EASA Part-IS Deadline 22 Feb 2026 – What To Be Aware Of

With EASA Part-IS in force, many aviation organisations are asking the same question:

“We already have an Information Security Manual – part of the Safety Management System. Isn’t that enough?”

Short answer: No.

And here’s why:

What IS.I.OR.220 Really Requires for Compliance: Detection, Response, and Recovery

Translated into an organisation’s management system, IS.I.OR.220 means a company must:

• Know when something unusual happens in its systems that could affect aviation safety
• Have rules that decide which unusual events count as real security incidents
• Be ready with clear steps to tackle those incidents immediately
• Have a recovery plan so operations can be restored safely after an incident

Aero Compliance Solutions has developed a tool to make your organisation compliant with IS.I.OR.220. It’s not enough to write procedures measures must be implemented, tested, and maintained as part of the organisation’s ISMS (Information Security Management System)