Sofema Online (SOL) considers the training requirements to support EASA Part 145 Organizations in respect of Information and Cyber Security Introduction to the Primary Objective – Ensure all levels of staff understand their roles and responsibilities in managing cyber security risks in compliance with Regulation (EU) 2023/203. Accountable Executive & Leadership Team (C-Level) Duration: 1 Day (Executive Briefing) Target Audience: Accountable…

Sofema Aviation Services (SAS) considers a practical level of engagement for typical Small to Medium EASA Part 145 Maintenance Organisations. Introduction For an EASA Part 145 approved maintenance organization to achieve the integration of cybersecurity into the operational framework, including the Safety Management System (SMS), requires practical, resource-conscious strategies. Adapting a Risk Management Framework Train…

Sofema Aviation Services (SAS) looks at Cyber Physical Security Threats as well as addressing risks like unauthorized access and device loss and -recognizing phishing indicators and physical breaches. Introduction Within EASA Part 145 organizations, cyber physical threats pose significant risks to operations, infrastructure, and sensitive data. Unauthorized access, phishing attacks, and physical breaches not only jeopardize operational safety but also compromise regulatory compliance. By implementing best practices, fostering a culture of vigilance, and aligning with EASA’s stringent guidelines,…

Sofema Aviation Services (SAS) www.sassofia.com reviews requirements & best practices related to the implementation of an effective Information Security Management System (ISMS) (Applicable from 22 February 2026 – Regulation (EU) 2023/203) Introduction To implement effective systems for 145.A.200A ISMS and 145.A.202 Internal Safety Reporting Scheme, an organization must establish a robust framework that integrates these systems…