Blog · Aviation
Aviation: articles and guides.
Every CloudSoul article on Aviation, newest first.
EASA Part-IS explained: who it applies to, the deadlines, and what it means for aviation suppliers
EASA Part-IS requires aviation organisations to run an ISMS for information security risks to aviation safety. It has applied since 16 October 2025 or 22 February 2026, depending on the organisation. Who is in scope, what it requires, the NIS2 overlap and what suppliers must do.
NIS2 for transport: which air, rail, water and road operators are in scope and what applies
NIS2 covers transport operators of an Annex I type that are at least medium-sized: air carriers, airports, air traffic control, rail, shipping, ports, VTS, road authorities and ITS operators. Who is in and out, essential or important, and how Part-IS, ISPS and CER fit.