EASA Part-IS - Information Security in Aviation
What is EASA Part-IS - Information Security in Aviation?
EASA (European Union Aviation Safety Agency) Part‑IS (Information Security) regulation establishes mandatory information security requirements for aviation organisations. It requires the implementation of an Information Security Management System (ISMS) aligned with ISO/IEC 27001, covering 15 security domains and 34 controls, to protect the confidentiality, integrity and availability of aviation‑related information. It comprises 34 controls organised across 3 domains, and applies in the European Union.
How EASA Part-IS - Information Security in Aviation maps to other frameworks
All 34 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 3 domains EASA Part-IS - Information Security in Aviation groups its controls into
Frameworks that share controls with EASA Part-IS - Information Security in Aviation
Each of these has at least one control mapped to a control in EASA Part-IS - Information Security in Aviation. The number is how many EASA Part-IS - Information Security in Aviation controls are shared, counted from the mapping graph.
South Korea ISMS-P
9 shared controlsNRF Cybersecurity and Data Privacy Framework (National Retail Federation)
8 shared controlsNIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security
8 shared controlsNERC CIP
8 shared controlsMTCS (Singapore)
8 shared controlsISO 27019
8 shared controlsSOC for Cybersecurity - Cybersecurity Risk Management Examination
8 shared controlsSSAE 18 - Attestation Standards (SOC Reporting)
8 shared controlsWhere EASA Part-IS - Information Security in Aviation overlaps with the standards you already hold
Where to get trained on EASA Part-IS - Information Security in Aviation
One course in the catalogue covers EASA Part-IS - Information Security in Aviation directly. Each is self-paced, includes the downloadable toolkit and the implementation playbook, and carries a certificate of completion.
Training more than one person? Ten seats of any course is $1,490 on a single licence, against $199 a seat bought one at a time.
What an auditor will ask you for
All 34 EASA Part-IS - Information Security in Aviation controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the EASA Part-IS - Information Security in Aviation evidence request listWhat EASA Part-IS - Information Security in Aviation means in your sector
What EASA Part-IS - Information Security in Aviation means for your job
Questions people ask about EASA Part-IS - Information Security in Aviation
What is EASA Part-IS - Information Security in Aviation?
How many controls does EASA Part-IS - Information Security in Aviation have?
Where does EASA Part-IS - Information Security in Aviation apply?
What frameworks does EASA Part-IS - Information Security in Aviation map to?
How do I get started with EASA Part-IS - Information Security in Aviation compliance?
Query EASA Part-IS - Information Security in Aviation programmatically
EASA Part-IS - Information Security in Aviation, its 34 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
EASA Part-IS - Information Security in Aviation API reference and MCP config →What EASA Part-IS - Information Security in Aviation requires, control by control
Each page carries the requirement text for one EASA Part-IS - Information Security in Aviation control and what an assessor expects to see as evidence.
- IS-AR-210 Findings and Corrective Actions
- IS-AR-215 Information Security Incident Response
- IS-D-OR-200 Information Security Management System
- IS-D-OR-205 Information Security Risk Assessment
- IS-D-OR-210 Information Security Risk Treatment
- IS-D-OR-220 Information Security Risk Management Process
- IS-D-OR-225 External Reporting of Information Security Events
- IS-I-OR-110 Cryptographic Controls
- IS-I-OR-200 Information Security Management System
- IS-I-OR-205 Information Security Risk Assessment
How ready are you for EASA Part-IS - Information Security in Aviation?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.