Aviation · EU
EASA Part-IS
Aviation organisations in the EU must run an information security management system and report incidents.
ForHeads of information security at airlines, airports, maintenance and design organisations in the EU.
What’s changing, and when
Organisations covered by Delegated Regulation (EU) 2022/1645, including design and production organisations and aerodromes, have had to comply since 16 October 2025. The requirements for authorities and the other approved organisations apply from 22 February 2026. Ground handling organisations come into scope on 27 March 2031.
- Oct 2025 Design, production and aerodrome organisations comply
- Feb 2026 Authorities and other approved organisations comply
- Mar 2031 Ground handling organisations in scope
Why it can’t happen in one step
Information security risks run across aircraft, systems and partners, and each organisation has to build, test and mature its management system over successive audits.
How Polymonial carries you across
- Reports reach only the authorities entitled to them.
- Security records that cannot be quietly changed.
- Move to stronger protection without disrupting operations.
Trust that travels.
Secure, trusted and under your control.