EASA Part-IS Information Security Management System

A five-hour Part-IS foundation for operational, technical, flight, IT/security and management personnel working within an aviation-safety-focused information security management system.

  • Authority: EASA
  • Duration: 5 hours
  • CPD: 5 hours
  • Price: €80
  • Language: en
  • Online, self-paced, with a verifiable certificate of completion

About this course

Built from Rotor Academy syllabus SYL-PARTIS-2DAY-2026-V2, this four-module course separates the IS.I.OR framework under Regulation (EU) 2023/203 from the IS.D.OR framework under Regulation (EU) 2022/1645. It covers scope and governance, aviation cybersecurity threat vectors, safety-relevant asset and risk assessment, proportionate protection, internal escalation, external reportability, containment, continuity and recovery. Every lesson uses a six-station learning sequence and an original training graphic. The final server-graded assessment confirms practical ISMS competence at an 80% pass mark. The 24-month period is Rotor Academy's certificate validity, not a universal Part-IS recurrent-training interval. Aligned with the December 2025 Easy Access Rules, including the amendments made to Regulation (EU) 2023/203 by Regulation (EU) 2025/2293.

Syllabus

Module 1: M1 - EASA Part-IS regulatory foundations & ISMS integration

First day: scope, management-system integration, governance, responsibilities and competence.

  • Scope of part is
  • Isms governance roles and competency

Module 2: M2 - Aviation cybersecurity threat landscape & attack vectors

First day: safety-relevant digital dependencies, technical attack paths, social engineering and physical access.

  • Operational technology and it vulnerabilities
  • Social engineering phishing and physical security

Module 3: M3 - Information security risk assessment & asset protection

Second day: identify safety-relevant assets, assess risk and apply proportionate protective measures.

  • Critical assets and cia
  • Protection measures and secure operations

Module 4: M4 - Incident detection, reporting & continuity

Second day: detect, escalate, assess reportability, contain, continue, recover and demonstrate competence.

  • Detection and reportability
  • Incident containment and operational continuity
  • Final exam part is isms

Regulation references

Reg (EU) 2023/203, Reg (EU) 2022/1645, IS.I.OR.200, IS.I.OR.205, IS.I.OR.210, IS.I.OR.215, IS.I.OR.220, IS.I.OR.225, IS.I.OR.230, IS.I.OR.235, IS.I.OR.240, IS.I.OR.245, IS.I.OR.250, IS.I.OR.255, IS.I.OR.260, IS.D.OR.200, IS.D.OR.205, IS.D.OR.210, IS.D.OR.215, IS.D.OR.220, IS.D.OR.225, IS.D.OR.230, IS.D.OR.235, IS.D.OR.240, IS.D.OR.245, IS.D.OR.250, IS.D.OR.255, IS.D.OR.260, Reg (EU) 376/2014

All courses