66.B.15 Information security management system

Annex III (Part-66) · Regulation (EU) No 1321/2014 · EAR revision 2 Sep 2025

IRImplementing rule

66.B.15Information security management system

The competent authority shall establish, implement and maintain an information security management system in accordance with Annex I (Part-IS.AR) to Implementing Regulation (EU) 2023/203 in order to ensure the proper management of information security risks which may have an impact on aviation safety. [Applicable from 22 February 2026 – Regulation (EU) 2023/203]

IR · 66.B.15 — Regulation (EU) No 1321/2014 · Regulation (EU) 2023/203 · Continuing Airworthiness Easy Access Rules · EAR revision 2 Sep 2025

All rules in SECTION B — PROCEDURES FOR COMPETENT AUTHORITIES

Consolidated from the EASA Easy Access Rules (revision 2 Sep 2025, extracted 17 Aug 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.

Ask Metis about 66.B.15 →

Metis opens with Avioverse in October 2026 · request early access.