---
title: "ATM/ANS.OR.B.005A Information security management system — Part-ATM/ANS.OR · Avioverse"
description: "In addition to the management system referred to in point ATM/ANS.OR.B.005, the service provider shall establish, implement and maintain an information…"
url: "https://avioverse.aero/regulations/easa/atm-ans/annex-iii-common-requirements-for-service/subpart-b/atm-ans-or-b-005a"
---

# ATM/ANS.OR.B.005A Information security management system

ANNEX III COMMON REQUIREMENTS FOR SERVICE PROVIDERS (Part-ATM/ANS.OR) · Regulation (EU) 2017/373 · EAR revision 12 Mar 2025

IR Implementing rule

## ATM/ANS.OR.B.005A Information security management system

In addition to the management system referred to in point ATM/ANS.OR.B.005, the service provider shall establish, implement and maintain an information security management system in accordance with Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety.

\[applicable from 22 February 2026 - Regulation (EU) 2023/203]

IR · ATM/ANS.OR.B.005A — Regulation (EU) 2017/373 · Regulation (EU) 2023/203 · ATM/ANS Easy Access Rules · EAR revision 12 Mar 2025

[All rules in SUBPART B — MANAGEMENT (ATM/ANS.OR.B)](https://avioverse.aero/regulations/easa/atm-ans/annex-iii-common-requirements-for-service/subpart-b)

Consolidated from the EASA Easy Access Rules (revision 12 Mar 2025, extracted 13 Oct 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.