EASA Part-IS

Digital security is part of airworthiness. In today’s connected “System of Systems,” a cyberattack can be as dangerous as a mechanical failure. The new EASA Part-IS Introduction Course helps aviation professionals in every department spot digital threats, recognize system issues, and report security events within a Just Culture framework.

Cyber-Security-in-Aviation-Course

DURATION

~ 25 minutes

INTENDED FOR

Flight and Cabin Crew​
Maintenance & Engineering Staff
Flight Dispatchers, and Flight Operations Officers
Supply Chain personnel
Corporate/Administrative staff

REGULATORY COMPLIANCE

EASA

Learning Objectives

Master the "System of Systems": Understand how your specific role connects to the wider digital network and how risks propagate through functional chains.
Prioritize Aviation Safety: Distinguish why aviation security focuses on Integrity and Availability over corporate confidentiality.
Identify Operational Threats: Recognize role-specific risks, such as lateral movement in corporate networks or integrity failures in flight data.
Act as a Human Sensor: Learn to detect potential cyber attacks by identifying deviations from the functional baseline of your daily tools.
Report Without Fear: Utilize the Internal Reporting Scheme confidently, supported by Just Culture principles that protect against blame for honest mistakes.
Respond Effectively: Understand the critical difference between fixing IT systems and restoring the aircraft operation to a safe state.

Contents of the course

1. Introduction

 

  • Learning Objectives

2. The “System of Systems”

 

  • Beyond the Aircraft
  • River Analogy
  • Safety vs. IT – The Critical Pillars
  • The Bow-Tie Model

3. Threat Scenarios by Department

 

  • Maintenance & Engineering – The Critical Bridge
  • Supply Chain & Logistics – The Upstream Risk
  • Flight & Ground Operations – The Integrity Threat
  • Corporate & Admin – The Lateral Threat

4. Detection, Reporting, and Just Culture

 

  • Detection – The “Functional Baseline”
  • The Internal Reporting Scheme
  • Just Culture – Reporting Without Fear
  • Understanding the Line
  • Reporting Scenario

5. Response and Recovery

 

  • Containment & Safety – The Immediate Response”
  • Response Process
  • Your Role in Response

6. Course Summary

Cyber-Security-in-Aviation-Course-8

Course References

Commission Implementing Regulation (EU) 2023/203 (Part-IS)

Commission Delegated Regulation (EU) 2022/1645