Article 1The detailed measures for the implementation of the common basic standards for safeguarding civil aviation against acts of unlawful interference that jeopardise the security of civil aviation, referred to in Article 4(1) of Regulation (EC) No 300/2008, and the general measures supplementing those common basic standards, referred to in Article 4(2) of that Regulation, are set out in the Annex.

Article 2Regulation (EU) No 185/2010 is repealed. References to the repealed Regulation shall be construed as a reference to this Regulation.

Article 3This Regulation shall enter into force on the day following that of its publication in the Official Journal of the European Union.It shall apply from 1 February 2016.

This Regulation shall be binding in its entirety and directly applicable in all Member States.ANNEX1.AIRPORT SECURITY1.0GENERAL PROVISIONS1.0.1Unless otherwise stated, the authority, airport operator, air carrier or entity responsible in accordance with the national civil aviation security programme referred to in Article 10 of Regulation (EC) No 300/2008 shall ensure the implementation of the measures set out in this Chapter.1.0.2For the purposes of this Chapter, an aircraft, bus, baggage cart or other means of transport, or a walkway or jetway, shall be regarded as a part of an airport.For the purposes of this Chapter, "secured baggage" means screened departing hold baggage that is physically protected so as to prevent the introduction of any objects.1.0.3Without prejudice to the criteria for derogations as set out in Part K of the Annex to Commission Regulation (EC) No 272/2009Commission Regulation (EC) No 272/2009 of 2 April 2009 supplementing the common basic standards on civil aviation security laid down in the Annex to Regulation (EC) No 300/2008 of the European Parliament and of the Council (OJ L 91, 3.4.2009, p. 7)., the appropriate authority may allow special security procedures or exemptions for the protection and security of airside areas at airports on days on which there is not more than one aircraft to be loaded, unloaded, boarded or disembarked at any one time either within the critical part of the security restricted area or at an airport that falls outside of the scope of point 1.1.3.1.0.4For the purposes of this Annex "items carried by persons other than passengers" refers to the belongings intended for the personal use of the person that carries them.1.0.5References to third countries in this Chapter and where applicable in Commission Implementing Decision C(2015) 8005 finalCommission Implementing Decision C(2015) 8005 final laying down detailed measures for the implementation of the common basic standards on aviation security containing information, as referred to in point (a) of Article 18 of Regulation (EC) No 300/2008, and repealing Decision (2010) 774 of 13 April 2010. include other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, the Title VI of Part Three of that Treaty does not apply.1.0.6.The appropriate authority shall establish and implement procedures to share, as appropriate and in a practical and timely manner, relevant information to assist other national authorities and agencies, airport operators, air carriers and other entities concerned, to conduct effective security risk assessments relating to their operations.1.1AIRPORT PLANNING REQUIREMENTS1.1.1Boundaries1.1.1.1Boundaries between landside, airside, security restricted areas, critical parts and, where applicable, demarcated areas shall be clearly identifiable at each airport in order to enable the appropriate security measures to be taken in each of those areas.1.1.1.2The boundary between landside and airside shall be a physical obstruction that is clearly visible to the general public and which denies a person unauthorised access.1.1.2Security restricted areas1.1.2.1Security restricted areas shall include at least the following:(a)a part of an airport to which screened departing passengers have access; and(b)a part of an airport through which screened departing hold baggage may pass or in which it may be held, unless it concerns secured baggage; and(c)a part of an airport designated for the parking of aircraft to be boarded or loaded.1.1.2.2A part of an airport shall be regarded as a security restricted area at least for the period of time that the activities referred to in point 1.1.2.1 are taking place.When a security restricted area is established, a security search of the parts that could have been contaminated shall be carried out immediately before such an area is established in order to reasonably ensure that it does not contain prohibited articles. This provision shall be considered to be met for aircraft that are subject to an aircraft security search.Persons carrying out a security search in areas different than those used by disembarking passengers not screened to the common basic standards, must be trained in accordance with point 11.2.3.1, 11.2.3.2, 11.2.3.3, 11.2.3.4 or 11.2.3.5.1.1.2.3Whenever unauthorised persons may have had access to security restricted areas, a security search of the parts that could have been contaminated shall be carried out as soon as possible in order to reasonably ensure that it does not contain prohibited articles. This provision shall be considered to be met for aircraft that are subject to an aircraft security search.1.1.3Critical parts of security restricted areas1.1.3.1Critical parts shall be established at airports where more than 60 persons hold airport identification cards giving access to security restricted areas.1.1.3.2Critical parts shall include at least the following:(a)all parts of an airport to which screened departing passengers have access; and(b)all parts of an airport through which screened departing hold baggage may pass or in which it may be held, unless it concerns secured baggage.A part of an airport shall be regarded as a critical part at least for the period of time that the activities referred to in points (a) or (b) are taking place.1.1.3.3When a critical part is established, a security search of the parts that could have been contaminated shall be carried out immediately before such a part is established in order to reasonably ensure that it does not contain prohibited articles. This provision shall be considered to be met for aircraft that are subject to an aircraft security search.1.1.3.4A security search of those critical parts that could have been contaminated shall be carried out as soon as possible in order to reasonably ensure that they do not contain prohibited articles, wherever access to critical parts has occurred by any of the following:(a)unscreened persons;(b)passengers and crew members arriving from third countries other than those listed in Attachment 4-B;(c)passengers and crew members arriving from Union airports where the relevant Member State has derogated from the common basic standards as provided for in Article 1 of Commission Regulation (EU) No 1254/2009Commission Regulation (EU) No 1254/2009 of 18 December 2009 setting criteria to allow Member States to derogate from the common basic standards on civil aviation security and to adopt alternative security measures (OJ L 338, 19.12.2009, p. 17)., unless they are met upon their arrival and escorted outside those areas in accordance with point 1.2.7.3.This point shall be considered to be met for aircrafts that are subject to an aircraft security search, and it shall not apply when persons covered by point 1.3.2 and point 4.1.1.7 have had access to critical parts.As far as points (b) and (c) are concerned, this provision shall only apply to those critical parts that are used by screened hold baggage and/or screened departing passengers not departing on the same aircraft as these passengers and crew members.1.2ACCESS CONTROL1.2.1Access to airside1.2.1.1Access to airside may only be authorised if persons and vehicles have a legitimate reason to be there. Guided tours of the airport escorted by authorised persons shall be considered to have a legitimate reason.1.2.1.2In order to be granted access to airside a person shall carry an authorisation.1.2.1.3In order to be granted access to airside a vehicle shall display a vehicle pass.1.2.1.4Persons who are airside shall, upon request, present their authorisation for control.1.2.2Access to security restricted areas1.2.2.1Access to security restricted areas may only be granted if persons and vehicles have a legitimate reason to be there. Guided tours of the airport escorted by authorised persons shall be considered to have a legitimate reason.1.2.2.2In order to be granted access to security restricted areas a person shall present one of the following authorisations:(a)a valid boarding card or equivalent; or(b)a valid crew identification card; or(c)a valid airport identification card; or(d)a valid national appropriate authority identification card; or(e)a valid compliance authority identification card recognised by the national appropriate authority.Alternatively, access may also be granted after positive identification via biometric data verification.1.2.2.3In order to be granted access to security restricted areas a vehicle shall display a valid vehicle pass.1.2.2.4The boarding card or equivalent referred to in point 1.2.2.2(a) shall be checked before a person is granted access to security restricted areas in order to reasonably ensure that it is valid.The card referred to in points 1.2.2.2(b)-(e), respectively, shall be checked before a person is granted access to security restricted areas in order to reasonably ensure that it is valid and corresponds to the holder.Where biometric identification is used, the verification shall ensure that the person seeking access to security restricted areas holds one of the authorisations listed under point 1.2.2.2 and that this authorisation is valid and was not disabled.1.2.2.5In order to prevent unauthorised access to security restricted areas access points shall be controlled by:(a)an electronic system which limits access to one person at a time; or(b)authorised persons implementing access control.The appropriate authority may define in its national aviation security programme that the limitation to one person at a time under point (a) does not apply at access points exclusively used by law enforcement officers.1.2.2.6The vehicle pass shall be checked before a vehicle is granted access to security restricted areas to ensure that it is valid and corresponds to the vehicle.1.2.2.7Access to security restricted areas shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.2.3Requirements for Union crew identification cards and airport identification cards1.2.3.1A crew identification card of a crew member employed by a Union air carrier and an airport identification card may only be issued to a person who has an operational need and has successfully completed an enhanced background check in accordance with point 11.1.3.1.2.3.2Crew and airport identification cards shall be issued for a period not exceeding five years.1.2.3.3The identification card of a person who fails an enhanced background check shall be immediately disabled or withdrawn, as applicable, and returned to the competent authority, operator or issuing entity, as appropriate.1.2.3.4The identification card shall be worn in a visible place at least whenever the holder is in security restricted areas.A person who is not displaying his identification card in security restricted areas other than those areas where passengers are present shall be challenged by persons responsible for the implementation of point 1.5.1(c) and, as appropriate, be reported.1.2.3.5The identification card shall be returned immediately in the following circumstances:(a)upon request of the competent authority, operator or issuing entity as appropriate;(b)upon termination of employment;(c)upon change of employer;(d)upon change of the need to have access to areas for which an authorisation has been given;(e)upon expiry of the card;(f)upon withdrawal of the card.1.2.3.6The issuing entity shall be notified immediately of the loss, theft or failure to return an identification card.1.2.3.7An electronic card shall be immediately disabled following return, expiry, withdrawal or notification of loss, theft or failure to return.1.2.4Supplementary requirements for Union crew identification cards1.2.4.1A crew identification card of a crew member employed by a Union air carrier shall display:(a)the name and photograph of the holder; and(b)the name of the air carrier; and(c)the word "crew" in English; and(d)the expiry date.1.2.5Supplementary requirements for airport identification cards1.2.5.1An airport identification card shall display:(a)the name and photograph of the holder; and(b)the name of the employer of the holder, unless electronically programmed; and(c)the name of either the issuing entity or the airport; and(d)the areas for which the holder is authorised to have access; and(e)the expiry date, unless electronically programmed.The names and areas of access may be replaced by an equivalent identification.1.2.5.2In order to prevent the misuse of airport identification cards, a system shall be in place to reasonably ensure that attempted use of cards that have been lost, stolen or not returned is detected. Upon detection, appropriate action shall be taken.1.2.6Requirements for vehicle passes1.2.6.1A vehicle pass may only be issued where an operational need has been established.1.2.6.2A vehicle pass shall be specific to the vehicle and display:(a)the areas for which it is authorised to have access; and(b)the expiry date.Electronic vehicle passes need not display the areas for which the vehicle is authorised to have access nor the expiry date, provided that this information is electronically readable and checked before granting access to security restricted areas.1.2.6.3An electronic vehicle pass shall, either:(a)be fixed to the vehicle in a manner which ensures that it is non-transferable; or(b)be linked to the company or individual registered vehicle user through a secure vehicle registration database.Electronic vehicle passes need not display the areas for which the vehicle is authorised to have access nor the expiry date, provided that this information is electronically readable and checked before granting access to security restricted areas. Electronic vehicle passes shall also be electronically readable airside.1.2.6.4The vehicle pass shall be displayed in a visible place whenever the vehicle is airside.1.2.6.5The vehicle pass shall be returned immediately to the issuing entity:(a)upon request of the issuing entity; or(b)when the vehicle is no longer to be used for access to airside; or(c)upon expiry of the pass, unless the pass is automatically invalidated.1.2.6.6The issuing entity shall be notified immediately of the loss, theft or failure to return a vehicle pass.1.2.6.7An electronic vehicle pass shall be immediately disabled following return, expiry or notification of loss, theft or failure to return.1.2.6.8In order to prevent the misuse of vehicle passes, a system shall be in place to reasonably ensure that attempted use of vehicle passes that have been lost, stolen or not returned is detected. Upon detection, appropriate action shall be taken.1.2.6.9Vehicles that are only used airside and have no permission to drive on public roads may be exempted from application of points 1.2.6.2 to 1.2.6.8 provided that they are clearly marked externally as operational vehicles in use at that airport.1.2.7Escorted access1.2.7.1Crew members, other than those holding a valid airport identification card, shall be escorted at all times when in security restricted areas other than:(a)areas where passengers may be present; and(b)areas in the immediate proximity of the aircraft on which they have arrived or will depart; and(c)areas designated for crews; and(d)distances between the terminal or access point and the aircraft on which crew members have arrived or will depart.1.2.7.2Exceptionally, a person may be exempted from the requirements of point 1.2.5.1 and obligations on background checks on condition that that person is escorted at all times when in security restricted areas. A person may be exempted from the requirement to be escorted if that person displays an authorisation and is a holder of a valid airport identification card.1.2.7.3An escort shall:(a)hold a valid identification card as referred to in point 1.2.2.2(c), (d) or (e); and(b)be authorised to escort in security restricted areas; and(c)have the escorted person or persons in direct line of sight at all times; and(d)reasonably ensure that no security breach is committed by the person or persons being escorted.1.2.7.4A vehicle may be exempted from the requirements of point 1.2.6 on condition that it is escorted at all times when airside.1.2.7.5Whenever a passenger does not travel as a result of an air carriage contract resulting in the delivery of a boarding pass or equivalent, a crew member escorting this passenger may be exempted from the requirements of point 1.2.7.3(a).1.2.8Other exemptionsOther exemptions shall be subject to provisions laid down in Commission Implementing Decision C(2015) 8005.1.3SCREENING OF PERSONS OTHER THAN PASSENGERS AND ITEMS CARRIED1.3.1Screening of persons other than passengers and items carried1.3.1.1Persons other than passengers shall be screened by one of the following means:(a)hand search;(b)walk-through metal detection equipment (WTMD);(c)explosive detection dogs;(d)explosive trace detection (ETD) equipment;(e)security scanners which do not use ionising radiation;(f)explosive trace detection (ETD) equipment combined with hand held metal detection (HHMD) equipment;(g)shoe metal detection (SMD) equipment;(h)shoe explosive detection (SED) equipment.SMD and SED equipment may only be used as a supplementary means of screening.1.3.1.2Points 4.1.1.3 – 4.1.1.6 and 4.1.1.10 – 4.1.1.11 shall apply to the screening of persons other than passengers.1.3.1.3Explosive detection dogs, ETD equipment and ETD equipment in combination with SED equipment may only be used as a supplementary means of screening of persons other than passengers or in unpredictable alternation with hand searches, hand searches in combination with SMD equipment, WTMD or security scanners.1.3.1.4Items carried by persons other than passengers shall be screened by one of the following means:(a)hand search;(b)x-ray equipment;(c)explosive detection systems (EDS) equipment;(d)automated prohibited items detection (APID) software in combination with point (c);(e)explosive detection dogs;(f)explosive trace detection (ETD) equipment.Where the screener cannot determine whether or not the items carried contains any prohibited articles, it shall be rejected or rescreened to the screener’s satisfaction.1.3.1.5Points 4.1.2.4 to 4.1.2.7 and 4.1.2.11 to 4.1.2.12 shall apply to the screening of items carried by persons other than passengers.1.3.1.6Explosive detection dogs and ETD equipment may only be used as a supplementary means of screening of items carried by persons other than passengers or in unpredictable alternation with hand searches, x-ray equipment or EDS equipment.1.3.1.7Where persons other than passengers and items carried have to be screened on a continuous random basis, the frequency shall be established by the appropriate authority on the basis of a risk assessment.1.3.1.8Animals used for operational needs and handled by a person carrying a valid airport identification card shall be subjected to a visual check before access to security restricted areas is granted.1.3.1.9The screening of persons other than passengers and items carried shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.3.2Exemptions and special screening procedures1.3.2.1The appropriate authority may, for objective reasons, allow persons other than passengers to be exempted from screening, or to be subjected to special screening procedures, provided that they are escorted by a person authorised to escort in accordance with point 1.2.7.3.1.3.2.2Screened persons other than passengers who temporarily leave critical parts may be exempted from screening on their return provided that they have been under constant observation by authorised persons sufficient to reasonably ensure that they do not introduce prohibited articles into those critical parts.1.3.2.3Exemptions and special screening procedures shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.4EXAMINATION OF VEHICLES1.4.1Vehicles entering critical parts1.4.1.1All vehicles shall be examined before entering critical parts. They shall be protected from unlawful interference from after examination until entering critical parts.1.4.1.2The driver and any other occupants