Aerospace Garage

Upskill / Aviation Standards and Regulations / Aviation information security: Part-IS in practice

Aviation information security: Part-IS in practice

How EU Part-IS, ICAO Annex 17 and the airworthiness security rules make information security part of aviation safety, with practical steps for risk assessment, incident reporting, suppliers and people

By Aerospace Garage Desk · Practitioner · 50 minutes · 24 narrated pages · Updated October 2026

What you will be able to do

  • ✓ Explain why the integrity and availability of information and systems are now aviation safety concerns, and name the ICAO foundations.
  • ✓ Identify which organisations and authorities Part-IS covers, from which dates, and when exclusions, derogations or equivalence apply.
  • ✓ Build and run an information security management system: risk assessment, treatment, personnel, contractors and records.
  • ✓ Detect, respond to and report information security incidents under Part-IS, and recognise when NIS2 reporting also applies.
  • ✓ Explain how aircraft designs are protected under CS 25.1319, AMC 20-42, the ED-202A family and FAA rulemaking.
  • ✓ Manage supplier risk, build awareness and a just reporting culture, and apply the rules from a UAE perspective.

Course content

Session 1 · Why information security is now a safety matter

1.1

  1. An industry that runs on data · free preview
  2. When data becomes a safety issue
  3. The international foundations
  4. Worked example: four events, one question
Session 2 · Part-IS: who, what and when

1.2

  1. Two regulations, one framework
  2. Who is in, who is out
  3. Guidance, oversight and the regulator's own duties
  4. Worked example: one group, six approvals
Session 3 · Building the information security management system

1.3

  1. The shape of an information security management system
  2. Assessing and treating risk
  3. People, contractors and records
  4. Worked example: rating one risk on the task card system
Session 4 · Detect, respond and report

1.4

  1. Seeing events early
  2. Responding and recovering
  3. Telling the right people
  4. From the investigation file: the UK flight plan system failure, August 2023
Session 5 · Airworthiness security in aircraft design

1.5

  1. Security as a certification requirement
  2. The industry method: ED-202A and its family
  3. The FAA route and the operator's role
  4. Worked example: assessing a cabin connectivity change
Session 6 · Suppliers, people and the wider world

1.6

  1. Trusting the supply chain
  2. People: awareness, phishing and culture
  3. Just culture and the view from the UAE
  4. Worked example: ranking and contracting three suppliers

Who this course is for

Upskill courses are for professional development and are not approved by any aviation authority. Learner Terms

Course content © Aerospace Garage Limited. All rights reserved.