ORA.GEN.200A Information security management system

ANNEX VII (Part-ORA) · Regulation (EU) No 1178/2011 · EAR revision 25 Nov 2025

IRImplementing rule

ORA.GEN.200AInformation security management system

In addition to the management system referred to in point ORA.GEN.200, the organisation shall establish, implement and maintain an information security management system in accordance with Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety. [applicable from 22 February 2026 — Implementing Regulation (EU) 2023/203]

IR · ORA.GEN.200A — Regulation (EU) No 1178/2011 · Regulation (EU) 2023/203 · Aircrew Easy Access Rules · EAR revision 25 Nov 2025

All rules in SUBPART GEN – GENERAL REQUIREMENTS

Consolidated from the EASA Easy Access Rules (revision 25 Nov 2025, extracted 17 Aug 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.

Ask Metis about ORA.GEN.200A →

Metis opens with Avioverse in October 2026 · request early access.