of the vehicle shall not be in the vehicle when the examination takes place. They shall be required to take their personal belongings out of the vehicle with them for screening.1.4.1.3There shall be defined methodologies to ensure the randomness of selection of the areas to be examined.1.4.1.4Vehicles entering critical parts shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.4.2Vehicles entering security restricted areas other than critical parts1.4.2.1The driver and any other occupants of the vehicle shall not be in the vehicle when the examination takes place. They shall be required to take their personal belongings out of the vehicle with them for screening.1.4.2.2There shall be defined methodologies to ensure the randomness of selection of both vehicles and the areas to be examined.1.4.2.3Vehicles entering security restricted areas other than critical parts shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.4.3Methods of examination1.4.3.1A hand search shall consist of a thorough manual check of the areas selected, including contents, in order to reasonably ensure that they do not contain prohibited articles.1.4.3.2The following methods may only be used as a supplementary means of examination:(a)explosive detection dogs; and(b)explosive trace detection (ETD) equipment.1.4.3.3Methods of examination shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.4.4Exemptions and special examination procedures1.4.4.1The appropriate authority may, for objective reasons, allow vehicles to be exempted from examination, or to be subjected to special examination procedures, provided that they are escorted by a person authorised to escort in accordance with point 1.2.7.3.1.4.4.2Examined vehicles that temporarily leave critical parts may be exempted from examination on their return provided that they have been under constant observation by authorised persons sufficient to reasonably ensure that no prohibited articles have been introduced into the vehicles.1.4.4.3Exemptions and special examination procedures shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.1.5SURVEILLANCE, PATROLS AND OTHER PHYSICAL CONTROLS1.5.1Surveillance or patrols shall be undertaken in order to monitor:(a)the boundaries between landside, airside, security restricted areas, critical parts and, where applicable, demarcated areas; and(b)areas of, and in proximity of, the terminal that are accessible to the public, including parking areas and roadways; and(c)the display and validity of persons' identification cards in security restricted areas other than those areas where passengers are present; and(d)the display and validity of vehicle passes when airside; and(e)hold baggage, cargo and mail, in-flight supplies and air carrier mail and materials in critical parts waiting to be loaded.1.5.2The frequency and means of undertaking surveillance and patrols shall be based on a risk assessment and shall be approved by the appropriate authority. They shall take into account:(a)the size of the airport, including the number and nature of the operations; and(b)the layout of the airport, in particular the interrelationship between the areas established at the airport; and(c)the possibilities and limitations of means of undertaking surveillance, and patrols.The parts of the risk assessment relating to the frequency and means of undertaking surveillance and patrols shall, upon request, be made available in writing for compliance monitoring purposes.1.5.3Surveillance and patrols shall not follow a predictable pattern. The validity of identification cards shall be checked on a random basis.1.5.4Measures shall be in place that both deter persons from breaching security checkpoints and, should such a breach occur, promptly enable the breach and its repercussions to be resolved and rectified.1.5.5Procedures shall be established in order to deal with unidentified baggage and suspicious objects in accordance with a security risk assessment carried out or approved by the relevant national authorities.1.6PROHIBITED ARTICLES1.6.1Persons other than passengers shall not be permitted to carry into security restricted areas the articles listed in Attachment 1-A.1.6.2An exemption to point 1.6.1 may be granted on condition that the person is authorised to carry prohibited articles into security restricted areas in order to undertake tasks that are essential for the operation of airport facilities or of aircraft, or for performing in-flight duties.1.6.3In order to allow reconciliation of the person authorised to carry one or more articles as listed in Attachment 1-A with the article carried:(a)the person shall have an authorisation and shall carry it. The authorisation shall either be indicated on the identification card that grants access to security restricted areas or on a separate declaration in writing. The authorisation shall indicate the article(s) that may be carried, either as a category or as a specific article. If the authorisation is indicated on the identification card, then it shall be recognisable on a need-to-know basis; or(b)a system shall be in place at the security checkpoint indicating which persons are authorised to carry which article(s), either as a category or as a specific article.1.6.4Reconciliation shall be performed before the person is allowed to carry the article(s) concerned into security restricted areas and upon being challenged by persons performing surveillance or patrols under point (c) of point 1.5.1.1.6.5Articles as listed in Attachment 1-A may be stored in security restricted areas provided they are kept in secure conditions. Articles as listed in points (c), (d) and (e) of Attachment 4-C may be stored in security restricted areas provided they are not accessible to passengers.1.7IDENTIFICATION AND PROTECTION OF CIVIL AVIATION CRITICAL INFORMATION AND COMMUNICATION TECHNOLOGY SYSTEMS AND DATA FROM CYBER THREATS1.7.1The appropriate authority shall ensure that airport operators, air carriers and entities as defined in the national civil aviation security programme identify and protect their critical information and communications technology systems and data from cyber-attacks which could affect the security of civil aviation.1.7.2Airport operators, air carriers and entities shall identify in their security programme, or any relevant document cross-referenced in the security programme, the critical information and communications technology systems and data described in 1.7.1.The security programme, or any relevant document cross-referenced in the security programme shall detail the measures to ensure the protection from, detection of, response to and recovery from cyber-attacks, as described in 1.7.1.1.7.3The detailed measures to protect such systems and data from unlawful interference shall be identified, developed and implemented in accordance with a risk assessment carried out by the airport operator, air carrier or entity as appropriate.1.7.4Where a specific authority or agency is competent for measures related to cyber threats within a single Member State, this authority or agency may be designated as competent for the coordination and/or monitoring of the cyber-related provisions in this Regulation.1.7.5Where airport operators, air carriers and entities as defined in the national civil aviation security programme are subjected to separate cybersecurity requirements arising from other EU or national legislation, the appropriate authority may replace compliance with the requirements of this regulation by compliance with the elements contained in the other EU or national legislation. The appropriate authority shall coordinate with any other relevant competent authorities to ensure coordinated or compatible oversight regimes.ATTACHMENT 1-APERSONS OTHER THAN PASSENGERSLIST OF PROHIBITED ARTICLES(a)guns, firearms and other devices that discharge projectiles — devices capable, or appearing capable, of being used to cause serious injury by discharging a projectile, including:firearms of all types, such as pistols, revolvers, rifles, shotguns,toy guns, replicas and imitation firearms capable of being mistaken for real weapons,component parts of firearms, excluding telescopic sights,compressed air and CO2 guns, such as pistols, pellet guns, rifles and ball bearing guns,signal flare pistols and starter pistols,bows, cross bows and arrows,harpoon guns and spear guns,slingshots and catapults;(b)stunning devices — devices designed specifically to stun or immobilise, including:devices for shocking, such as stun guns, tasers and stun batons,animal stunners and animal killers,disabling and incapacitating chemicals, gases and sprays, such as mace, pepper sprays, capsicum sprays, tear gas, acid sprays and animal repellent sprays;(c)explosives and incendiary substances and devices — explosives and incendiary substances and devices capable, or appearing capable, of being used to cause serious injury or to pose a threat to the safety of aircraft, including:ammunition,blasting caps,detonators and fuses,replica or imitation explosive devices,mines, grenades and other explosive military stores,fireworks and other pyrotechnics,smoke-generating canisters and smoke-generating cartridges,dynamite, gunpowder and plastic explosives.(d)any other article capable of being used to cause serious injury and which is not commonly used in security restricted areas, e.g. martial arts equipment, swords, sabres, etc.2.DEMARCATED AREAS OF AIRPORTSNo provisions in this Regulation.3.AIRCRAFT SECURITY3.0GENERAL PROVISIONS3.0.1Unless otherwise stated, an air carrier shall ensure the implementation of the measures set out in this Chapter as regards its aircraft.3.0.2Third countries where the security standards applied are recognised as equivalent to the common basic standards as regards aircraft security are listed in Attachment 3-B.3.0.3An aircraft need not be subjected to an aircraft security check. It shall be subjected to an aircraft security search in accordance with point 3.1.3.0.4An air carrier shall, upon request, be notified by the airport operator whether or not its aircraft is in a critical part. When this is not clear, it shall be assumed that the aircraft is in a part other than a critical part.3.0.5When an area is no longer considered to be a critical part because of a change of security status then the airport shall inform those carriers that are affected.3.0.6The list of prohibited articles for aircraft security searches of the interior of aircraft is the same as the one set out in Attachment 1-A. Assembled explosive and incendiary devices shall be considered as prohibited articles for aircraft security searches of the exterior of aircraft.3.0.7For the purpose of this Chapter, "aircraft service panels and hatches" means aircraft external access points and compartments that have external handles or external clip-down panels and are routinely used for providing aircraft ground handling services.3.0.8References to third countries in this Chapter and in Commission Implementing Decision C(2015) 8005 include other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply.3.1AIRCRAFT SECURITY SEARCH3.1.1When to perform an aircraft security search3.1.1.1An aircraft shall at all times be subjected to an aircraft security search whenever there is reason to believe that unauthorised persons may have had access to it.3.1.1.2An aircraft security search shall consist of an examination of defined areas of an aircraft that are laid down in Commission Implementing Decision C(2015) 8005.3.1.1.3An aircraft arriving into a critical part from a third country not listed in Attachment 3-B shall be subjected to an aircraft security search any time after passenger disembarkation from the area to be searched and/or the unloading of the hold. The search may not start until the aircraft has reached its final parking position.3.1.1.4An aircraft arriving from a Member State where it was in transit after having arrived from a third country not listed in Attachment 3-B shall be considered as an aircraft arriving from a third country.3.1.1.5When to perform an aircraft security search shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.3.1.2How to perform an aircraft security searchHow to perform an aircraft security search shall be subject to the provisions laid down in Commission Implementing Decision C(2015) 8005.3.1.3Information on the aircraft security searchThe following information on the aircraft security search performed of a departing flight shall be recorded and kept at a point not on the aircraft for the duration of the flight or for 24 hours, whichever is longer:(a)flight number;(b)origin of the previous flight;(c)date and time that the aircraft security search was completed;(d)the name and signature of the person responsible for the performance of the aircraft security search.Recording of the information listed in the first paragraph may be held in electronic format.3.2PROTECTION OF AIRCRAFT3.2.1Protection of aircraft — General3.2.1.1Regardless of where an aircraft is parked at an airport, each of its external doors shall be protected against unauthorised access by:(a)ensuring that persons seeking to gain unauthorised access are challenged promptly; or(b)having the external door closed. Where the aircraft is in a critical part, external doors that are not accessible by a person from the ground shall be considered closed if access aids have been removed and placed sufficiently far from the aircraft as to reasonably prevent access by a person; or(c)having electronic means which will immediately detect unauthorised access; or;(d)having an electronic airport identification card access system at all doors leading directly to the passenger boarding bridge, adjacent to an open aircraft door, which only allows access for persons that are trained in accordance with point 11.2.3.7. Such persons must ensure that unauthorised access is prevented, during their use of the door.3.2.1.2Point 3.2.1.1 shall not apply to an aircraft parked in a hangar that is locked or otherwise protected from unauthorised access.3.2.2Additional protection of aircraft with closed external doors in a part other than a critical part3.2.2.1Where external doors are closed and the aircraft is in a part other than a critical part, each external door shall also:(a)have access aids removed; or(b)be sealed; or(c)be locked; or(d)be monitored.Point (a) shall not apply for a door that is accessible from the ground by a person.3.2.2.2Where access aids are removed for doors that are not accessible by a person from the ground, they shall be placed sufficiently far from the aircraft as to reasonably prevent access.3.2.2.3Where external doors are locked, only persons with an operational need shall be able to unlock these doors.3.2.2.4Where external doors are monitored, the monitoring shall ensure that unauthorised access to the aircraft is immediately detected.3.2.2.5The protection of aircraft with closed external doors in a part other than a critical part shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 3-AAIRCRAFT SECURITY SEARCHDetailed provisions for an aircraft security search are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 3-BAIRCRAFT SECURITYTHIRD COUNTRIES, AS WELL AS OTHER COUNTRIES AND TERRITORIES TO WHICH, IN ACCORDANCE WITH ARTICLE 355 OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION, TITLE VI OF PART THREE OF THAT TREATY DOES NOT APPLY, THAT ARE RECOGNISED AS APPLYING SECURITY STANDARDS EQUIVALENT TO THE COMMON BASIC STANDARDS ON CIVIL AVIATION SECURITYAs regards aircraft security, the following third countries, as well as other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply, have been recognised as applying security standards equivalent to the common basic standards on civil aviation security:CanadaFaroe Islands, in regard to Vagar airportGreenland, in regard to Kangerlussuaq airportGuernseyIsle of ManJerseyKingdom of Norway, in regard to Svalbard AirportMontenegroRepublic of Serbia, in regard to Belgrade Nikola Tesla AirportRepublic of Singapore, in regard to Singapore Changi AirportState of Israel, in regard to Ben Gurion International AirportUnited Kingdom of Great Britain and Northern IrelandUnited States of AmericaThe Commission shall immediately notify the appropriate authorities of the Member States if it has information indicating that security standards applied by the third country or other country or territory concerned with a significant impact on overall levels of aviation security in the Union are no longer equivalent to the common basic standards of the Union.The appropriate authorities of the Member States shall be notified without delay when the Commission has information about actions, including compensatory measures, confirming that the equivalency of relevant security standards applied by the third country or other country or territory concerned is re-established.4.PASSENGERS AND CABIN BAGGAGE4.0GENERAL PROVISIONS4.0.1Unless otherwise stated, the authority, airport operator, air carrier or entity responsible in accordance with the national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 shall ensure the implementation of the measures set out in this Chapter.4.0.2Third countries where the security standards applied are recognised as equivalent to the common basic standards as regards passengers and cabin baggage are listed in Attachment 4-B.4.0.3Passengers and their cabin baggage arriving from a Member State where the aircraft was in transit after having arrived from a third country not listed in Attachment 4-B or from a Union airport where the relevant Member State has derogated from the common basic standards as provided for in Article 1 of Regulation (EU) No 1254/2009, shall be considered as passengers and cabin baggage arriving from a third country, unless there is a confirmation that these passengers and their cabin baggage were screened in accordance with this Chapter.4.0.4For the purpose of this Annex:(a)"liquids, aerosols and gels" (LAGs) shall include pastes, lotions, liquid/solid mixtures and the contents of pressurised containers, such as toothpaste, hair gel, drinks, soups, syrups, perfume, shaving foam and other items with similar consistencies;(b)"security tamper-evident bag" (STEB) is a bag that conforms to the recommended security control guidelines of the International Civil Aviation Organisation;(c)"liquid explosive detection systems (LEDS) equipment" is a piece of equipment capable of detecting threat materials that meets the provisions of point 12.7 of the Annex to Commission Implementing Decision C(2015) 8005.4.0.5References to third countries in this Chapter and where applicable in Commission Implementing Decision C(2015) 8005 include other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply.4.0.6Passengers and their cabin baggage arriving from a Union airport where the relevant Member State has derogated from the common basic standards as provided for in Article 1 of Regulation (EU) No 1254/2009 shall be considered as passengers and cabin baggage arriving from a third country, unless there is confirmation that these passengers and their cabin baggage were screened in accordance with this Chapter.4.1SCREENING OF PASSENGERS AND CABIN BAGGAGE4.1.1Screening of passengers4.1.1.1Before screening, outer wear shall be taken off and shall be screened as cabin baggage, unless the concept of operations of equipment allows for outer wear to be kept on. The screener may request the passenger to undertake further divesting as appropriate.4.1.1.2Passengers shall be screened by at least one of the following methods:(a)hand search;(b)walk-through metal detection equipment (WTMD);(c)explosive detection dogs;(d)explosive trace detection (ETD) equipment;(e)security scanners which do not use ionising radiation;(f)ETD equipment combined with hand held metal detection (HHMD) equipment;(g)shoe metal detection (SMD) equipment;(h)shoe explosive detection (SED) equipment.Where the screener cannot determine whether or not the passenger is carrying prohibited articles, the passenger shall be denied access to security restricted areas or rescreened to the screener's satisfaction.4.1.1.3When a hand search is performed it shall be carried out so as to reasonably ensure that the person is not carrying prohibited articles.4.1.1.4When WTMD equipment alarms, the cause of the alarm shall be resolved.4.1.1.5Hand-held metal detection (HHMD) equipment may only be used as a supplementary means of screening. It shall not replace the requirements of a hand search.4.1.1.6Where a live animal is permitted to be carried in the cabin of an aircraft, it shall be screened either as a passenger or as cabin baggage.4.1.1.7The appropriate authority