---
title: "145.A.200A Information security management system — Part-145 · Avioverse"
description: "In addition to the management system referred to in point 145.A.200, the maintenance organisation shall establish, implement and maintain an information…"
url: "https://avioverse.aero/regulations/easa/continuing-airworthiness/part-145/section-a-technical-and-organisation-requirements/145-a-200a"
---

# 145.A.200A Information security management system

Annex II (Part-145) · Regulation (EU) No 1321/2014 · EAR revision 2 Sep 2025

IR Implementing rule

## 145.A.200A Information security management system

In addition to the management system referred to in point 145.A.200, the [maintenance](https://avioverse.aero/glossary/easa/maintenance) [organisation](https://avioverse.aero/glossary/easa/organisation) shall establish, implement and maintain an information security management system in accordance with Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety.

\[Applicable from 22 February 2026 – Regulation (EU) 2023/203]

IR · 145.A.200A — Regulation (EU) No 1321/2014 · Regulation (EU) 2023/203 · Continuing Airworthiness Easy Access Rules · EAR revision 2 Sep 2025

[All rules in SECTION A — TECHNICAL AND ORGANISATION REQUIREMENTS](https://avioverse.aero/regulations/easa/continuing-airworthiness/part-145/section-a-technical-and-organisation-requirements)

Consolidated from the EASA Easy Access Rules (revision 2 Sep 2025, extracted 13 Oct 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.