EASA Part-IS - Information Security in Aviation
Annex Part-IS.D.OR: organisation requirements under Delegated Regulation (EU) 2022/1645 – EASA Part-IS - Information Security in Aviation

EASA Part-IS - Information Security in Aviation IS.D.OR.240: IS.D.OR.240 Personnel requirements

As IS.I.OR.240 with the design-organisation variant: the accountable manager designated under Part 21 or Part-ADR.OR or, for design organisations, the head of the design organisation, has corporate authority to finance and carry out the activities, ensures resources, establishes and promotes the policy and shows a basic understanding of the Regulation; appoints a person or group reporting directly to them, with defined authority and appropriate knowledge, background and experience, to ensure compliance, with deputies for lengthy absence; appoints the compliance monitoring manager; may delegate to a common responsible person where structures are shared, with coordination measures; and the organisation has processes for sufficient personnel on duty, competence, acknowledgement of responsibilities, and the identity and trustworthiness of personnel with access to systems and data in scope.

Maintained by Gerard BlokdykControl text last updated

Other controls in Annex Part-IS.D.OR: organisation requirements under Delegated Regulation (EU) 2022/1645 – EASA Part-IS - Information Security in Aviation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.