may create categories of passengers that, for objective reasons, shall be subject to special screening procedures or may be exempted from screening. The Commission shall be informed of the categories created.4.1.1.8The screening of passengers shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.4.1.1.9Explosive detection dogs, ETD equipment, SMD equipment and SED equipment may only be used as a supplementary means of screening.4.1.1.10When a security scanner with a human reviewer, as defined under the second paragraph of point 12.11.1, is used for screening of passengers, all of the following minimum conditions shall be complied with:(a)security scanners shall not store, retain, copy, print or retrieve images. However, any image generated during the screening can be kept for the time needed for the human reviewer to analyse it and shall be deleted as soon as the passenger is cleared. Any unauthorised access and use of the image is prohibited and shall be prevented;(b)the human reviewer analysing the image shall be in a separate location so that he/she cannot see the screened passenger;(c)any technical devices capable of storing, copying or photographing or otherwise recording images shall not be allowed into the separate location where the image is analysed;(d)the image shall not be linked to any data concerning the screened person and his/her identity shall be kept anonymous;(e)a passenger may request that the image of his/her body is analysed by a human reviewer of the gender of his/her choice;(f)the image shall be blurred or obscured to prevent the identification of the face of the passenger.Paragraphs (a) and (d) shall also apply to security scanners with automatic threat detection.Passengers shall be entitled to opt out from a security scanner. In this case the passenger shall be screened by an alternative screening method including at least a hand search in accordance with Attachment 4-A of Commission Implementing Decision C(2015) 8005. When the security scanner alarms, the cause of the alarm shall be resolved.Before being screened by a security scanner, the passenger shall be informed of the technology used, the conditions associated to its use and the possibility to opt out from a security scanner.4.1.1.11Explosive trace detection (ETD) equipment in combination with hand held metal detection (HHMD) equipment may only be used in cases where the screener considers a hand search of a given part of the person to be inefficient and/or undesirable.4.1.2Screening of cabin baggage4.1.2.1Before screening, portable computers and other large electrical items shall be removed from cabin baggage and shall be screened separately, unless the cabin baggage is to be screened with Explosive Detection Systems (EDS) equipment meeting standard C2 or higher.4.1.2.2The appropriate entity at all airports shall screen, upon entry to the security restricted area (SRA), at least LAGs obtained at an airport or on board an aircraft that are sealed in a STEB inside which is displayed satisfactory proof of purchase at airside at an airport or on board an aircraft, as well as LAGs to be used during the trip for medical purposes or a special dietary requirement, including baby food.Before screening, LAGs shall be removed from cabin baggage and shall be screened separately from other items of cabin baggage, unless the equipment used for the screening of cabin baggage is also capable of screening multiple closed LAGs containers inside baggage.Where LAGs have been removed from cabin baggage, the passenger shall present:(a)all LAGs in individual containers with a capacity not greater than 100 millilitres or equivalent in one transparent resealable plastic bag of a capacity not exceeding 1 litre, whereby the contents of the plastic bag fit comfortably and the bag is completely closed; and(b)all other LAGs, including STEBs containing LAGs.Appropriate authorities, airlines and airports shall provide appropriate information to passengers in respect of the screening of LAGs at their airports.4.1.2.3Cabin baggage shall be screened by at least one of the following methods:(a)a hand search;(b)x-ray equipment;(c)explosive detection systems (EDS) equipment;(d)automated prohibited items detection (APID) software in combination with point (c);(e)explosive detection dogs in combination with point (a);(f)ETD equipment.Where the screener cannot determine whether or not the cabin baggage contains any prohibited articles, it shall be rejected or rescreened to the screener’s satisfaction.4.1.2.4A hand search of cabin baggage shall consist of a manual check of the baggage, including its contents, as to reasonably ensure that it does not contain prohibited articles.4.1.2.5Where x-ray equipment is used, each image shall be viewed by the screener.Where EDS equipment is used, each image shall be viewed by the screener or analysed by automated prohibited items detection (APID) software.4.1.2.6Where APID software is used, all alarms as referred to in point 12.13.1.1 shall be resolved to the satisfaction of the screener so as to reasonably ensure that no prohibited articles are carried into the SRA or on board an aircraft.Where EDS equipment is used, all alarms as referred to in point 12.4.1.3 shall be resolved by screening the baggage again using an additional screening method.Where EDS equipment has been installed before 1 July 2023 and is used without APID software, all alarms as referred to in point 12.4.1.3 shall be resolved to the satisfaction of the screener so as to reasonably ensure that no prohibited articles are carried into the SRA or on board an aircraft. When the identity of an article is unclear, the alarms shall be resolved by screening the baggage again using an additional screening method.4.1.2.7Where x-ray or EDS equipment is used, any item whose density impairs the ability of the screener to analyse the contents of the cabin baggage shall be taken out of the baggage. The bag shall be screened again and the item shall be screened separately as cabin baggage.4.1.2.8Any bag that is found to contain a large electrical item shall be screened again with the item no longer in the bag and the electrical item screened separately, unless the cabin baggage was screened with EDS equipment meeting standard C2 or higher.4.1.2.9Explosive detection dogs and explosive trace detection (ETD) equipment may only be used as a supplementary means of screening.4.1.2.10The appropriate authority may create categories of cabin baggage that, for objective reasons, shall be subject to special screening procedures or may be exempted from screening. The Commission shall be informed of the categories created.4.1.2.11Persons screening cabin baggage by x-ray or EDS equipment shall normally not spend more than 20 minutes continuously reviewing images. After each of these periods, the screener shall not review images for at least 10 minutes. This requirement shall only apply when there is an uninterrupted flow of images to be reviewed.There shall be a supervisor responsible for screeners of cabin baggage in order to assure optimum team composition, quality of work, training, support and appraisal.4.1.2.12Where APID software is used in combination with EDS equipment meeting either of standards C1, C1+, C2 or C2+, the operator or entity using equipment shall ensure that the procedures are in accordance with the concept of operations of these standards as regards screening of large electronic items and screening of LAGs.4.1.2.13The screening of cabin baggage shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.4.1.3Screening of liquids, aerosols and gels (LAGs)4.1.3.1LAGs carried by passengers may be exempted from screening with LEDS equipment upon entry to the SRA if the LAGs are in individual containers with a capacity not greater than 100 millilitres or equivalent in one transparent resealable plastic bag of a capacity not exceeding 1 litre, whereby the contents of the plastic bag fit comfortably and the bag is completely closed.4.1.3.2The dedicated STEBs referred to under point (b) of point 4.1.3.1 shall:(a)be clearly identifiable as a STEB of that airport; and(b)display inside proof of purchase at that airport within the preceding period of three hours; and(c)be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.4.1.3.3The appropriate authority may create categories of LAGs that, for objective reasons, shall be subjected to special screening procedures or may be exempted from screening. The Commission shall be informed of the categories created.4.1.3.4The screening of LAGs shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.4.2PROTECTION OF PASSENGERS AND CABIN BAGGAGEThe protection of passengers and cabin baggage shall be subject to the provisions laid down in Commission Implementing Decision C(2015) 8005.4.3POTENTIALLY DISRUPTIVE PASSENGERS4.3.1An air carrier shall be notified in writing in advance by the competent authority of the plan to embark a potentially disruptive passenger on board its aircraft.4.3.2The notification shall contain the following details:(a)identity and gender of the person; and(b)reason for transportation; and(c)name and title of escorts, if provided; and(d)risk assessment by the competent authority, including reasons to escort or not; and(e)prior seating arrangement, if required; and(f)the nature of the available travel documents.The air carrier shall make this information available to the pilot in command prior to passengers boarding the aircraft.4.3.3The competent authority shall ensure that persons in lawful custody are always escorted.4.4PROHIBITED ARTICLES4.4.1Passengers shall not be permitted to carry into security restricted areas or on board an aircraft the articles listed in Attachment 4-C.4.4.2An exemption to point 4.4.1 may be granted on condition that:(a)the appropriate authority has given consent that the article may be carried; and(b)the air carrier has been informed about the passenger and the article that the passenger is carrying prior to passengers boarding the aircraft; and(c)the applicable safety rules are complied with.These articles shall then be placed in secure conditions on board aircraft.4.4.3The air carrier shall ensure that passengers are informed of the prohibited articles listed in Attachment 4-C before check-in is completed.ATTACHMENT 4-AREQUIREMENTS FOR A HAND SEARCHDetailed provisions for a hand search are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 4-BPASSENGERS AND CABIN BAGGAGETHIRD COUNTRIES, AS WELL AS OTHER COUNTRIES AND TERRITORIES TO WHICH, IN ACCORDANCE WITH ARTICLE 355 OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION, TITLE VI OF PART THREE OF THAT TREATY DOES NOT APPLY, THAT ARE RECOGNISED AS APPLYING SECURITY STANDARDS EQUIVALENT TO THE COMMON BASIC STANDARDS ON CIVIL AVIATION SECURITYAs regards passengers and cabin baggage, the following third countries, as well as other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply, have been recognised as applying security standards equivalent to the common basic standards on civil aviation security:CanadaFaroe Islands, in regard to Vagar airportGreenland, in regard to Kangerlussuaq airportGuernseyIsle of ManJerseyKingdom of Norway, in regard to Svalbard AirportMontenegroRepublic of Serbia, in regard to Belgrade Nikola Tesla AirportRepublic of Singapore, in regard to Singapore Changi AirportState of Israel, in regard to Ben Gurion International AirportUnited Kingdom of Great Britain and Northern IrelandUnited States of AmericaThe Commission shall immediately notify the appropriate authorities of the Member States if it has information indicating that security standards applied by the third country or other country or territory concerned with a significant impact on overall levels of aviation security in the Union are no longer equivalent to the common basic standards of the Union.The appropriate authorities of the Member States shall be notified without delay when the Commission has information about actions, including compensatory measures, confirming that the equivalency of relevant security standards applied by the third country or other country or territory concerned is re-established.ATTACHMENT 4-CPASSENGERS AND CABIN BAGGAGELIST OF PROHIBITED ARTICLESWithout prejudice to applicable safety rules, passengers are not permitted to carry the following articles into security restricted areas and on board an aircraft:(a)guns, firearms and other devices that discharge projectilesdevices capable, or appearing capable, of being used to cause serious injury by discharging a projectile, including:firearms of all types, such as pistols, revolvers, rifles, shotguns,toy guns, replicas and imitation firearms capable of being mistaken for real weapons,component parts of firearms, excluding telescopic sights,compressed air and CO2 guns, such as pistols, pellet guns, rifles and ball bearing guns,signal flare pistols and starter pistols,bows, cross bows and arrows,harpoon guns and spear guns,slingshots and catapults;(b)stunning devicesdevices designed specifically to stun or immobilise, including:devices for shocking, such as stun guns, tasers and stun batons,animal stunners and animal killers,disabling and incapacitating chemicals, gases and sprays, such as mace, pepper sprays, capsicum sprays, tear gas, acid sprays and animal repellent sprays;(c)objects with a sharp point or sharp edgeobjects with a sharp point or sharp edge capable of being used to cause serious injury, including:items designed for chopping, such as axes, hatchets and cleavers,ice axes and ice picks,razor blades,box cutters,knives with blades of more than 6 cm,scissors with blades of more than 6 cm as measured from the fulcrum,martial arts equipment with a sharp point or sharp edge,swords and sabres;(d)workmen's toolstools capable of being used either to cause serious injury or to threaten the safety of aircraft, including:crowbars,drills and drill bits, including cordless portable power drills,tools with a blade or a shaft of more than 6 cm capable of use as a weapon, such as screwdrivers and chisels,saws, including cordless portable power saws,blowtorches,bolt guns and nail guns;(e)blunt instrumentsobjects capable of being used to cause serious injury when used to hit, including:baseball and softball bats,clubs and batons, such as billy clubs, blackjacks and night sticks,martial arts equipment;(f)explosives and incendiary substances and devicesexplosives and incendiary substances and devices capable, or appearing capable, of being used to cause serious injury or to pose a threat to the safety of aircraft, including:ammunition,blasting caps,detonators and fuses,replica or imitation explosive devices,mines, grenades and other explosive military stores,fireworks and other pyrotechnics,smoke-generating canisters and smoke-generating cartridges,dynamite, gunpowder and plastic explosives.5.HOLD BAGGAGE5.0GENERAL PROVISIONS5.0.1Unless otherwise stated, the authority, airport operator, air carrier or entity responsible in accordance with the national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 shall ensure the implementation of the measures set out in this Chapter.5.0.2Third countries where the security standards applied are recognised as equivalent to the common basic standards as regards hold baggage are listed in Attachment 5-A.5.0.3Hold baggage arriving from a Member State where the aircraft was in transit after having arrived from a third country not listed in Attachment 5-A or from a Union airport where the relevant Member State has derogated from the common basic standards as provided for in Article 1 of Regulation (EU) No 1254/2009 shall be considered as hold baggage arriving from a third country, unless there is a confirmation that the hold baggage was screened in accordance with this Chapter.5.0.4For the purpose of this Chapter, "secured baggage" means screened departing hold baggage that is physically protected so as to prevent the introduction of any objects.5.0.5References to third countries in this Chapter and where applicable in Commission Implementing Decision C(2015) 8005 include other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply.5.0.6Hold baggage arriving from a Union airport where the relevant Member State has derogated from the common basic standards as provided for in Article 1 of Regulation (EU) No 1254/2009 shall be considered as hold baggage arriving from a third country, unless there is a confirmation that the hold baggage was screened in accordance with this Chapter.5.1SCREENING OF HOLD BAGGAGE5.1.1The following methods, either individually or in combination, shall be used to screen hold baggage:(a)a hand search; or(b)x-ray equipment; or(c)explosive detection systems (EDS) equipment; or(d)explosive trace detection (ETD) equipment; or(e)explosive detection dogs.Where the screener cannot determine whether or not the hold baggage contains any prohibited articles, it shall be rejected or rescreened to the screener's satisfaction.5.1.2A hand search shall consist of a thorough manual check of the baggage, including all its contents, so as to reasonably ensure that it does not contain prohibited articles.5.1.3Where x-ray or EDS equipment is used, any item whose density impairs the ability of the screener to analyse the contents of the baggage shall result in it being subject to another means of screening.5.1.4Screening by explosive trace detection (ETD) equipment shall consist of the analysis of samples taken from both the inside and the outside of the baggage and from its contents. The contents may also be subjected to a hand search.5.1.5The appropriate authority may create categories of hold baggage that, for objective reasons, shall be subject to special screening procedures or may be exempted from screening. The Commission shall be informed of the categories created.5.1.6The screening of hold baggage shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.5.1.7Persons screening hold baggage by x-ray or EDS equipment shall normally not spend more than 20 minutes continuously reviewing images. After each of these periods, the screener shall not review images for at least 10 minutes. This requirement shall only apply when there is an uninterrupted flow of images to be reviewed.There shall be a supervisor responsible for screeners of hold baggage in order to assure optimum team composition, quality of work, training, support and appraisal.5.2PROTECTION OF HOLD BAGGAGE5.2.1Passengers may not be allowed access to screened hold baggage, unless it is their own baggage and they are supervised to ensure that:(a)no prohibited articles as listed in Attachment 5-B are introduced into the hold baggage; or(b)no prohibited articles as listed in Attachment 4-C are removed from the hold baggage and introduced into the security restricted areas or on board an aircraft.5.2.2Hold baggage that has not been protected from unauthorised interference shall be rescreened.5.2.3The protection of hold baggage shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.5.3BAGGAGE RECONCILIATION5.3.1Identification of hold baggage5.3.1.1An air carrier shall, during the boarding process, ensure that a passenger presents a valid boarding card or equivalent corresponding to the hold baggage that was checked in.5.3.1.2An air carrier shall ensure that there is a procedure in place to identify hold baggage of passengers who did not board or left the aircraft before departure.5.3.1.3If the passenger is not on board the aircraft, the hold baggage corresponding to his boarding card or equivalent shall be considered as unaccompanied.5.3.1.4An air carrier shall ensure that each item of unaccompanied hold baggage is clearly identifiable as authorised for transport by air.5.3.2Factors beyond the passenger's control5.3.2.1The reason that the baggage became unaccompanied shall be recorded before it is loaded onto an aircraft, unless the security controls as referred to in point 5.3.3 are applied.5.3.2.2Additional detailed provisions on the factors beyond the passenger's control are laid down in Commission Implementing Decision C(2015) 8005.5.3.3Appropriate security controls for unaccompanied hold baggage5.3.3.1Unaccompanied hold baggage not covered by point 5.3.2 shall be screened by one of the methods laid down in point 5.1.1 and, where applicable, applying additional requirements laid down in Commission Implementing Decision C(2015) 8005.5.3.3.2Hold baggage that becomes unaccompanied baggage due to factors other than those referred to in point 5.3.2.2 shall be removed from the aircraft and rescreened before loading it again.5.3.3.3Additional detailed provisions for appropriate security controls for unaccompanied hold baggage are laid down in Commission