Home › Aviation Training › EASA Part-IS Cybersecurity

EASA Part-IS Information Security Training

Understand the new EASA Part-IS requirements and how to manage information security and cyber risks in your aviation organisation.

E-learningLive videoOn-siteBlendedEN

Cybersecurity

Course overview

Part-IS (Information Security) is the EASA regulation that requires aviation organisations to protect civil aviation against information security and cyber risks. It applies to most approved organisations, including Part-145, Part-CAMO, Part-21 and air operators.

The course explains the Part-IS framework, cyber risk management in aviation and how to integrate information security into the safety management system, with concrete aviation examples.

Key facts

Duration, formats and assessment

Duration

About 2 hours 20 minutes online, with videos and a final quiz.

Self-paced, available 24/7.

Formats

E-learning on aero-consulting-online.com (individual access, 24/7).

On-site, live video or blended sessions to train your staff on site or remotely.

Teaching methods

Theory illustrated with concrete examples.

Case studies from the aviation sector.

Digital materials provided.

Assessment

Final quiz: 15 multiple-choice questions.

80% correct answers required.

Certificate

Personal PDF certificate on completion.

Certificates are signed by our lead instructor, Alain François, an aviation quality professional with 25+ years of experience who has held Part-145 certifying staff authorisations.

Price

€60 per learner (e-learning).

Companies and groups: quote on request, volume discounts.

Learning objectives

On completion of the course, participants will be able to:

  • Understand the EASA Part-IS framework and its links with Part-145, Part-CAMO, Part-21 and other regulations.
  • Identify the roles and responsibilities of authorities and organisations.
  • Implement policies and procedures for the secure management of sensitive information and critical systems.
  • Apply information security and cybersecurity requirements to ensure compliance and resilience.
  • Integrate information security management into the SMS and daily operations.
  • Demonstrate compliance during audits and inspections.

Why Part-IS training?

Part-IS is a new regulatory obligation for EASA-approved organisations. Each organisation must set up an information security management system, assess its cyber risks and make sure its staff are aware of their role.

Training staff is one of the first steps to show the authority that the system is in place and understood. This course gives a clear, practical overview for managers and staff.

Course content

EASA regulations

Introduction to EASA rules and the Part structure.

Part-IS requirements

Principles, objectives and key requirements.

Cyber risk management

Information security risk management in aviation organisations.

SMS integration

Integrating information security into the safety management system.

Audit and compliance

Demonstrating effective implementation and continuous improvement.

Final quiz

15 multiple-choice questions, then your certificate.

Who should attend and prerequisites

The course is for staff of organisations subject to Part-IS:

  • Quality, safety and compliance managers (Part-145, Part-CAMO, Part-21, air operators).
  • IT managers and CIOs involved in aviation cybersecurity.
  • Auditors, authority inspectors and civil aviation inspectors.
  • Engineers and managers who need to understand the link between aviation regulations and information security.

Prerequisites: basic knowledge of the EASA regulatory framework and of quality or safety management systems.

FAQ – EASA Part-IS Cybersecurity

What is EASA Part-IS?

Part-IS is an EASA regulation aimed at protecting civil aviation against information security and cyber risks. It requires aviation organisations to implement an information security management system.

Who is this training for?

Staff of organisations subject to Part-IS: air operators, maintenance and CAMO organisations, design and production organisations, service providers, management and support functions exposed to cyber risks.

How long does the course take?

About 2 hours 20 minutes, at your own pace.

How is the certificate issued?

After passing the final quiz (15 questions, 80% correct answers), your personal certificate can be downloaded as a PDF.

Training a team?

Tell us the number of participants, the format and your preferred dates: we will send you a proposal within 48 hours. Volume discounts on request.

Training organisation registered in France – NDA 76 34 15133 34

Version imprimable | Plan du site
© Aero Consulting – Conseil, audit et formation en réglementation aéronautique EASA depuis 2005. France, Europe, États-Unis, Afrique, Océanie. Tél. +33 (0)6 19 35 38 81