🛡️ EASA Part-IS Deadline: Compliance for AOC Holders, CAMOs, ANSPs & More by 22 February 2026

What is Happening by 22 February 2026?

The European Union Aviation Safety Agency (EASA) has set 22 February 2026 as the compliance deadline for the second wave of aviation organisations under EASA Part‑IS regulations. This includes:

• AOC Holders (Air Operators)
• CAMOs (Continuing Airworthiness Management Organisations)
• ANSPs (Air Navigation Service Providers)
• ATOs (Approved Training Organisations)
• Competent authorities and other critical aviation bodies

By this date, all affected organisations must have implemented a fully functional Information Security Management System (ISMS) aligned with Part-IS requirements.

What Does Compliance Mean?

To comply with EASA Part‑IS, organisations must establish a robust ISMS that:

• Identifies and manages information security risks
• Integrates into the organisation’s existing safety and compliance frameworks (e.g., SMS)
• Includes governance structures, policies, and response mechanisms
• Ensures continuous monitoring, training, and internal auditing

This regulation enhances aviation cyber-resilience by ensuring that safety is not only physical, but also digital.

Are You Ready?

While many aviation businesses have systems in place to manage physical safety, digital security risks remain a growing threat. Non-compliance after 22 February 2026 may result in operational penalties or failed audits, potentially grounding operations or damaging trust.

Link to Earlier Deadline – 16 October 2025

If your organisation is an Airport, Design Organisation, or Production Organisation, your earlier deadline remains 16 October 2025. Learn more about that deadline and how it differs here:
👉 EASA Part‑IS Compliance Due by 16 Oct 2025

Start preparing now. Whether you’re an air carrier, training organisation, or airworthiness manager, implementing ISMS is not just a compliance step—it’s a strategic move toward secure, resilient aviation operations.