Implementing Decision C(2015) 8005.5.4PROHIBITED ARTICLES5.4.1Passengers shall not be permitted to carry in their hold baggage the articles listed in Attachment 5-B.5.4.2An exemption to point 5.4.1 may be granted on condition that:(a)the appropriate authority has national rules permitting carriage of the article; and(b)the applicable safety rules are complied with.An air carrier shall ensure that the carriage of firearms in hold baggage is allowed only after an authorised and duly qualified person has determined that they are not loaded. Such firearms shall be stowed in a place not accessible to any person during the flight.5.4.3The air carrier shall ensure that passengers are informed of the prohibited articles listed in Attachment 5-B at any time before the check-in is completed.ATTACHMENT 5-AHOLD BAGGAGETHIRD COUNTRIES, AS WELL AS OTHER COUNTRIES AND TERRITORIES TO WHICH, IN ACCORDANCE WITH ARTICLE 355 OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION, TITLE VI OF PART THREE OF THAT TREATY DOES NOT APPLY, THAT ARE RECOGNISED AS APPLYING SECURITY STANDARDS EQUIVALENT TO THE COMMON BASIC STANDARDS ON CIVIL AVIATION SECURITYAs regards hold baggage, the following third countries, as well as other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply, have been recognised as applying security standards equivalent to the common basic standards on civil aviation security:CanadaFaroe Islands, in regard to Vagar airportGreenland, in regard to Kangerlussuaq airportGuernseyIsle of ManJerseyKingdom of Norway, in regard to Svalbard AirportMontenegroRepublic of Serbia, in regard to Belgrade Nikola Tesla AirportRepublic of Singapore, in regard to Singapore Changi AirportState of Israel, in regard to Ben Gurion International AirportUnited Kingdom of Great Britain and Northern IrelandUnited States of AmericaThe Commission shall notify without delay the appropriate authorities of the Member States if it has information indicating that security standards applied by the third country or other country or territory concerned with a significant impact on overall levels of aviation security in the Union are no longer equivalent to the common basic standards of the Union.The appropriate authorities of the Member States shall be notified without delay when the Commission has information about actions, including compensatory measures, confirming that the equivalency of relevant security standards applied by the third country or other country or territory concerned is re-established.ATTACHMENT 5-BHOLD BAGGAGELIST OF PROHIBITED ARTICLESPassengers are not permitted to carry the following articles in their hold baggage:explosives and incendiary substances and devicesexplosives and incendiary substances and devices capable of being used to cause serious injury or to pose a threat to the safety of aircraft, including:ammunition,blasting caps,detonators and fuses,mines, grenades and other explosive military stores,fireworks and other pyrotechnics,smoke-generating canisters and smoke-generating cartridges,dynamite, gunpowder and plastic explosives.6.CARGO AND MAIL6.0GENERAL PROVISIONS6.0.1The authority, airport operator, air carrier or entity as defined in this Chapter shall ensure the implementation of the measures set out in this Chapter.6.0.2Assembled explosive and incendiary devices that are not carried in accordance with the applicable safety rules shall be considered as prohibited articles in consignments of cargo and mail.6.0.3References to third countries in this Chapter and where applicable in Commission Implementing Decision C(2015) 8005 include other countries and territories to which, in accordance with Article 355 of the Treaty on the Functioning of the European Union, Title VI of Part Three of that Treaty does not apply.6.0.4For the purposes of this Annex, "Pre-Loading Advance Cargo Information" or "PLACI" means the process of first risk analysis for aviation security purposes of goods to be brought into the customs territory of the UnionAs Iceland is not part of the customs territory of the Union, for the purposes of point 6.8.7 of this Annex, Iceland is considered a third country. by air.6.0.5.For the purposes of this Annex, "approved haulier" means an entity that ensures, on behalf of a regulated agent or known consignor, the surface transport and protection of air cargo and mail consignments to which security controls have previously been applied and whose procedures meet common security rules and standards sufficient to maintain the integrity of the consignments.6.0.6.For the purposes of this Annex, "limited storage" means the overall time strictly necessary for an approved haulier to perform the transhipment of cargo and mail from one means of transport onto the one used for the subsequent portion of the surface transport of that shipment.For the purposes of the definition in the first paragraph, the "strictly necessary time":(a)includes the time needed to carry out the related handling operations and complete the administrative formalities;(b)where logistically necessary, includes a brief storage of the consignment between the two means of transport during which the consignment is kept protected from unauthorised interference in accordance with points 6.5.2, 6.6.1 and 6.6.2;(c)does not include any storage operations other than those referred to in point (b), unless the haulier is also approved as regulated agent.6.1SECURITY CONTROLS — GENERAL PROVISIONS6.1.1All cargo and mail shall be screened by a regulated agent before being loaded on to an aircraft, unless:(a)the required security controls have been applied to the consignment by a regulated agent and the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading; or(b)the required security controls have been applied to the consignment by a known consignor and the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading; or(c)the required security controls have been applied to the consignment by an account consignor, the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading, and it is not carried on a passenger aircraft; or(d)the consignment is exempt from screening and has been protected from unauthorised interference from the time that it became identifiable air cargo or identifiable air mail and until loading.6.1.2Where there is any reason to believe that a consignment to which security controls have been applied has been tampered with or has not been protected from unauthorised interference from the time that those controls were applied, it shall be screened by a regulated agent before being loaded on to an aircraft. Consignments which appear to have been significantly tampered with or which are otherwise suspect shall be treated as high risk cargo or mail (HRCM) in accordance with point 6.7.6.1.3A person with unescorted access to identifiable air cargo or identifiable air mail to which the required security controls have been applied shall have successfully completed either a background check or a pre-employment check in accordance with point 11.1.6.1.3A regulated agent who rejects a consignment due to high-risk reasons shall ensure that the consignment and the accompanying documentation are marked as high risk cargo and mail before the consignment is returned to the person representing the entity delivering it. Such consignment shall not be loaded on to an aircraft unless it is treated by another regulated agent in accordance with point 6.7.6.1.4.Access into the security restricted areas of cargo and mail shall be granted only after having established to which of the following categories the entity transporting the consignment from landside belongs:(a)a regulated agent;(b)a known consignor;(c)a haulier appointed in accordance with point 6.6.1.1(c), transporting consignments to which security controls have previously been applied;(d)an approved haulier;(e)neither of the entities referred to in points (a) to (d).Point (c) shall apply until 31 December 2026.6.1.5Where point 6.1.4(c) applies, a copy of the signed declaration as contained in Attachment 6-E shall be made available to the regulated agent, air carrier or airport operator granting access into the security restricted areas, unless either of the following applies:(a)the haulier is itself a regulated agent;(b)the transport is performed on behalf of the receiving regulated agent or air carrier in the security restricted areas.The presentation by the haulier of a copy of the signed declaration in Attachment 6-E may be replaced by an equivalent mechanism of prior notification to the access point, ensured either by the off-airport known consignor or regulated agent on whose behalf the transport is performed, or by the receiving regulated agent or air carrier in the security restricted areas.6.1.6Cargo or mail consignments to which security controls have not been previously applied may be allowed into the security restricted areas, provided they are subject to the implementation of one of the following options:(a)screened before entry, in accordance with point 6.2, and under the responsibility of the receiving regulated agent or air carrier;(b)escorted to the premises of the regulated agent or of the air carrier located in the security restricted areas, under their responsibility.Upon delivery, such consignments shall be kept protected from unauthorised interference, until they are subjected to screening.The personnel escorting such consignments or protecting them from unauthorised interference, shall have been recruited in accordance with point 11.1.1, and trained in accordance with at least point 11.2.3.9.6.2SCREENING6.2.1Screening6.2.1.1When screening cargo or mail:(a)the means or method most likely to detect prohibited articles shall be employed, taking into consideration the nature of the consignment; and(b)the means or method employed shall be of a standard sufficient to reasonably ensure that no prohibited articles are concealed in the consignment.6.2.1.2Where the screener cannot be reasonably sure that no prohibited articles are contained in the consignment, the consignment shall be rejected or be rescreened to the screener's satisfaction.6.2.1.3The screening of cargo and mail shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.6.2.1.4Persons screening cargo by x-ray or EDS equipment shall normally not spend more than 20 minutes continuously reviewing images. After each of these periods, the screener shall not review images for at least 10 minutes. This requirement shall only apply when there is an uninterrupted flow of images to be reviewed.6.2.1.5Cargo and mail shall be screened by at least one of the following methods in accordance with Attachment 6-J:(a)hand search;(b)x-ray equipment;(c)EDS equipment;(d)explosive detection dogs (EDD);(e)ETD equipment;(f)visual check;(g)metal detection equipment (MDE);(h)EVD equipment.Where the screener cannot determine whether or not the cargo or mail contains any prohibited articles, it shall be rejected or rescreened to the screener's satisfaction.6.2.1.6If agreed by the appropriate authority and notified to the Commission, other appropriate security controls may be applied only where it is not possible to apply any of the other means or methods specified in point 6.2.1.5 owing to the nature of the consignment.6.2.2Exemptions from screeningProvisions for exemptions from screening are laid down in Commission Implementing Decision C(2015) 8005.6.3REGULATED AGENTS6.3.1Approval of regulated agents6.3.1.1Regulated agents shall be approved by the appropriate authority.The approval as a regulated agent shall be site specific.Any entity that applies security controls as referred to in point 6.3.2 shall be approved as a regulated agent. This includes third party logistics providers responsible for integrated warehousing and transportation services, air carriers and handling agents.A regulated agent may subcontract one or more of the following:(a)any of the security controls referred to in point 6.3.2 to another regulated agent;(b)any of the security controls referred to in point 6.3.2 to another entity, where the controls are carried out at the regulated agent's own site or at an airport, and are covered by the regulated agent's or airport security programme;(c)any of the security controls referred to in point 6.3.2 to another entity, where the controls are carried out elsewhere than at the regulated agent's own site or at an airport, and the entity has been certified or approved and listed for the provision of these services by the appropriate authority;(d)the protection and transportation of consignments to a haulier that meets the requirements of points 6.5 and 6.6, as applicable.6.3.1.2The following procedure shall apply for the approval of regulated agents:(a)the applicant shall seek approval from the appropriate authority of the Member State in which the sites included in the application are located.The applicant shall submit a security programme to the appropriate authority concerned. The programme shall describe the methods and procedures which are to be followed by the agent in order to comply with the requirements of Regulation (EC) No 300/2008 and its implementing acts. The programme shall also describe how compliance with these methods and procedures is to be monitored by the agent itself. An air carrier security programme which describes the methods and procedures to be followed by the air carrier in order to comply with the requirements of Regulation (EC) No 300/2008 and its implementing acts shall be regarded as meeting the requirement for a regulated agent security programme.The applicant shall also submit the "Declaration of commitments — regulated agent" as contained in Attachment 6-A. This declaration shall be signed by the applicant's legal representative or by the person responsible for security.The signed declaration shall clearly state the location of the site or sites to which it refers and be retained by the appropriate authority concerned;(b)the appropriate authority or an EU aviation security validator acting on its behalf shall examine the security programme before carrying out an on-site verification of the sites specified in order to assess compliance of the applicant with the requirements of Regulation (EC) No 300/2008 and the implementing acts adopted on its basis.Except for the screening requirements laid down in point 6.2, an examination of the site of the applicant by the relevant customs authority in accordance with Article 29 of Commission Implementing Regulation (EU) 2015/2447Commission Implementing Regulation (EU) 2015/2447 of 24 November 2015 laying down detailed rules for implementing certain provisions of Regulation (EU) No 952/2013 of the European Parliament and of the Council laying down the Union Customs Code (OJ L 343, 29.12.2015, p. 558). shall be considered as an on-site verification where it is carried out not earlier than 3 years before the date on which the applicant seeks approval as a regulated agent. The AEO authorisation and the relevant assessment of the customs authorities shall be made available by the applicant for further inspection;(c)if the appropriate authority is satisfied with the information provided under points (a) and (b), it shall ensure that the necessary details of the agent are entered into the "Union database on supply chain security" not later than the next working day. When making the database entry the appropriate authority shall give each approved site a unique alphanumeric identifier in the standard format.If the appropriate authority is not satisfied with the information provided under points (a) and (b) then the reasons shall promptly be notified to the entity seeking approval as a regulated agent;(d)a regulated agent shall not be considered as approved until its details are listed in the "Union database on supply chain security".6.3.1.3A regulated agent shall designate at least one person at each site who shall be responsible for the implementation of the submitted security programme. This person shall have successfully completed a background check in accordance with point 11.1.6.3.1.4A regulated agent shall be re-validated at regular intervals not exceeding 5 years. This shall include an on-site verification in order to assess whether the regulated agent still complies with the requirements of Regulation (EC) No 300/2008 and its implementing acts.An inspection at the premises of the regulated agent by the appropriate authority in accordance with its national quality control programme may be considered as an on-site verification, provided that it covers all the requirements necessary for approval.Except for the screening requirements laid down in point 6.2, an examination of the site of the regulated agent by the relevant customs authority carried out in accordance with Article 29 of Implementing Regulation (EU) 2015/2447 shall be considered as an on-site verification.6.3.1.5Where the appropriate authority is no longer satisfied that the regulated agent complies with the requirements of Regulation (EC) No 300/2008, it shall withdraw the status of regulated agent for the specified site or sites.Immediately after withdrawal, and in all cases within 24 hours of withdrawal, the appropriate authority shall ensure that the former regulated agent’s change of status is indicated in the "Union database on supply chain security".Where the regulated agent is no longer a holder of an AEO authorisation referred to in (b) of Article 38(2) of Regulation (EU) No 952/2013 of the European Parliament and of the CouncilRegulation (EU) No 952/2013 of the European Parliament and of the Council of 9 October 2013 laying down the Union Customs Code (OJ L 269, 10.10.2013, p. 1). and in Article 33 of Implementing Regulation (EU) 2015/2447 or where its AEO authorisation is suspended due to non-compliance with point (e) of Article 39 of Regulation (EU) No 952/2013 and Article 28 of Implementing Regulation (EU) 2015/2447, the appropriate authority shall take appropriate action to ensure compliance of the regulated agent with the requirements of Regulation (EC) No 300/2008.The regulated agent shall inform the appropriate authority of any changes related to its AEO authorisation referred to in point (b) of Article 38(2) of Regulation (EU) No 952/2013 and in Article 33 of Regulation (EU) 2015/2447.6.3.1.6Without prejudice to the right of each Member State to apply more stringent measures in accordance with Article 6 of Regulation (EC) No 300/2008, a regulated agent approved in accordance with point 6.3 of this Annex shall be recognised in all Member States.6.3.1.7The requirements of point 6.3.1, other than 6.3.1.2(d), shall not apply when the appropriate authority itself is to be approved as a regulated agent.6.3.1.8The appropriate authority shall make available to the customs authority any information related to the status of a regulated agent which could be relevant to the holding an AEO authorisation referred to in point (b) of Article 38(2) of Regulation (EU) No 952/2013 and in Article 33 of Implementing Regulation (EU) 2015/2447. That information shall include the information related to new approvals of regulated agents, withdrawal of the regulated agent status, revalidation and inspections, verification schedules and outcomes of those assessments.The modalities for that exchange of information shall be established between the appropriate authority and the national customs authorities.6.3.1.9.Upon request by the appropriate authority, the regulated agent shall provide documentary evidence of the existing agreements in place with any approved haulier that provides transport on its behalf. If required by the approving appropriate authority, the regulated agent shall additionally maintain a list containing, for each approved haulier with whom it has entered into a transport agreement, at least the unique alphanumeric identifier, the initial date of validity of the agreement and, if applicable, its expiry date.The list shall be available for inspection by the appropriate authority.6.3.2Security controls to be applied by a regulated agent6.3.2.1When accepting any consignments, a regulated agent shall establish whether the entity from which it receives the consignments is a regulated agent or a known consignor or neither of those.6.3.2.2The regulated agent or air carrier shall ask the person delivering any consignments to present an identity card, passport, driving licence or other document, which includes his or her photograph and which has been issued or is recognised by the national authority. The card or document shall be used to establish the identity of the person delivering the consignments.6.3.2.3The regulated agent shall ensure that consignments to which not all