For group rates contact sales@raven.aero
Explore EASA Part-IS with Our Comprehensive General Awareness Training
Welcome to the new era of aviation safety: Cybersecurity. As aircraft evolve into “flying data centers” dependent on real-time data, the industry faces a new, intentional threat from intelligent adversaries. To combat this, Regulation (EU) 2023/203 (Part-IS) mandates that every aviation professional—from flight crew to ground staff—must now play an active role in protecting the system from cyber risks.
This course is designed to meet the mandatory IS.OR.240 competence requirement for all personnel. With over 90% of successful attacks starting via Social Engineering rather than technical hacks, you are the primary target. Enroll today to build the “Human Firewall” necessary to detect anomalies, prevent bridging attacks, and ensure the confidentiality, integrity, and availability of your operations.
EASA Part-IS Awareness Training online course provides a focused overview of EASA Part-IS requirements for non-specialist staff. We move beyond generic IT advice to cover aviation-specific risks. Topics covered include the “Chain of Trust” when moving data to aircraft, the difference between “Safety” and “Security,” and the specific “Three Red Flags of Phishing” relevant to airline and airport environments.
Imagine an EASA auditor walks into your office or flight operations room right now. According to Part-IS, this desk contains 5 Security Violations. Click the violations if you can find them!
Target Audience
EASA Part-IS Awareness Training is designed for the following aviation professionals:
- Operational Staff: Flight Crew, Cabin Crew, Maintenance (Part-145), and Ground Handling personnel.
- Administrative Staff: HR, Finance, and Rostering teams who handle sensitive aviation data.
- Compliance Managers: Looking for a solution to onboard staff for the IS.OR.240 awareness mandate.
Learning Experience
2hrs Asynchronous (Interactive Recorded Content)
EASA Part-IS Awareness Training consists of a set of Lessons and Waypoints each with dedicated video content. Subtitles are also available when needed, in addition to the full transcript available on each Waypoint.
Learning Outcomes
Knowledge
The Learner shall be able to remember the basic principles of information security (CIA Triad), the definition of Critical Assets, and the specific reporting channels required by EASA Part-IS.
Skill
The Learner shall be able to identify common cyber threats (like phishing emails or unsecured devices) and apply cyber hygiene best practices, such as the “Clear Desk, Clear Screen” policy and “Clean Bridge” principles.
Competence
The Learner shall be able to correctly classify a system anomaly (using the Golden Rule of illogical behavior) and execute the operational response to contain a potential cyber event.
FAQ
Who is required to take EASA Part-IS Awareness Training?
Under Regulation (EU) 2023/203, all aviation personnel must have information security competence appropriate to their role. This applies to flight crew, maintenance staff (Part-145), airport operations, and administrative staff handling sensitive aviation data.
What is the deadline for Part-IS compliance?
The regulatory applicability begins in October 2025 and February 2026 (depending on the specific entity type). Organizations must ensure their staff are trained and their Information Security Management System (ISMS) is operational by these dates.
Does this course satisfy the IS.OR.240 competence requirement?
Yes. Raven’s “EASA Part-IS Awareness training” course is specifically designed to meet the IS.OR.240 mandate for “General Awareness.” It covers the required elements including cyber hygiene, the “Chain of Trust,” and the internal reporting scheme required by IS.OR.215. However, your compliance department shall always make their own verifications.
What is the difference between a Safety Hazard and a Security Threat?
As defined in the training, a Safety Hazard is accidental (like weather or fatigue). A Security Threat is intentional and driven by an intelligent adversary. This course teaches staff how to apply safety principles to these new digital threats
Course Content
About Instructor
Course Includes
- 6 Lessons
- 19 Waypoints
- 1 Quiz
- Course Certificate