Preparing for EASA Part-IS Compliance

At Air Worthy, we’re committed to maintaining the highest standards of safety, security, and regulatory compliance.

European Centre for Cybersecurity in Aviation (ECCSA)

Air Worthy has been accepted as a member of ECCSA, which is a voluntary, co-operative partnership within the aviation community, that was established in 2017 to better understand the emerging cybersecurity risks in aviation. Its mission is to provide collective support in dealing with cybersecurity issues, incidents, risks and unauthorised interactions, which could potentially affect the sector’s resilience and safety.

In preparation for the upcoming EASA Part-IS regulation for Continuous Airworthiness Maintenance Organisations (CAMO), which becomes effective in February 2026, our team has already begun the process to ensure full compliance, well ahead of schedule.

A special mention goes to our team members Lucia and Camilla, who are leading this important transition, which involves reviewing requirements, updating procedures, and aligning our systems to meet the new information security standards.

Their proactive work reflects Air Worthy’s ongoing dedication to continuous improvement and regulatory excellence across all our operations.

EASA Part-IS is a new European Union Aviation Safety Agency (EASA) regulation for Information Security, which establishes mandatory rules for managing cybersecurity risks in aviation. It aims to protect aviation safety by creating a structured framework for organizations to detect, respond to, and recover from information security incidents, and it treats information security with the same importance as other traditional safety domains.

EASA Part-IS is made up of 2 major EU Regulations, and because of this there are different applicability dates for different types of organisations.

The Delegated Regulation (officially Regulation (EU) 2022/1645) applies to Airports, Design Organisations and Production Organisations. This becomes applicable on 16 October 2025.

The Implementing Regulation (officially Regulation (EU) 2023/203) applies to National Authorities, Aircraft Operators, Continuous Airworthiness Maintenance Organisations (CAMO), Approved Training Organisations (ATO), Aero Medical Examiners (AME), Maintenance organisations under Part-145, Air Navigation Service Providers (ANSP). This becomes applicable on 22 February 2026.