information security risk

EASA defines “information security risk” in one regulation. The wording below is reproduced verbatim from the EASA Easy Access Rules, with a link to the paragraph it comes from.

‘information security risk’ means the risk to organisational civil aviation operations, assets, individuals, and other organisations due to the potential of an information security event. Information security risks are associated with the potential that threats will exploit vulnerabilities of an information asset or group of information assets;

Article 3 · Information Security (Part-IS) · Regulations (EU) 2023/203 and 2022/1645 · Easy Access Rules, 5 Dec 2025 revision · Read Article 3

Defined in the same article

incident
information security
information security event
Threat
vulnerability

Ask Metis where information security risk applies to you →

Metis opens with Avioverse in October 2026 · request early access.