Field notes from security operations and the audit room.

Notes on NIS2, ISO 27001, incident reporting and supply-chain risk, written by the people who run the platform.

All (66)
NIS2 (48)
ISO 27001 (13)
GRC (8)
SME (7)
Audit (7)
Supply chain (6)
Space (3)
Evidence (3)
vCISO (2)
SecOps (2)
Cost (2)
Risk (1)
Telecom (1)
CRA (1)
Aviation (1)

All (66) NIS2 (48)ISO 27001 (13)GRC (8)SME (7)Audit (7)Supply chain (6)Space (3)Evidence (3)vCISO (2)SecOps (2)Cost (2)Risk (1)Telecom (1)CRA (1)Aviation (1)

Aviation · 6 min read · 9 Sept 2026

EASA Part-IS: what it means if you supply the aviation industry

Part-IS has applied to aerodromes and production organisations since 16 October 2025, and to airlines, MROs and air navigation providers since 22 February 2026. If you supply any of them, it reaches you by contract. Here is how far it actually goes.

Daniel Grigorovich · Founder