EASA Part-IS Information Security Management System: what you need to know
A five-hour Part-IS foundation for operational, technical, flight, IT/security and management personnel working within an aviation-safety-focused information security management system.
Overview
Built from Rotor Academy syllabus SYL-PARTIS-2DAY-2026-V2, this four-module course separates the IS.I.OR framework under Regulation (EU) 2023/203 from the IS.D.OR framework under Regulation (EU) 2022/1645. It covers scope and governance, aviation cybersecurity threat vectors, safety-relevant asset and risk assessment, proportionate protection, internal escalation, external reportability, containment, continuity and recovery. Every lesson uses a six-station learning sequence and an original training graphic. The final server-graded assessment confirms practical ISMS competence at an 80% pass mark. The 24-month period is Rotor Academy's certificate validity, not a universal Part-IS recurrent-training interval. Aligned with the December 2025 Easy Access Rules, including the amendments made to Regulation (EU) 2023/203 by Regulation (EU) 2025/2293.
Topics covered
- M1 - EASA Part-IS regulatory foundations & ISMS integration - First day: scope, management-system integration, governance, responsibilities and competence.
- M2 - Aviation cybersecurity threat landscape & attack vectors - First day: safety-relevant digital dependencies, technical attack paths, social engineering and physical access.
- M3 - Information security risk assessment & asset protection - Second day: identify safety-relevant assets, assess risk and apply proportionate protective measures.
- M4 - Incident detection, reporting & continuity - Second day: detect, escalate, assess reportability, contain, continue, recover and demonstrate competence.
Regulation references
Reg (EU) 2023/203, Reg (EU) 2022/1645, IS.I.OR.200, IS.I.OR.205, IS.I.OR.210, IS.I.OR.215, IS.I.OR.220, IS.I.OR.225, IS.I.OR.230, IS.I.OR.235, IS.I.OR.240, IS.I.OR.245, IS.I.OR.250, IS.I.OR.255, IS.I.OR.260, IS.D.OR.200, IS.D.OR.205, IS.D.OR.210, IS.D.OR.215, IS.D.OR.220, IS.D.OR.225, IS.D.OR.230, IS.D.OR.235, IS.D.OR.240, IS.D.OR.245, IS.D.OR.250, IS.D.OR.255, IS.D.OR.260, Reg (EU) 376/2014
Train with Rotor Academy
EASA Part-IS Information Security Management System - 5 hours online, with a verifiable certificate of completion.