EN 16495:2014

Foreword
1 Scope
2 Normative references
3 Terms and definitions
4 Information security management in aviation
5 Security policy
6 Organisational security
7 Asset management
8 Human resources security
9 Physical and environmental security
10 Communications and operations management
11 Access control
12 Information systems acquisition, development and
   maintenance
13 Information security incident management
14 Business continuity management
15 Compliance
Annex A (informative) - Implementation examples
Annex B (informative) - Level of Trust - Implementation
        Example
Bibliography

This European Standard defines guidelines and general principles for the implementation of an information security management system in organisations supporting civil aviation operations.Not included are activities of the organisations that do not have any impact on the security of civil aviation operations like for example airport retail and service business and corporate real estate management.For the purpose of this European Standard, Air Traffic management is seen as functional expression covering responsibilities of all partners of the air traffic value chain. This includes but is not limited to airspace users, airports and air navigation service providers.The basis of all requirements in this European Standard is trust and cooperation between the parties involved in Air Traffic Management.