Cover Regulation to Implementing Regulation (EU) 2023/203
Implementing Regulation (EU) 2023/203 · Information Security (Part-IS) · Regulations (EU) 2023/203 and 2022/1645 · Article 1 – Article 16
On this page
Powers and recitals
THE EUROPEAN COMMISSION, Having regard to the Treaty on the Functioning of the European Union, Having regard to Regulation (EU) 2018/1139 of the European…
Article 1 Subject matter
This Regulation sets out the requirements to be met by the organisations and competent authorities in order:
Article 2 Scope
This Regulation applies to the following organisations: maintenance organisations subject to Section A of Annex II (Part-145) to Regulation (EU) No…
Article 3 Definitions
For the purpose of this Regulation, the following definitions shall apply:
Article 4 Requirements for organisations and competent authorities
The organisations referred to in Article 2(1) shall comply with the requirements of Annex II (PartIS.I.OR) to this Regulation.
Article 5 Requirements arising from other Union legislation
Where an organisation referred to in Article 2(1) complies with security requirements laid down in accordance with Article 14 of Directive (EU) 2016/1148…
GM1 Article 5(1) Requirements arising from other Union legislation
Pursuant to Article 44 of Directive (EU) 2022/2555 (the NIS 2 Directive), the previous Directive (EU) 2016/1148 (the NIS Directive) was repealed with…
GM1 Article 5(2) Requirements arising from other Union legislation
Even though the provisions in Regulation (EU) 2023/203 are equivalent to the cybersecurity requirements in point 1.7 of the Annex to Regulation (EU)…
Article 6 Competent authority
Without prejudice to the tasks entrusted to the Security Accreditation Board (SAB) referred to in Article 36 of Regulation (EU) 2021/696, the authority…
Article 7 Submission of relevant information to NIS competent authorities
Competent authorities under this Regulation shall inform, without undue delay, the single point of contact designated in accordance with Article 8 of…
Article 8 Amendment to Regulation (EU) No 1178/2011
Annexes VI (Part-ARA) and VII (Part-ORA) to Regulation (EU) No 1178/2011 are amended in accordance with Annex III to this Regulation.
Article 9 Amendment to Regulation (EU) No 748/2012
Annex I (Part 21) to Regulation (EU) No 748/2012 is amended in accordance with Annex IV to this Regulation.
Article 10 Amendment to Regulation (EU) No 965/2012
Annexes II (Part-ARO) and III (Part-ORO) to Regulation (EU) No 965/2012 are amended in accordance with Annex V to this Regulation.
Article 11 Amendment to Regulation (EU) No 139/2014
Annex II (Part-ADR.AR) to Regulation (EU) No 139/2014 is amended in accordance with Annex VI to this Regulation.
Article 12 Amendment to Regulation (EU) No 1321/2014
Annexes II (Part-145), III (Part-66) and Vc (Part-CAMO) to Regulation (EU) No 1321/2014 are amended in accordance with Annex VII to this Regulation.
Article 13 Amendment to Regulation (EU) 2015/340
Annexes II (Part ATCO.AR) and III (Part ATCO.OR) to Regulation (EU) 2015/340 are amended in accordance with Annex VIII to this Regulation.
Article 14 Amendment to Regulation (EU) 2017/373
Annexes II (Part-ATM/ANS.AR) and III (Part-ATM/ANS.OR) to Regulation (EU) 2017/373 are amended in accordance with Annex IX to this Regulation.
Article 15 Amendment to Regulation (EU) 2021/664
For the consolidated version of Regulation (EU) 2021/664, please refer to the Easy Access Rules for U-space (Regulation (EU) 2021/664).
Article 16
This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
Consolidated from the EASA Easy Access Rules (revision 5 Dec 2025, extracted 17 Aug 2026) for convenience. Not the official publication — verify against the Official Journal of the European Union and the EASA publications before operational use.
Metis opens with Avioverse in October 2026 · request early access.