---
title: "Information Security (Part-IS) — Regulations (EU) 2023/203 and 2022/1645 · Avioverse"
description: "Browse Information Security (Part-IS) (Regulations (EU) 2023/203 and 2022/1645): implementing rules, AMC and GM with the official reference on every…"
url: "https://avioverse.aero/regulations/easa/part-is"
---

EASA Easy Access Rules

# Information Security (Part-IS)

Regulations (EU) 2023/203 and 2022/1645 324 paragraphs EAR revision 5 Dec 2025

Scope extract · [Article 1](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/cover-regulation-to-implementing-regulation-eu/article-1)

> This Regulation sets out the requirements to be met by the organisations and competent authorities in order: (a) to identify and manage information security risks with potential impact on aviation safety which could affect information and communication technology systems and data used for civil aviation purposes, (b) to detect information security events and identify those which are considered information security incidents with potential impact on aviation safety,

IR · Article 1 — Regulations (EU) 2023/203 and 2022/1645 · Regulation (EU) 2023/203 · Part-IS Easy Access Rules · EAR revision 5 Dec 2025

## [Cover Regulation](https://avioverse.aero/regulations/easa/part-is/cover-regulation)

1 subpart

- [General provisions 1 paragraphs](https://avioverse.aero/regulations/easa/part-is/cover-regulation/general)

## [Implementing Regulation (EU) 2023/203](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203)

3 subparts

- [Cover Regulation to Implementing Regulation (EU) 2023/203 Article 1 – Article 16](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/cover-regulation-to-implementing-regulation-eu)
- [ANNEX I — INFORMATION SECURITY — AUTHORITY REQUIREMENTS \[PART-IS.AR\] IS.AR.100 – IS.AR.235](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/annex-i-information-security-authority)
- [ANNEX II — INFORMATION SECURITY — ORGANISATION REQUIREMENTS \[PART-IS.I.OR\] IS.I.OR.100 – IS.I.OR.260](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/annex-ii-information-security-organisation)

## [Delegated Regulation (EU) 2022/1645](https://avioverse.aero/regulations/easa/part-is/delegated-regulation-eu-2022-1645)

2 subparts

- [Cover Regulation to Delegated Regulation (EU) 2022/1645 Article 1 – Article 8](https://avioverse.aero/regulations/easa/part-is/delegated-regulation-eu-2022-1645/cover-regulation-to-delegated-regulation-eu-2022)
- [ANNEX — INFORMATION SECURITY — ORGANISATION REQUIREMENTS \[PART-IS.D.OR\] IS.D.OR.100 – IS.D.OR.260](https://avioverse.aero/regulations/easa/part-is/delegated-regulation-eu-2022-1645/annex-information-security-organisation)

Consolidated from the EASA Easy Access Rules (revision 5 Dec 2025, extracted 13 Oct 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.