21 July 2023: Part-IS provisions will be applicable from 16 October 2025 for those organisations in the scope of the delegated act and from 22 February 2026 for all other organisations and competent authorities covered in the implementing act. The regulations have to developed to safeguard the civil aviation system against potential safety effects caused by cyberattacks.

Following a period of consultation, including a workshop held in March, EASA has now published Acceptable Means of Compliance and Guidance Material (AMC and GM) to assist organisations and Member States in complying with the Part-IS regulatory package contained in delegated regulation (EU) 2022/1645 and implementing regulation (EU) 2023/203.

The AMC and GM to Part-IS consists of three documents issued with different ED Decisions (ED Decision 2023/00/R, ED Decision 2023/009/R and ED Decision 2023/010/R)

All documents can be accessed via EASA’s website here [1].

At the last Air Safety Group, this topic was discussed extensively, and a follow up will be held with EASA experts at the next group meeting towards the end of the year.

In case of questions, please contact nick.rhodes@eraa.org [2]