required security controls have previously been applied are:(a)screened in accordance with point 6.2 or 6.7, as appropriate; or(b)accepted for storage under the regulated agent's exclusive responsibility, not identifiable as shipment for carriage on an aircraft before selection, and selected autonomously without any intervention of the consignor or any person or entity other than those appointed and trained by the regulated agent for that purpose.Point (b) may only be applied if it is unpredictable for the consignor that the consignment is to be transported by air.6.3.2.4After the security controls referred to in points from 6.3.2.1 to 6.3.2.3 of this Annex and point 6.3 of the Annex to Commission Implementing Decision C(2015) 8005 have been applied, the regulated agent shall ensure the protection of cargo and mail in accordance with point 6.6.6.3.2.5After the security controls referred to in points 6.3.2.1 to 6.3.2.4 have been applied, the regulated agent shall ensure that any consignment tendered to an air carrier or another regulated agent is accompanied by appropriate documentation, either in the form of an air waybill or in a separate declaration and either in an electronic format or in writing.6.3.2.6The documentation referred to in point 6.3.2.5 shall be available for inspection by the appropriate authority at any point before the consignment is loaded on to an aircraft and afterwards for the duration of the flight or for 24 hours, whichever is the longer and shall provide all of the following information:(a)the unique alphanumeric identifier of the regulated agent as received from the appropriate authority;(b)a unique identifier of the consignment, such as the number of the (house or master) air waybill;(c)the content of the consignment, except for consignments listed in points 6.2.1(d) and (e) of Commission Implementing Decision C(2015) 8005;(d)the security status of the consignment, stating one of the following:"SPX", meaning secure for passenger, all-cargo and all-mail aircraft;"SHR", meaning secure for passenger, all-cargo and all-mail aircraft in accordance with high risk requirements;(e)the reason why the security status was issued, stating:(i)"KC", meaning received from known consignor; or(ii)"AC", meaning received from account consignor; or(iii)"RA", meaning selected by a regulated agent; or(iv)the means or method of screening used, as follows:hand search (PHS);X-ray equipment (XRY);EDS equipment (EDS);explosive detection dogs (EDD);ETD equipment (ETD);visual check (VCK);metal detection equipment (CMD);EVD equipment (EVD);any other method (AOM) in accordance with point 6.2.1.6 where the method used shall be specified; or(v)the grounds for exempting the consignment from screening;(f)the name of the person who issued the security status, or an equivalent identification, and the date and time of issue;(g)the unique identifier received from the appropriate authority, of any regulated agent who has accepted the security status given to a consignment by another regulated agent, including during transfer operations.A regulated agent tendering consignments to another regulated agent or air carrier may also decide to only transmit the information required under points (a) to (e) and (g) and to retain the information required under point (f) for the duration of the flight(s) or for 24 hours, whichever is the longer.Transfer cargo or mail for which the air carrier, or the regulated agent operating on its behalf, is unable to confirm in the accompanying documentation the information required by this point, or by point 6.3.2.7 as applicable, shall be subject to screening before being loaded on board an aircraft for the subsequent flight.6.3.2.7In the case of consolidations, the requirements of points 6.3.2.5 and 6.3.2.6 shall be considered as met if:(a)the regulated agent performing the consolidation retains the information required under points 6.3.2.6(a) to (g) for each individual consignment for the duration of the flight(s) or for 24 hours, whichever is the longer; and(b)the documentation accompanying the consolidation includes the alphanumeric identifier of the regulated agent who performed the consolidation, a unique identifier of the consolidation and its security status.Point (a) shall not be required for consolidations that are always subject to screening or exempted from screening in line with points 6.2.1(d) and (e) of Commission Implementing Decision C(2015) 8005 if the regulated agent gives the consolidation a unique identifier and indicates the security status and a single reason why this security status was issued.6.3.2.8When accepting consignments to which not all required security controls have previously been applied, the regulated agent may also elect not to apply the security controls as referred to in point 6.3.2, but to hand the consignments over to another regulated agent to ensure the application of these security controls.6.3.2.9.A regulated agent shall ensure that all staff are recruited in accordance with the requirements of Chapter 11 and appropriately trained in accordance with the relevant job specifications. For the purposes of training, staff with unsupervised access to identifiable air cargo or identifiable air mail to which the required security controls have been applied shall be considered as staff implementing security controls. Drivers with no access or with supervised access to identifiable air cargo or identifiable air mail to which the required security controls have been applied shall at least receive security awareness training in accordance with point 11.2.7.6.3.2.10.Security controls to be applied by a regulated agent shall also be subject to the additional provisions laid down in Implementing Decision C(2015) 8005.6.4KNOWN CONSIGNORS6.4.1Approval of known consignors6.4.1.1Known consignors shall be approved by the appropriate authority.The approval as a known consignor shall be site specific.6.4.1.2The following procedure shall apply for the approval of known consignors:(a)the applicant shall seek approval from the appropriate authority of the Member State in which its site is located.The applicant shall submit a security programme to the appropriate authority concerned. The programme shall describe the methods and procedures which are to be followed by the consignor in order to comply with the requirements of Regulation (EC) No 300/2008 and its implementing acts. The programme shall also describe how compliance with these methods and procedures is to be monitored by the consignor itself.The applicant shall be provided with the "Guidance for known consignors" as contained in Attachment 6-B and the "Validation checklist for known consignors" as contained in Attachment 6-C;(b)the appropriate authority, or EU aviation security validator acting on its behalf, shall examine the security programme and then make an on-site verification of the sites specified in order to assess whether the applicant complies with the requirements of Regulation (EC) No 300/2008 and its implementing acts.In order to assess whether the applicant complies with these requirements, the appropriate authority, or EU aviation security validator acting on its behalf, shall make use of the "Validation checklist for known consignors" as contained in Attachment 6-C. This checklist includes a declaration of commitments which shall be signed by the applicant's legal representative or by the person responsible for security at the site.Once the validation checklist is completed, the information contained in the checklist shall be handled as classified information.The signed declaration shall be retained by the appropriate authority concerned or retained by the EU aviation security validator and made available to the appropriate authority concerned;(c)an examination of the site of the applicant by the relevant customs authority in accordance with Article 29 of Implementing Regulation (EU) 2015/2447 shall be considered as an on-site verification where it is carried out not earlier than 3 years before the date on which the applicant seeks approval as a known consignor. In those cases, the applicant shall complete the information required in Part One of the "Validation checklist for known consignors" as contained in Attachment 6-C and send it to the appropriate authority jointly with the declaration of commitments which shall be signed by the applicant’s legal representative or by the person responsible for security at the site.The AEO authorisation and the relevant assessment of the customs authorities shall be made available by the applicant for further inspection.The signed declaration shall be retained by the appropriate authority concerned or retained by the EU aviation security validator and made available on request to the appropriate authority concerned;(d)if the appropriate authority is satisfied with the information provided under points (a) and (b) or (a) and (c), as applicable, it shall ensure that the necessary details of the consignor are entered into the "Union database on supply chain security" not later than the next working day. When making the database entry the appropriate authority shall give each approved site a unique alphanumeric identifier in the standard format.If the appropriate authority is not satisfied with the information provided under points (a) and (b) or (a) and (c), as applicable, then the reasons shall promptly be notified to the entity seeking approval as a known consignor;(e)a known consignor shall not be considered as approved until its details are listed in the "Union database on supply chain security".6.4.1.3A known consignor shall designate at least one person at each site who shall be responsible for the application and supervision of the implementation of security controls at that site. This person shall have successfully completed a background check in accordance with point 11.1.6.4.1.4A known consignor shall be re-validated at regular intervals not exceeding 5 years. This shall include an on-site verification in order to assess whether the known consignor still complies with the requirements of Regulation (EC) No 300/2008 and its implementing acts.An inspection at the premises of the known consignor by the appropriate authority in accordance with its national quality control programme may be considered as an on-site verification, provided that it covers all areas specified in the checklist of Attachment 6-C.An examination of the site of the known consignor by the relevant customs authority in accordance with Article 29 of Implementing Regulation (EU) 2015/2447 shall be considered as an on-site verification.6.4.1.5Where the appropriate authority is no longer satisfied that the known consignor complies with the requirements of Regulation (EC) No 300/2008, it shall withdraw the status of known consignor for the specified site(s).Immediately after withdrawal, and in all cases within 24 hours of withdrawal, the appropriate authority shall ensure that the known consignor’s change of status is indicated in the "Union database on supply chain security".Where the known consignor is no longer a holder of an AEO authorisation referred to in point (b) of Article 38(2) of Regulation (EU) No 952/2013 and in Article 33 of Implementing Regulation (EU) 2015/2447 or where its AEO authorisation is suspended due to non-compliance with point (e) of Article 39 of Regulation (EU) No 952/2013 and Article 28 of Implementing Regulation (EU) 2015/2447, the appropriate authority shall take appropriate action to ensure compliance of the known consignor with the requirements of Regulation (EC) No 300/2008.The known consignor shall inform the appropriate authority of any changes related to its AEO authorisation referred to in point (b) of Article 38(2) of Regulation (EU) No 952/2013 and in Article 33 of Implementing Regulation (EU) 2015/2447.6.4.1.6Without prejudice to the right of each Member State to apply more stringent measures in accordance with Article 6 of Regulation (EC) No 300/2008, a known consignor approved in accordance with point 6.4 of this Annex shall be recognised in all Member States.Known consignors approved in accordance with point 6.4.1.2(d) of this Annex shall also be subject to the additional provision laid down in point 6.4 of Commission Implementing Decision C(2015) 8005.6.4.1.7The appropriate authority shall make available to the customs authority any information related to the status of a known consignor which could be relevant to the holding an AEO authorisation referred to in point (b) of Article 38(2) of Regulation (EU) No 952/2013 and in Article 33 of Implementing Regulation (EU) 2015/2447. That information shall include the information related to new approvals of known consignors, withdrawal of the known consignor status, revalidation and inspections, verification schedules and outcomes of those assessments.The modalities for that exchange of information shall be established between the appropriate authority and the national customs authorities.6.4.1.8.Upon request by the appropriate authority, the known consignor shall provide documentary evidence of the existing agreements in place with any approved haulier that provides transport on its behalf. If required by the approving appropriate authority, the known consignor shall additionally maintain a list containing, for each approved haulier with whom it has entered into a transport agreement, at least the unique alphanumeric identifier, the initial date of validity of the agreement and, if applicable, its expiry date.The list shall be available for inspection by the appropriate authority.6.4.2Security controls to be applied by a known consignor6.4.2.1A known consignor shall ensure that:(a)there is a level of security on the site or at the premises sufficient to protect identifiable air cargo and identifiable air mail from unauthorised interference; and(b)all staff implementing security controls and all staff with unsupervised access to identifiable air cargo or identifiable air mail to which the required security controls have been applied are recruited in accordance with the requirements of Chapter 11 and have received security training in accordance with point 11.2.3.9. Drivers with no access or with supervised access to identifiable air cargo or identifiable air mail to which the required security controls have been applied shall at least receive security awareness training in accordance with point 11.2.7; and(c)during production, packing, storage, despatch and/or transportation, as appropriate, identifiable air cargo and identifiable air mail is protected from unauthorised interference or tampering.When, for whatever reason, these security controls have not been applied to a consignment, or where the consignment has not been originated by the known consignor for its own account, the known consignor shall clearly identify this to the regulated agent so that point 6.3.2.3 can be applied.6.4.2.2The known consignor shall accept that consignments to which the appropriate security controls have not been applied are screened in accordance with point 6.2.1.6.4.2.3.Security controls to be applied by a known consignor shall also be subject to the additional provisions laid down in Implementing Decision C(2015) 8005.6.5APPROVED HAULIERS6.5.1.Approval of hauliers6.5.1.1.Hauliers shall be approved by the appropriate authority.The applicant, either a natural or legal person, shall seek approval from the appropriate authority of the Member State in which the residential or registered address of the applicant, whichever applies, is located. Foreign branches of the same applicant, or of its subsidiaries, shall seek approval from the appropriate authority of the Member State where the registered address of that foreign branch or subsidiary is located.6.5.1.2The applicant shall submit a security programme to the appropriate authority concerned. The programme shall describe the methods and procedures which are to be followed by the haulier in order to comply with the requirements of Regulation (EC) No 300/2008 and its implementing acts. It shall include detailed provisions and procedures at least covering:(1)general information, including organisation, person responsible for security, quality control, cooperation with authorities, reporting and other plans and instructions;(2)protection of cargo during collection, handling, limited storage, transport and delivery;(3)recruitment and training of staff, including training records and evidence of successful completion of background checks as applicable;(4)measures to prevent an unlawful interference in respect of air cargo and mail consignments to which security controls have been applied and actions to be taken in the event of such interference.The programme shall also describe how compliance with those provisions and procedures is to be monitored by the haulier itself.The programme shall be drawn up by using the standardised template set out in Attachment 6-K – Security programme of the approved haulier. Entities seeking approval that plan to perform haulier operations in a Member State different from that where they are registered and approved shall have their security programme drawn up also in English.The applicant shall also submit the "Declaration of commitments – approved haulier" as set out in Attachment 6-D. That declaration shall be signed by the applicant’s legal representative or by the person responsible for security.The signed declaration shall clearly state the location or the locations to which it refers and be kept by the appropriate authority concerned.6.5.1.3.After the submission of the security programme and its successful assessment establishing relevance and completeness thereof, the applicant shall be subject to an on-site verification, in order to assess compliance with the requirements of Regulation (EC) No 300/2008 and its implementing acts. The on-site verification shall include the monitoring of the relevant operations and procedures implemented by the haulier without deficiencies, during collection, handling, limited storage, transport and delivery of consignments, as applicable. The on-site verification shall cover at least one of the operational locations belonging to the haulier’s network.The appropriate authority shall specify in its national civil aviation security programme referred to in Article 10 of Regulation (EC) No 300/2008 if the assessment of the security programme and the on-site verification shall be performed by the authority itself or by an EU aviation security validator acting on its behalf.At the conclusion of the on-site verification, the appropriate authority, or the EU aviation security validator acting on its behalf, shall draft a validation report by using the standardised checklist set out in Attachment 6-L.If the on-site verification is performed by an EU aviation security validator, the validation report and the independence declaration – EU aviation security validator set out in Attachment 11-A shall be submitted to the appropriate authority within not more than one month from the on-site visit.If applicable and necessary in order to monitor the relevant operations and procedures implemented by the haulier, the approving Member State may request the assistance and support of the appropriate authority of another Member State where certain operations take place. With the consent of the approving Member State, an on-site verification of those operations may be performed by an EU aviation security validator acting on behalf of the appropriate authority of the Member State where certain operations take place. The concerned Member States shall coordinate the timely performance of that on-site verification, agree on its extent and content, and establish modalities for the exchange of information on the outcomes thereof. In such case, the validation report covering these operations, consisting of the checklist set out in Attachment 6-L, and where applicable accompanied by the independence declaration – EU aviation security validator set out in Attachment 11-A, shall be:(a)drawn up in English or in another Union official language, as agreed between the concerned Member States;(b)submitted to the approving appropriate authority within not more than one month from the on-site visit.Once the approving appropriate authority has successfully completed the steps referred to in this point and determined that the applicant complies with the requirements of Regulation (EC) No 300/2008 and its implementing acts, it shall grant the status of approved haulier for a maximum period of five years. In doing so, the appropriate authority shall ensure that the necessary details of the haulier are entered into the "Union