QCM Training Program 2024

I-001 Management of Information Security Risks according to (EU) 2022/1645 and (EU) 2023/203 Part-IS

By the end of this two-day course, personnel involved in the safety of civil aviation activities at their organization shall be able to efficiently contribute to the protection of the aviation system from Information Security (IS) risks, event, incidents and their consequences. Part-IS introduces requirements for the identification and management of IS risks that could affect information and communication technology systems and data used for civil aviation purposes: the detection of IS events, identifying those which are considered IS incidents, the response and recovery from those IS incidents to a level commensurate with their impact on aviation safety.

Objectives

Accountable Managers, Quality Managers, Compliance Managers, Compliance Monitoring Managers, Nominated Personnel, Safety Managers, and C-Level Executives. All personnel working within an organization involved in: Production and design (Part-21), Continuing airworthiness management (CAMO/Part-CAMO), Maintenance (Part-145), Air operators (Part-ORO), Aircrew aero-medical centres (Part- ORA), Air traffic controller training (ATCO TOs) and ATCO aero- medical (Part ATCO.OR), organizations subject to ATM/ANS. OR, Approved training organizations, Flight simulation training device (FSTD) operators, Aerodrome operators and apron management service providers, or U-space service providers and single common information service providers. By the end of this course, participants will be familiar with: • IS risks • how to manage those risks with their potential impact on aviation safety • how to conduct Risk Identification and Risk Assessments, including treating the unacceptable risks, detecting, responding, and recovering from IS events and incidents, and tasks of an ISMS

Target Group/s

Pre-Requisites

None

88 / 96

www.qcm.ch

Made with FlippingBook - Online Brochure Maker