ORA.GEN.200A Information security management system

ANNEX VII (Part-ORA) · Regulation (EU) No 1178/2011 · EAR revision 16 Oct 2026

Official sources: EASA Easy Access Rules (opens in a new tab) · EUR-Lex 2011/1178 (opens in a new tab)

IRImplementing rule

ORA.GEN.200AInformation security management system

In addition to the management system referred to in point ORA.GEN.200, the organisation shall establish, implement and maintain an information security management system in accordance with Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety.

IR · ORA.GEN.200A — Regulation (EU) No 1178/2011 · Regulation (EU) 2023/203 · Aircrew Easy Access Rules · EAR revision 16 Oct 2026

All rules in SUBPART GEN – GENERAL REQUIREMENTS

Consolidated from the EASA Easy Access Rules (revision 16 Oct 2026, extracted 2 Nov 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.

Ask Metis about ORA.GEN.200A →

Metis opens with Avioverse · request early access.