database on supply chain security" not later than the next working day. When making the database entry the appropriate authority shall give each registered address a unique alphanumeric identifier in the standard format.A haulier shall not be considered approved until its details are listed in the "Union database on supply chain security".6.5.1.4.As an alternative to the procedure laid down in point 6.5.1.3 and only in case of first approval, after the successful assessment of the security programme establishing its relevance and completeness, the appropriate authority may subject the applicant to a documentation-based audit consisting of a thorough interview with the person designated as responsible for the implementation of the security programme and the relevant operations and procedures implemented. If the appropriate authority determines that the applicant is in compliance with the requirements of Regulation (EC) No 300/2008 and its implementing acts, it shall grant the status of approved haulier for a maximum and non-renewable period of one year, within which the haulier shall be subject to an on-site verification, as set out in point 6.5.1.3.After the completion of the on-site verification, if the appropriate authority determines that that the applicant is in compliance with the requirements of Regulation (EC) No 300/2008 and its implementing acts, it shall grant the status of approved haulier for a maximum period of five years.If the on-site verification does not take place within one year time for reasons beyond the haulier’s responsibility, the approving appropriate authority may extend the status for a period not exceeding three months. At the end of the extension period, the appropriate authority shall suspend the status of the haulier and not re-activate it until the on-site verification is successfully completed.6.5.1.5.If the appropriate authority is not satisfied with the information provided and assessed under points 6.5.1.2, 6.5.1.3 and 6.5.1.4, as applicable, then it shall promptly notify the reasons to the entity seeking approval as an approved haulier.6.5.1.6.An approved haulier shall designate at least one person who shall be responsible for the implementation of the submitted security programme and the relevant operations and procedures implemented. That person shall have successfully completed an enhanced background check in accordance with point 11.1.1(b).6.5.1.7.An approved haulier shall be subject to a reapproval procedureat regular intervals not exceeding 5 years in order to assess whether it still complies with the requirements of Regulation (EC) No 300/2008 and its implementing acts. The procedure shall include an examination of the security programme and an on-site verification in accordance with point 6.5.1.3.An inspection by the approving appropriate authority in accordance with its national quality control programme may be considered an on-site verification provided that it covers all the requirements necessary for approval.6.5.1.8.Where the approving appropriate authority or another appropriate authority identifies deficiencies in the implementation of the haulier operations, it shall promptly inform the haulier thereof and request to rectify the deficiencies. Where the rectification is not achieved within a reasonable timeframe or the deficiencies are deemed to have a significant impact on the security of the supply chain, the approving appropriate authority shall suspend or withdraw the status of approved haulier, as appropriate.Where the appropriate authority that has granted the approval is no longer satisfied that the approved haulier complies with the requirements of Regulation (EC) No 300/2008 and its implementing acts, it shall withdraw the status of approved haulier.Immediately after withdrawal, and in any case within 24 hours of the withdrawal, the approving appropriate authority shall ensure that the approved haulier’s change of status is indicated in the "Union database on supply chain security".6.5.1.9.An approved haulier, approved in accordance with point 6.5 of this Annex, shall be recognised as such in all Member States.6.5.2.Security controls to be applied by an approved haulier6.5.2.1.An approved haulier shall ensure that:(a)at its premises and at the locations where operations and procedures are implemented there is a level of security sufficient to protect identifiable air cargo and identifiable air mail to which security controls have previously been applied;(b)all staff who perform transport of cargo and mail have received general security awareness training in accordance with point 11.2.7;(c)all staff referred to in point (b) who are also granted unsupervised access to cargo and mail to which the required security controls have been applied, have received security training in accordance with point 11.2.3.9 and successfully completed a background check in accordance with point 11.1.2(b);(d)identifiable air cargo and identifiable air mail to which security controls have previously been applied is protected from unauthorised interference or tampering during collection, handling, limited storage, transport and delivery.6.5.2.2In order to ensure that consignments to which the required security controls have been applied are protected from unauthorised interference during the operations performed by the approved haulier, all the following requirements shall apply:(a)the consignments shall be packed or sealed by the regulated agent or known consignor so as to ensure that any tampering would be evident. Where this is not possible, alternative protection measures that ensure the integrity of the consignment shall be taken;(b)the load compartment shall be searched immediately prior to loading and the integrity of that search shall be maintained until loading is completed;(c)the cargo load compartment of the vehicle in which the consignments are to be transported shall be locked or sealed or curtain sided vehicles shall be secured with TIR cords so as to ensure that any tampering would be evident, or the load area of flatbed vehicles shall be kept under observation;(d)each driver shall carry an identity card, passport, driving licence or other document, containing a photograph of the person, which has been issued or recognised by the national authorities. The card or document shall be used to establish the identity of the person receiving or delivering the consignments;(e)drivers shall not make unscheduled stops between collection and delivery. Where that is unavoidable, the driver shall check the security of the load and the integrity of locks or seals, or both, on their return. If the driver discovers any evidence of interference, they shall notify both their supervisor and the recipient of the air cargo or mail;(f)transport shall not be subcontracted to a third party, unless the third party is itself an approved haulier in accordance with point 6.5 or a regulated agent in accordance with point 6.3;(g)no other services of handling air cargo (such as limited storage or protection) shall be subcontracted to any other party other than a regulated agent.6.5.3.Date of application6.5.3.1As from 1 January 2027, surface transport within the Union of air cargo and mail consignments to which security controls have previously been applied, including transport by means of a vehicle under an air waybill and a flight number of the air carrier on whose behalf the transport is carried out, in accordance with the air cargo road feeder service model, shall be performed only by:(a)a regulated agent, with its own means and resources as described in its security programme and confirmed during the on-site verification in the approval process;(b)a known consignor, for cargo and mail originated by itself, with its own means and resources as described in its security programme and confirmed during the on-site verification in the approval process;(c)a haulier who has been approved by an appropriate authority in accordance with point 6.5. and has entered into a transport agreement either with the regulated agent or known consignor on whose behalf the transport is performed, or in the case of an air cargo road feeder service activity, directly with the relevant air carrier on whose behalf the transport is carried out.The first paragraph shall not apply to transportation within security restricted areas at airports.6.6PROTECTION OF CARGO AND MAIL6.6.1Protection of cargo and mail during transportation6.6.1.1In order to ensure that consignments to which the required security controls have been applied are protected from unauthorised interference during transportation, all the following requirements shall apply:(a)the consignments shall be packed or sealed by the regulated agent or known consignor so as to ensure that any tampering would be evident; where this is not possible, alternative protection measures that ensure the integrity of the consignment shall be taken;(b)the cargo load compartment of the vehicle in which the consignments are to be transported shall be locked or sealed or curtain sided vehicles shall be secured with TIR cords so as to ensure that any tampering would be evident, or the load area of flatbed vehicles shall be kept under observation;(c)the haulier declaration as contained in Attachment 6-E shall be agreed by the haulier who has entered into the transport agreement with the regulated agent or known consignor, unless the haulier is itself approved as a regulated agent.The signed declaration shall be retained by the regulated agent or known consignor on whose behalf the transport is carried out. On request, a copy of the signed declaration shall also be made available to the regulated agent or air carrier receiving the consignment or to the appropriate authority concerned.Where the haulier has been approved by an appropriate authority in accordance with point 6.5, the haulier declaration referred to in the first paragraph, point (c), of this point, may be replaced by verification of the status of the approved haulier in the "Union database on supply chain security".The first paragraph, point (c), shall apply until 31 December 2026.6.6.1.2Point 6.6.1.1(b) and (c) shall not apply during airside transportation.6.6.1.3The haulier shall ensure that staff collecting, carrying, storing and delivering air cargo and mail to which security controls have been applied undergoes at least the following:(a)a check of the personal integrity, consisting of the verification of the identity and of the curriculum vitae and/or provided references;(b)general security awareness training, in accordance with point 11.2.7.6.6.1.4Any of the haulier’s staff granted unsupervised access to cargo and mail while performing any of the functions referred to in point 6.6.1.3, or while implementing any of the security controls set out in this Chapter shall:(a)have successfully completed a background check;(b)undergo security training, in accordance with point 11.2.3.9.6.6.1.5Where a haulier uses the services of another company to perform one or more of the functions referred to in point 6.6.1.3, such other company shall fulfil the following conditions:(a)sign a haulier agreement with the haulier;(b)refrain from subcontracting further;(c)implement the provisions of points 6.6.1.3 and 6.6.1.4, as applicable.The subcontracting haulier retains full responsibility for the entire transport on behalf of the agent or consignor.6.6.2Protection for cargo and mail during handling, storage, and loading onto an aircraft6.6.2.1Consignments of cargo and mail that are in a critical part shall be considered as protected from unauthorised interference.6.6.2.2Consignments of cargo and mail in a part other than a critical part of a security restricted area shall be protected from unauthorised interference until they are handed over to another regulated agent or air carrier. Consignments shall be located in the access-controlled parts of a regulated agent's premises or, whenever located outside of such parts, shall be considered as protected from unauthorised interference if:(a)they are physically protected so as to prevent the introduction of a prohibited article; or(b)they are not left unattended and access is limited to persons involved in the protection and loading of cargo and mail onto an aircraft.6.7HIGH RISK CARGO AND MAIL (HRCM)Provisions for high risk cargo and mail are laid down in Commission Implementing Decision C(2015) 8005.6.8SECURITY PROCEDURES FOR CARGO AND MAIL BEING CARRIED INTO THE UNION FROM THIRD COUNTRIES6.8.1Designation of air carriers6.8.1.1Any air carrier carrying cargo or mail from an airport in a third country not listed in Attachments 6-Fi or 6-Fii for transfer, transit or unloading at any airport falling within the scope of Regulation (EC) No 300/2008 shall be designated as an "Air Cargo or Mail Carrier operating into the Union from a Third Country Airport" (ACC3) by one of the following authorities as appropriate:(a)by the appropriate authority of the Member State that issued the air carrier's Air Operator's Certificate;(b)by the appropriate authority of the Member State listed in the Annex to Commission Regulation (EC) No 748/2009Commission Regulation (EC) No 748/2009 of 5 August 2009 on the list of aircraft operators which performed an aviation activity listed in Annex I to Directive 2003/87/EC on or after 1 January 2006 specifying the administering Member State for each aircraft operator (OJ L 219, 22.8.2009, p. 1)., for air carriers that do not hold an Air Operator's Certificate issued by a Member State;(c)by the appropriate authority of the Member State where the air carrier has its major base of operations in the Union, or any other appropriate authority of the Union by agreement with that appropriate authority, for air carriers not holding an Air Operator's Certificate issued by a Member State and not listed in the Annex to Regulation (EC) No 748/2009.6.8.1.2The designation of an air carrier as ACC3 in respect of its cargo and mail operations from an airport for which ACC3 designation is required (hereafter, the "relevant cargo operations") shall be based on:(a)the nomination of a person with overall responsibility on the air carrier's behalf for the implementation of cargo or mail security provisions in respect of the relevant cargo operation; and(b)an EU aviation security validation report confirming the implementation of security measures.6.8.1.3The appropriate authority shall allocate to the designated ACC3 a unique alphanumeric identifier in the standard format identifying the air carrier and the third country airport for which the air carrier has been designated to carry cargo or mail into the Union.6.8.1.4The designation shall be valid from the date the appropriate authority has entered the ACC3's details into the Union database on supply chain security, for a maximum period of five years.6.8.1.5An ACC3 listed on the Union database on supply chain security shall be recognised in all Member States for all operations from the third country airport into the Union.6.8.1.6Following the notification by the United Kingdom of Great Britain and Northern Ireland of its intention to withdraw from the European Union pursuing Article 50 of the TEU, the ACC3 designations issued by this Member State are subject to the following provisions:(a)The responsibility for the current designations is transferred to the appropriate authority of the Member State listed in the Annex to Commission Regulation (EC) No 748/2009, as amended for the purposes of the withdrawal of the United Kingdom from the Union.(b)The responsibility for ACC3 designations of air carriers not listed in the Annex to Commission Regulation (EC) No 748/2009, as amended, is transferred to the appropriate authority as identified in point 6.8.1.1 (c).(c)The appropriate authority of the Member State as described in points (a) and (b) may agree with its counterpart in another Member State, for the latter to accept responsibility for the ACC3 designation of a given air carrier. In doing so, the concerned Member States shall promptly inform the Commission.(d)The Commission will inform the appropriate authority of the United Kingdom about the Member States taking over the responsibility of its ACC3 designations.(e)The appropriate authority of the United Kingdom shall make available to the appropriate authority of the receiving Member State, copy of the necessary documentation on which basis it had designated the air carriers listed in point (a) as ACC3. This shall include, at least, the complete validation report, the security programme and if applicable, the roadmap that was agreed with the relevant air carrier.(f)Provided the obligations in point (e) are satisfied, the transfer of responsibility for ACC3 designations shall occur on the day of withdrawal of the United Kingdom from the European Union.(g)ACC3 designations of air carriers operating exclusively to the United Kingdom shall be discontinued.(h)ACC3 designations transferred shall remain valid until their expiry and the receiving Member State takes over the responsibilities and obligations described in this Regulation.(i)The Commission will facilitate the administrative transition including the listing of the ACC3 details into the Union database on supply chain security.6.8.1.7During the period from 1 April 2020 to 30 June 2021, the appropriate authority may derogate from the process established in point 6.8.2 and temporarily designate an air carrier as ACC3, in the case where an EU aviation security validation could not take place for objective reasons which are related to the pandemic crisis caused by the COVID-19 and are beyond the responsibility of the air carrier. The designation shall be subject to the following conditions:(a)the air carrier holds an active ACC3 status at the relevant third country location, or has held an ACC3 status, provided it has not expired before 1 February 2020;(b)the air carrier applies for the new status to the appropriate authority as identified in point 6.8.1.1 or holding the responsibility for the designation due to expire, confirming the existence of objective reasons beyond the responsibility of the air carrier that impede or delay the fulfilment of the requirements of point 6.8.2;(c)the air carrier submits its security programme that is relevant and complete in respect of all points set out in Attachment 6-G, or confirms that the current programme is still up to date;(d)the air carrier submits a signed declaration where it confirms the commitment to continue the full and effective implementation of security requirements for which it had obtained the current or expired ACC3 status;(e)the designation of an air carrier as ACC3 under this point is granted for a period not exceeding six months from the date of the current or previous expiry, as appropriate;(f)the application, the air carrier security programme and the declaration of commitment are submitted either in writing or in electronic format.6.8.1.8Where applicable, the appropriate authority may agree with the relevant air carrier the postponement of the annual EU aviation security validations referred to in point 6.8.2.2 (2) (d), by adding them to the number of airports to be validated during the next year of the air carrier’s roadmap.6.8.1.9Within the temporary designation period referred to in point 6.8.1.7, the appropriate authority shall perform at the Member State’s airport or airports of arrival from the ACC3 location, at least three compliance monitoring activities in respect of the security controls applied by the ACC3 and the RA3 and KC3 parts of its supply chain. In the absence of direct flights operated by the ACC3 into the designating Member State, the performance of compliance monitoring activities shall be coordinated with another Member State where the ACC3 operates into.6.8.2EU aviation security validation for ACC36.8.2.1The EU aviation security validation in respect of an air carrier's relevant cargo operations shall consist of:(a)an examination of the air carrier's security programme ensuring its relevance and completeness in respect of all points set out in Attachment 6-G; and(b)verification of the implementation of aviation security measures in respect of the relevant cargo operations by using the checklist set out in Attachment 6-C3.6.8.2.2The EU aviation security validation's verification of the implementation shall be on-site, to one of the following degrees:(1)At the airport from which the air carrier has relevant cargo operations before ACC3 designation can be granted for that airport.If the EU aviation security validation thereupon establishes the non-implementation of one or more of the objectives listed in the checklist set out in Attachment 6-C3, the appropriate authority shall not designate the air carrier as ACC3 for the relevant cargo operations without proof of the implementation of measures by the air carrier rectifying the deficiency identified.