Description

Part-IS Compliance Toolkit — The Fastest Route To an ISMS That Survives Oversight

Struggling to work out exactly how to build and document your ISMS?

The Part-IS Compliance Toolkit gives you the tools to create a regulation-aligned Information Security Management System for aviation — a document, register or form for every Part-IS article from IS.I/D.OR.200 to 260, in the order you need to complete them.

Version 3 is the best version we have ever built. It is the first shaped by real Part-IS audits: everything we have learned taking aviation organisations through competent authority oversight is in it.

What’s Inside the Toolkit?

✔ Your ISMM, already written

This is the manual your authority reviews and approves, and it is the centrepiece of Part-IS compliance under IS.I/D.OR.250.

Thirteen sections mapped article by article across IS.I/D.OR.200–260, with guidance at the end of every section telling you what to write and naming the register that evidences it. Every field requiring your input is marked. You complete it — you don’t draft it.

✔ A risk assessment that is actually aviation

Step by step workbook supporting the implementation of the Safety-Oriented Information Security methodology — designed to integrate with your existing Safety Management System.

✔ Find your gaps before your inspector does

EASA publishes the criteria your competent authority will assess you against. All assessment elements are built into a self-assessment workbook, separated into what is checked during the ISMM review and what is checked during audit.

Mark yourself against the authority’s four implementation levels — Present, Suitable, Operating and Effective — and you know exactly where you stand before you submit anything.

✔ Everything else, ready to populate

Incident reporting and response, ISEM event management, competent authority notification, corrective action planning, supplier due diligence and contract clauses, training and personnel trustworthiness, records retention, change control and impact assessment, findings management, management review — and a bank of Part-IS KPIs with indicative thresholds, plus tracking registers for single-site and multi-site organisations.

✔ A Welcome Guide that teaches

A step by step implementation path with every document explained: what it is for, which article it satisfies, and how to complete it.

Licensing

Purchasing this toolkit you receive the rights to apply it within a single organisation, for example the company you work for.

If you are a consultant who works with multiple companies, or would like to extend your license in any way beyond a single organisation, please contact us with your specific requirements.

Before purchasing, please familiarise yourself with this product’s End User Licensing Agreement, and our Terms and Conditions.

Full Content – 27 Documents

• IS Policy
• IS Objectives Register
• Compliance Monitoring Report
• Safety-Oriented IS Risk Assessment
• IS Incident Report Form
• IS Incident Response Plan
• IS Event Register (ISEM)
• IS Corrective Action Plan
• Competent Authority Notification Form
• IS Supplier Register
• IS Supplier Questionnaire
• IS Contractual Clauses
• IS Training Register
• IS Training and Awareness Plan
• IS Trustworthiness Register
• IS Records Retention Schedule
• ISMM Template
• IS Change Request Form
• IS Change Log
• IS Change Impact Assessment Form
• IS Findings Log
• IS KPI Bank
• Determining Your KPIs
• Simplified IS KPI Register
• Complex IS KPI Register
• IS Management Review Template
• ISMM Section Completion Checklists

Also available to you — our wider library

The toolkit contains what Part-IS requires. Part-IS also expects your ISMS to be proportionate to your organisation’s size, nature and complexity, so the core set is deliberately scoped to the regulation — every document in it has a job to do at audit.

Alongside it we maintain a substantial library of wider information security material, available to toolkit purchasers on request:

• General information security policies — access control, asset management, acceptable use, business continuity, backup, malware protection, cryptography and key management, logging and monitoring, network security, secure development, physical and environmental security, patch management, cloud services, data protection and retention, AI use, and more
• Aviation-specific security policies — aircraft records, onboard Wi-Fi and IFE, avionics database integrity, navigation data integrity, Electronic Flight Bags, pre- and post-flight data exchange, maintenance and engineering data, Operations Control Centre, flight planning and dispatch, and training material transfer
• Management guides — conducting an internal audit, business continuity testing, management review meetings, third-party supplier audits, deploying policies, managing security incidents, continual improvement etc

These are useful if you are implementing a fuller policy set and are supplied as supporting material rather than as Part-IS evidence.

Just tell us what you are trying to achieve and we will send what is relevant to your organisation type.
Contact us — it is quicker than reading forty policies to work out which three you need.

Why choose this toolkit

Built from real oversight, not theory. Written by aviation information security specialists with first-hand experience of Part-IS implementation and competent authority audits.

Aviation-specific by design. The risk methodology follows EUROCAE ER-040 and links information security risk directly to aviation safety outcomes, on a matrix that speaks the same language as your Safety Management System.

Scoped to the regulation. Every document maps to a Part-IS article and answers something your competent authority will ask, so you always know why you are completing it and what it evidences.

Audit-ready. Structured document references, article mapping and version control throughout — and a self-assessment workbook built on your authority’s own criteria.

Proportionate. Adaptable from a single-site operator to a multi-site group, with simplified and complex options where organisational size changes what is sensible.

Free version updates. When the regulation or the guidance moves, you get the updated toolkit at no additional cost.

 

Get your compliance journey started today! 🚀