Knowledge base – aviation compliance and internal audit
Reference articles on EASA requirements, Part-IS, compliance monitoring and risk-based audit planning for aerodromes and operators.
- What is Part-IS (EU 2023/203) and who is affected? — Part-IS is the EU information security framework for aviation. Overview of scope, ISMS requirements and how compliance is demonstrated in practice.
- EASA IR, AMC and GM – what is the difference? — IR are binding rules, AMC are accepted means of compliance and GM is guidance. How to treat each level in requirement breakdown and internal audits.
- Building an internal audit programme for an aerodrome — How to design compliance monitoring for aerodromes: coverage of requirements, risk-based intervals, auditor independence, findings and follow-up.
- Risk-based audit planning: scoring requirements and setting intervals — A model for scoring requirements by safety impact, complexity, change rate, finding history and compliance status, translated into audit intervals.
- ISMS for aerodromes – requirements, roles and documentation — How an aerodrome builds an information security management system: asset inventory, risk assessment, roles, incident handling and document structure.
- Compliance Monitoring System under EASA – practical design — What a compliance monitoring system must contain: requirement register, audit programme, independence, findings management and management reporting.
- Glossary: aviation compliance terms — Definitions of the key terms used in EASA compliance work, from IR and AMC to auditee, finding and root cause analysis.