Dear all happy to meet!
I am doing a bachelor thesis in "cybersecurity challenges for airlines".
Is anyone able to help me understand;
- The "air operators" are applicable to (EU) DR 2018/1139. But I don't find it clear that the 'airlines' would be subject to (EU) IR 2023/203. Or would the 'airlines' be subject to 2023/203 through their CAMO organization?

I have more questions and any answers are super appreciated, so please connect here or LinkedIn.
Best regards,
Eric Ekström