---
title: "Implementing Regulation (EU) 2023/203 — Information Security (Part-IS) · Avioverse"
description: "Implementing Regulation (EU) 2023/203 of Information Security (Part-IS) (Regulations (EU) 2023/203 and 2022/1645): 3 subparts of implementing rules, AMC…"
url: "https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203"
---

EASA Easy Access Rules

# Implementing Regulation (EU) 2023/203

Information Security (Part-IS) Regulations (EU) 2023/203 and 2022/1645 3 subparts EAR revision 5 Dec 2025

Scope extract · [Article 1](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/cover-regulation-to-implementing-regulation-eu/article-1)

> This Regulation sets out the requirements to be met by the organisations and competent authorities in order: (a) to identify and manage information security risks with potential impact on aviation safety which could affect information and communication technology systems and data used for civil aviation purposes, (b) to detect information security events and identify those which are considered information security incidents with potential impact on aviation safety,

IR · Article 1 — Regulations (EU) 2023/203 and 2022/1645 · Regulation (EU) 2023/203 · Part-IS Easy Access Rules · EAR revision 5 Dec 2025

- [Cover Regulation to Implementing Regulation (EU) 2023/203 Article 1 – Article 16](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/cover-regulation-to-implementing-regulation-eu)
- [ANNEX I — INFORMATION SECURITY — AUTHORITY REQUIREMENTS \[PART-IS.AR\] IS.AR.100 – IS.AR.235](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/annex-i-information-security-authority)
- [ANNEX II — INFORMATION SECURITY — ORGANISATION REQUIREMENTS \[PART-IS.I.OR\] IS.I.OR.100 – IS.I.OR.260](https://avioverse.aero/regulations/easa/part-is/implementing-regulation-eu-2023-203/annex-ii-information-security-organisation)