Academy

Context

Information security (IS) is a critical component in modern aviation operations, focussing on protecting information assets from unauthorised access, use, disclosure, disruption, modification, or destruction.

This training course provides comprehensive coverage of EASA Part-IS requirements, risk management approaches, and practical implementation strategies. Participants will learn about current threats, security controls, and best practices for maintaining the confidentiality, integrity, and availability of aviation-related information systems.

Training items

D1: Regulatory environment & background

• Introduction to information security in aviation.
• Regulatory framework and EASA requirements.
• IS risk assessment.

D2: Information security management

• IS controls & implementation.
• IS Incident response and management.
• IS monitoring and reporting.

D3: Business continuity & practical applications

• Business continuity & recovery.
• IS awareness & training programmes.
• Practical exercises & case studies.

Training objectives

• Understanding EASA IS regulatory framework & its significance for aviation safety
• Explaining the requirements for managing IS risks & implementing them within an aeronautical service provider.

Administration

• Duration: 3 days.
• Deliverables: All participants will receive a certificate of attendance.

Perspective participants

• Managers/officers responsible for safety management and compliance monitoring.

Prerequisites

No specific prior knowledge is required to attend this course.