Amendment to Regulation (EU) No 748/2012
Article 6
Annex I (Part 21) to Regulation (EU) No 748/2012 is amended as follows: (1) the Table of Contents is amended as follows: (a) the following heading is inserted after heading 21.A.139: ‘ 21.A.139A Information security management system ’; (b) the following heading is inserted after heading 21.A.239: ‘ 21.A.239A Information security management system ’; (2) the following point 21.A.139A is inserted after point 21.A.139: ‘ 21.A.139A Information security management system In addition to the production management system required by point 21.A.139, the production organisation shall establish, implement and maintain an information security management system in accordance with Commission Delegated Regulation (EU) 2022/1645 ( *1 ) in order to ensure the proper management of information security risks which may have an impact on aviation safety. ( *1 ) Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 ( OJ L 248, 26.9.2022, p. 18 ).’;" (3) the following point 21.A.239A is inserted after point 21.A.239: ‘ 21.A.239A Information security management system In addition to the design management system required by point 21.A.239, the design organisation shall establish, implement and maintain an information security management system in accordance with Commission Delegated Regulation (EU) 2022/1645 in order to ensure the proper management of information security risks which may have an impact on aviation safety.’.