Introduction
As the aviation industry becomes increasingly digitalized, cybersecurity and information security have emerged as critical regulatory priorities. Regulation (EU) 2023/203 mandates that EASA Part 145 organizations establish an Information Security Management System (ISMS) to ensure compliance by February 2026.
This 1-day intensive training provides a practical approach to complying with Regulation (EU) 2023/203, equipping aviation maintenance professionals with the knowledge and skills necessary to manage information security risks in EASA Part 145 organizations.
Who is the course for
This training is suitable for Accountable Managers & Nominated Post Holders, Safety, Compliance & Quality Managers, IT & Cybersecurity Specialists in MROs, Maintenance, Repair & Overhaul (MRO) Engineers & Managers, Procurement, Supply Chain & Vendor Management Professionals, and Regulatory Compliance Officers & Auditors.
What is the Benefit of this Training – What will I learn?
- Regulatory Compliance: Gain a clear understanding of EASA Part 145 information and cyber security requirements, ensuring your organization meets the necessary standards.
- Risk Management: Learn how to identify and assess cyber risks specific to aviation, strengthening your organization’s overall security posture.
- Practical Implementation: Understand how to implement an Information Security Management System (ISMS) compliant with EASA standards.
- Enhanced Security: Improve internal and external security reporting practices, helping safeguard sensitive aviation data and prevent cyber threats.
Detailed Content / Topics – The following Subjects will be addressed
Why Are We Seeing EASA Mandated Regulations related to Information Security and Cyber Security – What will This mean for European Aviation?
General Introduction – Part 145 Information Security
Regulatory Drivers for Information Security – EASA Part 145
EASA Part 145 Information Security Duties, Accountabilities, Responsibilities Compliant with IS.I.OR.240
The Potential for Information Security / Cyber Exposure in Aircraft Maintenance
Identifying and Assessing Cyber Risks within EASA Part 145 Organizations
Information Security Reporting Criteria – External & Internal
Information & Cyber Security – Structured Risk Assessment
Considerations Implementing an ISMS in an EASA-Compliant Part 145
Organization Review Discussion & Close
Pre-requisites
The pre-requisites for this training include a basic understanding of EASA Part 145 regulations, foundational cybersecurity concepts, and experience in aviation maintenance or regulatory compliance.
Target Groups
The target groups for this training include Accountable Managers, Safety and Compliance Managers, IT and Cybersecurity Specialists in MROs, MRO Engineers and Managers, Procurement and Vendor Management Professionals, and Regulatory Compliance Officers.
Learning Objectives
- Regulatory Compliance – Gain a deep understanding of Regulation (EU) 2023/203 and ensure compliance before the 2026 deadline.
- Effective Risk Management – Learn how to identify, assess, and mitigate cyber risks within EASA Part 145 organizations.
- Operational Resilience – Protect critical maintenance data, IT systems, and digital operations from cyber threats.
- Structured Risk Assessment – Apply EASA-compliant methodologies for cybersecurity risk evaluation and mitigation.
- Incident Detection, Response & Reporting – Build expertise in aviation cybersecurity and enhance leadership skills in information security management.
What do People Say about Sofema Aviation Services Training?
“I found satisfying answers to all my questions.”
“The instructor demonstrated a very deep knowledge of the subject.”
“The length of the course fits my needs and expectations.”
“The content was really effective, I gained a lot of new knowledge.”
“The practical examples were perfectly delivered.”
Duration
Delivery Mode: Available onsite or virtual via Sofema Online
Duration: 1 Day – 09:00 to 17:00 (with refreshment breaks)
📧 Register Now: team@sassofia.com
📞 Call: +359 28210806
Ensure Compliance Before the February 2026 EASA Deadline – Secure Your Spot Today!
