subpart-d)

Consolidated from the EASA Easy Access Rules (revision 13 Mar 2026, extracted 13 Oct 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.