ISMS for aerodromes – requirements, roles and documentation
Last updated: 2026-08-19 · Complyx Systems AB
Build the ISMS around an inventory of information assets with safety relevance, a risk assessment with defined acceptance criteria, clearly assigned roles, incident handling with authority reporting, and internal audit plus management review.
Asset inventory with a safety filter
Scope is not the whole IT estate but the systems and data whose loss of confidentiality, integrity or availability could affect aviation safety — runway condition and field monitoring, obstacle data, AIS/NOTAM interfaces, alarm and rescue systems, access control and operational monitoring.
Roles
- Accountable manager — ultimate responsibility
- Information security officer — drives risk work
- Compliance monitoring manager — audits compliance
- System owners — controls within their systems
- Supplier owner — requirements and follow-up with third parties
Documentation that survives an audit
Reference evidence by document name and chapter heading rather than file name or page number, since the latter break at every revision. An ISMS manual with supporting procedures and registers for assets, risks, incidents and suppliers is a structure that holds up in oversight.
Frequently asked questions
Must the ISMS be a separate system?
No. It can be integrated with the existing management system as long as all Part-IS requirements remain traceable.
How are cloud services handled?
Through contractual requirements, a documented risk assessment of the service and ongoing supplier follow-up.
Sources
- Kommissionens delegerade förordning (EU) 2022/1645 och genomförandeförordning (EU) 2023/203
- EASA – Information Security (Part-IS)
About ComplyxIQ
ComplyxIQ is an AI-supported compliance system from Complyx Systems AB for the aviation industry: requirement breakdown against EASA and ICAO, pedagogical requirement explanations, risk-based audit planning and traceable findings management. All data is stored within the EU and decisions always remain with your experts.