Applying for initial Part-IS compliance approval
If your civil aviation organisation falls under EASA Part-IS (Information Security), please apply for approval of your initial compliance by the applicable effective date at the latest.
Bekijk deze pagina in het Nederlands
Read about the dates from which Part-IS applies to which organisations
Apply for approval
Apply for approval from the Civil Aviation Authority of the Netherlands (CAA NL), part of the Human Environment and Transport Inspectorate (ILT). Use the online form Aanvraag initiële compliance aan EASA Part-IS (in Dutch). Upload the following information together with your application:
- Your Information Security Management Manual (ISMM).
- Your procedure for changes to your Information Security Management System (ISMS).
- Proof that you have carried out compliance monitoring within your organisation.
- Initial risk analysis focused on information security, including asset inventory and (external) interfaces.
- Name and contact details of the accountable and responsible person within your organisation.
- Name and contact details of the responsible person for compliance monitoring.
Prepare this documentation in English or Dutch. You can use your own methods to prepare these documents or there are templates for proof of compliance monitoring and risk analysis available online.
After your application
The processing of your application is free of charge.
You may continue your activities during the processing of your application if they do not pose any risks to aviation safety.
CAA NL will let you know within 8 weeks whether your application has been approved.
- If your initial compliance is approved, the approval will remain valid for as long as your current accreditation is valid and no findings are made in the meantime.
- If you do not receive approval and you have a recognition, CAA NL will issue you with a finding and you must inform CAA NL of the corrective actions you will take and within what timeframe.
- If you do not receive approval and you do not yet have accreditation, CAA NL will inform you of the corrective actions you must take and within what timeframe.
Queries
If you have any queries regarding applying for initial Part-IS compliance approval, please refer to:
- EASA Part-IS Oversight Approach Guidelines.
- EASA Easy Access Rules for Information Security.
- EASA Information Security (Part-IS) FAQ.
Otherwise you can send an email to luchtvaart-cybersecurity@ilent.nl