145.A.200A Information security management system

Annex II (Part-145) · Regulation (EU) No 1321/2014 · EAR revision 2 Sep 2025

IRImplementing rule

145.A.200AInformation security management system

In addition to the management system referred to in point 145.A.200, the maintenance organisation shall establish, implement and maintain an information security management system in accordance with Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety. [Applicable from 22 February 2026 – Regulation (EU) 2023/203]

IR · 145.A.200A — Regulation (EU) No 1321/2014 · Regulation (EU) 2023/203 · Continuing Airworthiness Easy Access Rules · EAR revision 2 Sep 2025

All rules in SECTION A — TECHNICAL AND ORGANISATION REQUIREMENTS

Consolidated from the EASA Easy Access Rules (revision 2 Sep 2025, extracted 17 Aug 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.

Ask Metis about 145.A.200A →

Metis opens with Avioverse in October 2026 · request early access.