(2)At a representative number of airports with relevant cargo operations of an air carrier before ACC3 designation is granted for all airports with relevant cargo operations of that air carrier. The following conditions apply:(a)this option is requested by an air carrier which operates several relevant air cargo operations; and(b)the appropriate authority has verified that the air carrier applies an internal security quality assurance programme that is equivalent to EU aviation security validation; and(c)the representative number shall be at least 3 or 5 %, whichever is the higher, and all airports situated in a high risk origin; and(d)the appropriate authority has agreed to a roadmap that ensures EU aviation security validations for every year of the designation at additional airports for which ACC3 designation will be granted or until all airports are validated. Those validations shall each year be at least equal in number to those required in (c). The roadmap shall state the reasons underpinning the choice of additional airports; and(e)all ACC3 designations shall end on the same day; and(f)where one of the EU aviation security validations agreed under the roadmap establishes the non-implementation of one or more of the objectives listed in the checklist set out in Attachment 6-C3, the designating appropriate authority shall require proof of the implementation of measures rectifying the deficiency identified at that airport, and, depending on the seriousness of the deficiency, request:EU aviation security validation of all airports for which ACC3 designation is required in accordance with point 6.8.2.2.1 within a deadline set by the appropriate authority, ortwice the number of the EU aviation security validations established under (d) per each of the remaining years of ACC3 designations.6.8.2.3The appropriate authority may accept the EU aviation security validation report of a third country entity, or of another ACC3, for ACC3 designation in cases where that entity or ACC3 carries out the entire cargo operation, including loading into the hold of the aircraft, on behalf of the applicant ACC3 and the EU aviation security validation report covers all these activities.6.8.2.4The EU aviation security validation shall be recorded in a validation report consisting at least of the declaration of commitments as set out in Attachment 6-H1, the checklist set out in Attachment 6-C3 and a declaration by the EU aviation security validator as set out in Attachment 11-A. The EU aviation security validator shall submit the validation report to the appropriate authority and provide the validated air carrier with a copy.6.8.2.5The EU aviation security validation shall be recorded in a validation report consisting at least of the declaration of commitments as set out in Attachment 6-H1, the checklist set out in Attachment 6-C3 and a declaration by the EU aviation security validator as set out in Attachment 11-A. The EU aviation security validator shall submit the validation report to the appropriate authority and provide the validated air carrier with a copy.6.8.3Security controls for cargo and mail arriving from a third country6.8.3.1The ACC3 shall ensure that all cargo and mail carried for transfer, transit or unloading at a Union airport is screened, unless:(a)the required security controls have been applied to the consignment by an EU aviation security validated regulated agent (RA3) and the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading; or(b)the required security controls have been applied to the consignment by an EU aviation security validated known consignor (KC3) and the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading; or(c)the required security controls have been applied to the consignment by an account consignor (AC3) under the responsibility of the ACC3 or of an EU aviation security validated regulated agent (RA3), the consignment has been protected from unauthorised interference from the time that those security controls were applied and until loading, and it is not carried on a passenger aircraft; or(d)the consignment is exempted from screening in accordance with point (d) of point 6.1.1 and protected from unauthorised interference from the time that it became identifiable air cargo or identifiable air mail and until loading.Point (c) shall apply until 30 June 2021.6.8.3.2Cargo and mail carried into the Union shall be screened by one of the means and methods listed in point 6.2.1 to a standard sufficient to reasonably ensure that it contains no prohibited articles.6.8.3.3The ACC3 shall ensure in respect of:(a)transfer and transit cargo or mail that screening in accordance with point 6.8.3.2 or security controls have been applied by itself or by an EU aviation security validated entity at the point of origin or elsewhere in the supply chain and such consignments have been protected from unauthorised interference from the time that those security controls were applied and until loading; and(b)high risk cargo and mail that screening in accordance with point 6.7 has been applied by itself or by an EU aviation security validated entity at the point of origin or elsewhere in the supply chain, that such consignments have been labelled SHR and have been protected from unauthorised interference from the time that those security controls were applied and until loading.6.8.3.4When tendering consignments to which it has applied the required security controls to another ACC3 or RA3, the ACC3, RA3, or KC3 shall indicate in the accompanying documentation the unique alphanumeric identifier received from the designating appropriate authority.6.8.3.5When accepting any consignments, an ACC3 or RA3 shall establish whether the air carrier or the entity from which it receives the consignments is another ACC3, RA3, or KC3 by the following means of:(a)verifying whether or not the unique alphanumeric identifier of the entity delivering the consignments is indicated on the accompanying documentation; and(b)confirming that the air carrier or entity delivering the consignment is listed as active in the Union database on supply chain security for the specified airport or site, as appropriate.If there is no indication on the accompanying documentation of the identifier, or if the air carrier or entity delivering the consignments is not listed as active in the Union database on supply chain security, it shall be deemed that no security controls have previously been applied, and the consignments shall be screened by the ACC3 or by another EU aviation security validated RA3 before being loaded onto the aircraft.6.8.3.6After the security controls referred to in points 6.8.3.1 to 6.8.3.5 have been implemented, the ACC3 or the EU aviation security validated regulated agent (RA3) responsible for the application of the security controls, shall ensure that the accompanying documentation, in the form of an air waybill, an equivalent postal documentation or in a separate declaration, provided in an electronic format or in writing, includes at least the following information:(a)the unique alphanumeric identifier of the ACC3;(b)the security status of the consignment referred to in point (d) of point 6.3.2.6 and issued by the ACC3 or by the EU aviation security validated regulated agent (RA3), as appropriate;(c)the unique identifier of the consignment, such as the number of the house or master air waybill, where applicable;(d)the content of the consignment, or indication of consolidation where applicable;(e)the reasons for issuing the security status, including the means or method of screening used or the grounds for exempting the consignment from screening, using the standards adopted in the ICAO Consignment Security Declaration scheme.In the case of consolidations, the ACC3 or the EU aviation security validated regulated agent (RA3) who has performed the consolidation shall retain the information set out in points (a) to (e) of the first paragraph for each individual consignment at least until the estimated time of arrival of the consignments at the first airport in the Union or for 24 hours, whichever period is longer.6.8.3.7Any air carrier arriving from a third country listed in Attachment 6-F shall ensure compliance with the applicable points laid down in point 6.8.3.6 in respect of cargo and mail transported on board. The accompanying documentation regarding such consignments shall at least comply with the ICAO Consignment Security Declaration scheme or with an alternative scheme providing the required information in an equivalent manner.6.8.3.8Transit or transfer consignments arriving from a third country listed in Attachment 6-I whose accompanying documentation does not comply with point 6.8.3.6 shall be treated in accordance with Chapter 6.7 before the subsequent flight.6.8.3.9Transit or transfer consignments arriving from a third country not referred to in point 6.8.3.8 the accompanying documentation of which does not comply with point 6.8.3.6, shall be treated in accordance with point 6.2 before the subsequent flight.6.8.3.10Security controls for cargo and mail arriving from a third country shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.6.8.4Designation of regulated agents and known consignors6.8.4.1Third country entities being, or intending to be, part of the supply chain of an air carrier holding the status of ACC3, may be designated as either "third country regulated agent" (RA3) or "third country known consignor" (KC3).6.8.4.2To obtain designation, the entity shall address the request to:(a)the appropriate authority of the Member State responsible for the ACC3 designation of an air carrier at the third country airport where the applicant handles EU bound cargo; or(b)where there is no ACC3 designated air carrier in that country, the appropriate authority of the Member State responsible for the approval of the EU aviation security validator performing, or having performed, the validation.The appropriate authority receiving the request shall start the designation process, or agree with the appropriate authority of another Member State on its delegation, taking into account political or aviation cooperation, or both.6.8.4.3Before designation, the eligibility to obtain RA3 or KC3 status in accordance with point 6.8.4.1 shall be confirmed.6.8.4.4The designation of an entity as RA3 or KC3 in respect of its cargo and mail operations ("relevant cargo operations") shall be based on the following:(a)the nomination of a person with overall responsibility on the entity's behalf for the implementation of cargo or mail security provisions in respect of the relevant cargo operation; and(b)an EU aviation security validation report confirming the implementation of security measures.6.8.4.5The appropriate authority shall allocate to the designated RA3 or KC3 a unique alphanumeric identifier in the standard format identifying the entity and the third country for which it has been designated to implement security provisions in respect of cargo or mail bound for the Union.6.8.4.6The designation shall be valid from the date the appropriate authority has entered the entity's details into the Union database on supply chain security, for a maximum period of three years.6.8.4.7An entity listed as RA3 or KC3 on the Union database on supply chain security shall be recognised in all Member States for operations conducted in respect of cargo or mail transported from the third country airport into the Union by an ACC3.6.8.4.8Designations of RA3 and KC3 issued before 1 June 2017 shall expire five years after their designation or on 31 March 2020, whichever date comes earlier.6.8.4.9Upon request by the appropriate authority of their approval, EU aviation security validators shall make available the details contained in Part 1 of the checklist set out in Attachment 6-C2 or Attachment 6-C4, as appropriate, for each entity they have designated, in order to establish a consolidated list of entities designated by EU aviation security validators.6.8.4.10Following the notification by the United Kingdom of Great Britain and Northern Ireland of its intention to withdraw from the European Union pursuing Article 50 of the TEU, designations of RA3 and KC3 issued by this Member State are subject to the following provisions:(a)The responsibility for RA3 or KC3 designation of an entity consisting of a branch or a subsidiary company of an airline operator, or of an air carrier itself, is transferred to the appropriate authority of the Member State identified in point 6.8.1.1 of this Regulation;(b)The responsibility for RA3 or KC3 designation of an entity not directly linked to an air carrier is transferred to the appropriate authority of the Member State identified in point 6.8.1.1 as holding the responsibility for the national or major air carrier of the third country where the RA3 or KC3 operates.(c)The responsibility for RA3 or KC3 designation of an entity not falling under points (a) or (b), is transferred to the appropriate authority of the Member State identified in point 6.8.1.1 as holding the responsibility for one of the Union air carriers operating from the airport where the RA3 or KC3 operates, or the closest airport to the site of this entity.(d)The appropriate authority of the Member State as described in points (a) to (c) may agree with its counterpart in another Member State, for the latter to accept responsibility for the RA3 or KC3 designation of a given entity or airline operator. In doing so, the concerned Member States shall promptly inform the Commission.(e)The Commission will inform the appropriate authority of the United Kingdom about the Member States taking over the responsibility of its RA3 and KC3 designations.(f)The appropriate authority of the United Kingdom shall make available to the appropriate authority of the receiving Member State, copy of the necessary documentation on which basis it had designated an entity or an airline operator as RA3 or KC3. This shall include, at least, the complete validation report and the security programme of the relevant entity or airline operator.(g)Provided the obligations in point (f) are satisfied, the transfer of responsibility for RA3 and KC3 designations shall occur on the day of withdrawal of the United Kingdom from the European Union.(h)RA3 and KC3 designations transferred shall remain valid until their expiry and the receiving Member State takes over the responsibilities and obligations described in this Regulation.(i)The Commission will facilitate the administrative transition including the listing of the RA3 and KC3 details into the Union database on supply chain security.6.8.4.11During the period from 1 April 2020 to 30 June 2021, the appropriate authority may derogate from the process established in point 6.8.5 and temporarily designate a third country entity as RA3 or KC3, in the case where an EU aviation security validation could not take place for objective reasons which are related to the pandemic crisis caused by the COVID-19 and are beyond the responsibility of the entity. The designation shall be subject to the following conditions:(a)the entity holds an active RA3 or KC3 status, or has held a RA3 or KC3 status, provided it has not expired before 1 February 2020;(b)the entity applies for the new status to the appropriate authority currently holding the responsibility for its designation that is due to expire or has expired, confirming the existence of objective reasons beyond the responsibility of the entity that impede or delay the fulfilment of the requirements of point 6.8.5;(c)the entity submits its security programme that is relevant and complete in respect of the operations performed, or confirms that the current programme is still up to date;(d)the entity submits a signed declaration where it confirms the commitment to continue the full and effective implementation of security requirements for which it had obtained the current or expired RA3 or KC3 status;(e)the designation of an entity as RA3 or KC3 under this point is granted for a period not exceeding six months from the date of the current or previous expiry, as applicable;(f)the application, the entity’s security programme and the declaration of commitment are submitted either in writing or in electronic format.6.8.4.12Entities referred to in point 6.8.4.8 whose RA3 or KC3 status expired in the period from 1 February 2020 to 31 March 2020, that because of the objective reasons referred to in point 6.8.4.11 could not undergo the process of EU aviation security validation established in point 6.8.5 and subsequent designation by an appropriate authority as set out in point 6.8.4, may apply for a temporary designation granted by the Commission, subject to the following conditions:(a)the entity applies for the RA3 or KC3 status to the Commission, confirming the existence of objective reasons beyond its responsibility that impede or delay the fulfilment of the requirements of point 6.8.5;(b)the entity submits a signed declaration where it confirms both the commitment to continue the full and effective implementation of security requirements for which it had obtained the expired RA3 or KC3 status, and that its security programme is still up to date;(c)the application and the declaration of commitment are submitted either in writing or in electronic format;(d)the designation is granted for a period not exceeding six months and may be subject to extension within the derogation period as set out in point 6.8.4.11.6.8.5Validation of regulated agents and known consignors6.8.5.1In order to be designated as EU aviation security validated regulated agent or known consignor, third country entities shall be validated according to one of the following two options:(a)the ACC3's security programme shall set out details of security controls implemented on its behalf by third country entities from which it accepts cargo or mail directly for carriage into the Union. The EU aviation security validation of the ACC3 shall validate the security controls applied by those entities; or(b)the third country entities shall submit the relevant cargo handling activities to an EU aviation security validation at intervals not exceeding three years. The EU aviation security validation shall consist of the following:(i)an examination of the entity's security programme ensuring its relevance and completeness in respect of the operations performed; and(ii)on-site verification of the implementation of aviation security measures in respect of the relevant cargo operations.The validation report shall consist of, for third country regulated agents, the declaration of commitments as set out in Attachment 6-H2 and the checklist set out in Attachment 6-C2, and for third country known consignors, the declaration of commitments as set out in Attachment 6-H3 and the checklist set out in Attachment 6-C4. The validation report shall also include a declaration by the EU aviation security validator, as set out in Attachment 11-A.6.8.5.2Once the EU aviation security validation according to point (b) of point 6.8.5.1 has been completed, the EU aviation security validator shall submit the validation report to the appropriate authority and provide the validated entity with a copy.6.8.5.3A compliance monitoring activity conducted by the appropriate authority of a Member State or by the Commission may be considered as an EU aviation security validation, provided that it covers all areas specified in the checklist set out in Attachment 6-C2 or 6-C4, as appropriate.6.8.5.4The ACC3 shall maintain a database giving at least the following information for each regulated agent or known consignor that has been subject to EU aviation security validation in accordance with point 6.8.5.1, from which it directly accepts cargo or mail for carriage into the Union:(a)the company details, including the bona fide business address; and(b)the nature of the business, excluding business sensitive information; and(c)contact details, including those of the person(s) responsible for security; and(d)the company registration number, if applicable; and(e)where available, the validation report; and(f)the unique alphanumeric identifier attributed in the Union database on supply chain security.Where applicable, the database shall contain the above information for each account consignor under its responsibility in accordance with point (c) of point 6.8.3.1, from which the ACC3 directly accepts cargo or mail for carriage into the Union.The database