Article 1 Subject matter

This Regulation sets out the requirements to be met by the organisations and competent authorities in order:

(a)to identify and manage information security risks with potential impact on aviation safety which could affect information and communication technology systems and data used for civil aviation purposes,

(b)to detect information security events and identify those which are considered information security incidents with potential impact on aviation safety,

(c)to respond to, and recover from, those information security incidents.