Part-IS Familiarisation Training for Cybersecurity

About this Course

This EASA-approved course delivers structured foundation training on the information security risks that may affect aviation safety under the European Part-IS framework. It is designed for aviation organisations and the personnel required to understand, recognise and respond to these risks.

Content is aligned with Commission Delegated Regulation (EU) 2022/1645 and Commission Implementing Regulation (EU) 2023/203, and is structured to support documented training evidence and competent-authority oversight readiness. Delivered as self-paced eLearning, it is suitable for both technical and non-technical roles, with practical aviation scenarios and plain-language delivery.

What You Will Learn

• The cybersecurity risk landscape in civil aviation and the increasing digital dependencies of aviation operations
• The EASA Part-IS regulatory framework: scope, applicability and its link to Regulations (EU) 2022/1645 and (EU) 2023/203
• The role of an Information Security Management System (ISMS) and its coordination with the Safety Management System (SMS)
• Identification of safety-relevant assets, risk assessment, the concept of unacceptable risk and security controls
• The principles of cybersecurity event and incident reporting, escalation and competent authority involvement
• Third-party risks, personnel trustworthiness and competence, and human factors in aviation cybersecurity

Course Structure 5 modules

Who It Is For

The course is intended for civil aviation organisations and their personnel under Part-IS: air operators, ANSP/ATM providers, aerodromes and airport operators, CAMO and MRO/Part-145 organisations. It addresses management and accountable managers, technical staff and compliance, safety, security and IT personnel alike, and is suitable for both technical and non-technical roles.