Blog

Sofema Aviation Services considers key aspects of Information & Cyber Security Management, since EASA is mandating Aviation Information and Cyber Security Regulations. Cyber threats pose a significant risk to aviation safety, operational continuity, and compliance with international standards.While organizations are responsible for managing their security risks, a regulatory framework ensures a harmonized, risk-based, and proactive…

Sofema Aviation Services (SAS) considers the challenges related to phishing, ransomware, data breaches, and insider threat exposures (both intentional and accidental) within the context of EASA Part 145 organizations, together with a high-level mitigation review. Introduction The European Union Aviation Safety Agency (EASA) mandates comprehensive management of information security risks in aviation to safeguard operations,…

Sofema Aviation Services (SAS) considers key elements related to Cyber Security Compliance within an EASA Part 145 Organizations Regulation (EU) 2023/203 was introduced to establish a framework for managing information security risks within the aviation sector, particularly focusing on their potential impact on aviation safety. Note – EASA Part 145 Organizations have until 22 February…

Sofema Aviation Services (SAS) www.sassofia.com considers the changes to be introduced to comply with Regulation (EU) 2023/203 affecting EASA Part 145 organizations and specifically targeting information security management requirements Introduction – Key changes include: Mandatory Information Security Management System (ISMS): Part 145 organizations must establish, implement, and maintain an ISMS to manage information security risks that…