EASA Part-IS - Information Security in Aviation
Annex Part-IS.D.OR: organisation requirements under Delegated Regulation (EU) 2022/1645 – EASA Part-IS - Information Security in Aviation

EASA Part-IS - Information Security in Aviation IS.D.OR.250: Information security management manual (ISMM)

What does IS.D.OR.250 require?

As IS.I.OR.250: an ISMM made available to the competent authority containing the signed statement of the accountable manager or head of the design organisation (countersigned by the CEO if different), the responsible persons and any common responsible person with their duties and authorities, the policy, the staffing description, the key persons including the compliance monitoring manager, the organisation chart, the internal reporting scheme, the compliance procedures including the 200(c) documentation, the control of contracted activities and the amendment procedure, and the approved alternative means of compliance; initial approval and retained copy by the authority (not required for declaring organisations), amendments to stay current with copies to the authority, authority approval of amendments outside the procedure or tied to 255(b) changes except for declaring organisations, and integration with other expositions on clear cross-reference.

Maintained by Gerard BlokdykControl text last updated

Other controls in Annex Part-IS.D.OR: organisation requirements under Delegated Regulation (EU) 2022/1645 – EASA Part-IS - Information Security in Aviation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.