shall be available for inspection of the ACC3.Other EU aviation security validated entities may maintain such a database.6.8.5.5An air cargo or mail entity operating a network of different sites in third countries may obtain a single designation as EU aviation security validated regulated agent covering all sites of the network, provided that:(a)the relevant aviation security operations of the network, including transport services between sites, are covered by a single security programme or by standardised security programmes; and(b)the implementation of the security programme(s) is subject to a single internal security quality assurance programme that is equivalent to EU aviation security validation; and(c)before designation of the network as EU aviation security regulated agent, the following sites of the entity have been subject to an EU aviation security validation:(i)the site(s) from which cargo or mail is directly delivered to an ACC3, and(ii)at least two or 20 % of the sites of the network, whichever is the higher, from which cargo or mail is fed to site(s) referred to in point (i), and(iii)all sites located in third countries listed in Attachment 6-I to Commission Implementing Decision C(2015) 8005.In order to maintain EU aviation security validated regulated agent designation for all sites of the network not validated until 30 June 2018 at the latest, during every year after the year of designation, at least a further two or 20 %, whichever is the higher, of the sites from which cargo or mail is fed to the site(s) mentioned in point (i) shall be subjected to an EU aviation security validation, until all sites are validated.An EU aviation security validator shall establish the roadmap listing the order of the locations to be validated each year selected on a random basis. The roadmap shall be established independently from the entity operating the network and may not be changed by that entity. This roadmap shall constitute an integral part of the validation report on the basis of which the network is designated as a third country EU validated regulated agent.Once it has been subjected to an EU aviation security validation, a site of the network shall be considered as a third country regulated agent in accordance with point 6.8.4.2.6.8.5.6If the EU aviation security validation of a site of the network referred to in point (ii) of point (c) of point 6.8.5.5 concludes that the site has failed to comply with the objectives referred to in the checklist in Attachment 6-C2, cargo and mail from that site shall be screened at a site designated as third country regulated agent in accordance with point 6.8.4.2 until an EU aviation security validation confirms compliance with the objectives of the checklist.6.8.5.7Points 6.8.5.5 and 6.8.5.6 shall expire on 30 June 2018.6.8.6Non-compliance and discontinuation of ACC3, RA3 and KC3 designation6.8.6.1Non-Compliance1.Where the Commission or an appropriate authority identifies or receives written information about a serious deficiency relating to the operations of an ACC3, an RA3 or a KC3, which is deemed to have a significant impact on the overall level of aviation security in the Union, it shall:(a)inform the air carrier or entity concerned promptly, request comments and appropriate measures in respect to the serious deficiency;(b)promptly inform the other Member States and the Commission.The serious deficiency referred to in the first paragraph may be identified during either of the following activities:(1)during compliance monitoring activities;(2)during the examination of documentation including the EU aviation security validation report of other operators which are part of the supply chain of the ACC3, RA3 or KC3;(3)upon receipt of factual written information from other authorities and/or operators in respect of the activities of the concerned ACC3, RA3 or KC3, in form of documented evidence clearly indicating security breaches.2.Where the ACC3, the RA3 or the KC3 has not rectified the serious deficiency within a specific time-frame, or in case the ACC3, the RA3 or the KC3 does not react to the request set out in point (a) of point 6.8.6.1, the authority, or the Commission shall:(a)deactivate the status as ACC3, RA3 or KC3 of the operator or entity in the Union database on supply chain security; or(b)request the appropriate authority responsible for the designation to deactivate the status as ACC3, RA3 or KC3 of the operator or entity in the Union database on supply chain security.In the situation referred to in the first paragraph, the authority, or the Commission, shall promptly inform the other Member States and the Commission.3.An air carrier or entity whose status, respectively as an ACC3, RA3 or KC3, has been deactivated in accordance with point 6.8.6.1.2 shall not be reinstated or included in the Union database on supply chain security until an EU aviation security re-designation in accordance with 6.8.1 or 6.8.4 has taken place.4.If an air carrier or an entity is no longer a holder of the ACC3, RA3 or KC3 status, the appropriate authorities shall undertake appropriate action to satisfy themselves that other ACC3s, RA3s and KC3s under their responsibility, operating in the supply chain of the air carrier or entity that has lost the status, still comply with the requirements of Regulation (EC) No 300/2008.6.8.6.2Discontinuation1.The appropriate authority that designated the ACC3, the RA3 or the KC3, is responsible for removing the details thereof from the "Union database on supply chain security":(a)at the request of or in agreement with the air carrier or the entity; or(b)where the ACC3, the RA3 or the KC3 does not pursue relevant cargo operations and does not react to a request for comments or otherwise obstructs the assessment of risk to aviation.2.If an air carrier or an entity is no longer a holder of the ACC3, RA3 or KC3 status, the appropriate authorities shall undertake appropriate action to satisfy themselves that other ACC3s, RA3s and KC3s under their responsibility, operating in the supply chain of the air carrier or entity that has been discontinued, still comply with the requirements of Regulation (EC) No 300/2008.6.8.7Pre-Loading Advance Cargo Information (PLACI)6.8.7.1Pursuant to Article 186 of Implementing Regulation (EU) 2015/2447, the PLACI shall be carried out before departure from a third country, upon receipt by the customs authority of the first point of entry, of the minimum dataset of the entry summary declaration referred to in Article 106(2) and (2a) of Commission Delegated Regulation (EU) 2015/2446Commission Delegated Regulation (EU) 2015/2446 of 28 July 2015 supplementing Regulation (EU) No 952/2013 of the European Parliament and of the Council as regards detailed rules concerning certain provisions of the Union Customs Code (OJ L 343, 29.12.2015, p. 1)..6.8.7.2In the course of the PLACI and where there are reasonable grounds for the customs office of first entry to suspect that a consignment entering the customs territory of the Union by air could pose a serious threat to civil aviation, that consignment shall be treated as high risk cargo or mail (HRCM) in accordance with point 6.7. An air carrier shall not load for carriage into the Union such consignment, unless the required measures as set out in points 6.8.7.3 and 6.8.7.4, as applicable, have been implemented satisfactorily.6.8.7.3The air carrier, operator, entity or person in a third country other than those listed in Attachment 6-F and Iceland, shall, upon receipt of a notification from the customs office of first entry requiring a consignment to be treated as high risk cargo or mail (HRCM) in accordance with point 6.8.7.2:(a)implement in respect of the specific consignment, the security controls listed in points 6.7.3 and 6.7.4 of the Annex to Implementing Decision C(2015) 8005, in case of an ACC3 or an RA3 approved for the performance of such security controls;(b)ensure that an ACC3 or an RA3 approved for the performance of such security controls complies with the provisions laid down in point (a). Information to the customs office of first entry shall be provided in case the consignment is to be tendered or it has been tendered to another operator, entity or authority for the application of the security controls. Such other operator, entity or authority shall ensure the implementation of the security controls referred to in point (a) and confirm to the air carrier, operator, entity or person from which the consignment was received, both the implementation of such security controls and the results thereof;(c)confirm to the customs office of first entry both the implementation of the security controls referred to in point (a) and the results thereof.Points (a) and (b) of the first paragraph shall not apply in case the requested security controls have been previously implemented. However, should there be specific threat information that has only become available after the implementation of the previous security controls, the air carrier, operator, entity or person may be requested to repeat the security controls by using specific means and methods, and provide confirmation as set out in point (c) of the first paragraph. The air carrier, operator, entity or person may be made aware of any element and information necessary in order to effectively meet the security objective.6.8.7.4Air carriers, operators, entities or persons in a third country listed in Attachment 6-F or in Iceland, that receive a notification from the customs office of first entry requiring a consignment to be treated as high risk cargo or mail (HRCM) in accordance with point 6.8.7.2, shall:(a)implement, in respect of the specific consignment, at least the security controls established by ICAO Annex 17 for High Risk Cargo or MailAir carriers, operators and entities in Iceland shall apply points 6.7.3 and 6.7.4 of the Annex to Implementing Decision C(2015) 8005.;(b)ensure that the requirements of point (a) are fulfilled by an operator, entity or authority approved by the relevant appropriate authority in the third country for the performance of such security controls. Information to the customs office of first entry shall be provided in case the consignment is to be tendered or it has been tendered to another operator, entity or authority for the application of the security controls. Such other operator, entity or authority shall ensure the implementation of the security controls referred to in point (a) and confirm to the air carrier, operator, entity or person from which the consignment was received, both the implementation of such security controls and the results thereof;(c)confirm to the customs office of first entry both the implementation of the security controls referred to in point (a) and the results thereof.Points (a) and (b) of the first paragraph shall not apply in case the requested security controls have been previously implemented. However, should there be specific threat information that has only become available after the implementation of the previous security controls, the air carrier, operator, entity or person may be requested to repeat the security controls by using specific means and methods, and provide confirmation as set out in point (c) of the first paragraph. The air carrier, operator, entity or person may be made aware of any element and information necessary in order to effectively meet the security objective.6.8.7.5In the course of the PLACI and where there are reasonable grounds for the customs office of first entry to suspect that a consignment entering the customs territory of the Union by air poses a serious threat to security, leading it to issue a do not load notification, that consignment shall not be loaded on board of an aircraft, or off-loaded, as applicable.6.8.7.6The air carrier, operator, entity or person in a third country that receives a notification from the customs office of first entry requiring a consignment not to be loaded on board of an aircraft in accordance with point 6.8.7.5, shall:(a)ensure that the consignment in its possession is not loaded on board an aircraft, or it is immediately off-loaded in case the consignment is already on board the aircraft;(b)provide confirmation that it has fulfilled the request to the customs office of first entry in the customs territory of the Union;(c)cooperate with the relevant authorities of the Member State of the customs office of first entry;(d)inform the appropriate authority for civil aviation security of the State where the air carrier, operator, entity or person receiving the notification is located and of the third country where the consignment is currently located, if different.6.8.7.7Should the consignment be already with another air carrier, operator or entity along the supply chain, the air carrier, operator, entity or person receiving the do not load notification laid down in point 6.8.7.5 shall immediately inform such other air carrier, operator, entity or person that it shall:(a)ensure compliance with the provisions of points (a), (c) and (d) of point 6.8.7.6;(b)confirm the application of point (b) of point 6.8.7.6 to the air carrier, operator, entity or person that received the notification laid down in point 6.8.7.5.6.8.7.8Should the aircraft be already airborne with a consignment on board for which the customs office of first entry had notified, pursuant to point 6.8.7.5, that a consignment must not be loaded, the air carrier, operator, entity or person receiving the notification shall immediately inform:(a)the relevant authorities of the Member State referred to in point (c) of point 6.8.7.6 for the purpose of informing and liaising with the relevant authorities of the Member State of first overflight in the Union;(b)the appropriate authority for civil aviation security of the third country where the air carrier, operator, entity or person receiving the notification is located and of the third country from which the flight has departed, if different.6.8.7.9Following the notification received from the customs office of first entry that has issued a notification as laid down in point 6.8.7.5, the appropriate authority of the same Member State shall, as applicable, implement or ensure the implementation thereof, or cooperate in any subsequent actions, including the coordination with the authorities of the third country of departure and where applicable in the country or countries of transit and/or transfer, the relevant security contingency protocols in accordance with the Member State’s national civil aviation security programme and the international standards and recommended practices regulating crisis management and response to acts of unlawful interference.6.8.7.10The air carrier, operator, entity or person in a third country that receives a notification issued by the customs authority of a third country implementing a Pre-Loading Advance Cargo Information scheme in adherence to the principles set out by the World Customs Organisation’s SAFE Framework of Standards, shall ensure the implementation of the requirements laid down in points 6.8.7.3 and 6.8.7.4 and in points 6.8.7.6, 6.8.7.7, 6.8.7.8.This point applies only in respect of consignments of cargo or mail fulfilling any of the criteria below:(a)they are carried for transit or transfer at a Union airport before reaching the final destination at an airport based in the third country of the notifying customs authority;(b)they are carried for transit or transfer at a Union airport before having another transit or transfer at an airport based in the third country of the notifying customs authority.For the purposes of the requirements set out in points 6.8.7.6(c) and 6.8.7.8(a), the air carrier, operator, entity or person receiving the notification in a third country, shall immediately inform the relevant authorities of the Member State of first landing in the Union.Should the aircraft be already airborne, the information shall be provided to the relevant authorities of the Member State of first overflight in the Union that shall ensure the implementation of the actions referred to in point 6.8.7.9, in coordination with the relevant authorities of the Member State of first landing in the Union.The relevant authorities of both the Member State of first overflight in the Union and of the Member State of first landing in the Union shall inform the respective customs authority.ATTACHMENT 6-ADECLARATION OF COMMITMENTS — REGULATED AGENTIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). on common rules in the field of civil aviation security and its implementing acts,I declare that,to the best of my knowledge, the information contained in the company's security programme is true and accurate,the practices and procedures set out in this security programme will be implemented and maintained at all sites covered by the programme,this security programme will be adjusted and adapted to comply with all future relevant changes to Union legislation, unless [name of company] informs [name of appropriate authority] that it no longer wishes to trade as a regulated agent,[name of company] will inform [name of appropriate authority] in writing of:(a)minor planned changes to its security programme, such as company name, company address, person responsible for security or contact details, change of person requiring access to the "Union database on supply chain security", promptly and at least within 7 working days before the planned change; and(b)major planned changes, such as new screening procedures, major building works which might affect its compliance with relevant Union legislation or change of site/address, at least 15 working days prior to their commencement/the planned change,in order to ensure compliance with relevant Union legislation, [name of company] will cooperate fully with all inspections, as required, and provide access to all documents, as requested by inspectors,[name of company] will inform [name of appropriate authority] of any serious security breaches and of any suspicious circumstances which may be relevant to air cargo/air mail security, in particular any attempt to conceal prohibited articles in consignments,[name of company] will ensure that all relevant staff receive training in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998 and are aware of their security responsibilities under the company's security programme; and[name of company] will inform [name of appropriate authority] if:(a)it ceases trading;(b)it no longer deals with air cargo/air mail; or(c)it can no longer meet the requirements of the relevant Union legislation.I shall accept full responsibility for this declaration.Name:Position in company:Date:Signature:ATTACHMENT 6-BGUIDANCE FOR KNOWN CONSIGNORSThis guidance will help you to assess your existing security arrangements against the required criteria for known consignors as described in Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts. This should enable you to ensure that you meet the requirements before arranging an official on-site validation visit.It is important that the validator is able to talk to the right people during the validation visit (e.g. person responsible for security and person responsible for recruitment of staff). An EU checklist will be used to record the validator's assessments. Once the validation checklist is completed, the information contained in the checklist will be handled as classified information.Please note that questions on the EU checklist are of two types: (1) those where a negative response will automatically mean that you cannot be accepted as a known consignor and (2) those which will be used to build up a general picture of your security provisions to allow the validator to reach an overall conclusion. The areas where a "fail" will automatically be recorded are indicated by the requirements indicated in bold type below. If there is a "fail" on the requirements indicated in bold type, the reasons will be given to you and advice on adjustments needed to pass.If you are a holder of an AEO certificate referred to in point (b) or (c) of Article 14a(1) of Commission Regulation (EEC) No 2454/93Commission Regulation (EEC) No 2454/93 of 2 July 1993 laying down provisions for the implementation of Council Regulation (EEC) No 2913/92 establishing the Community Customs Code (OJ L 253, 11.10.1993, p. 1). (so called AEOF and AEOS certificates) and if the site for which you are requesting the known consignor status has been successfully examined by customs authorities at a date not earlier than 3 years before the date of requesting the known consignor status, you are required to fill out and have signed by a legal representative of your company Part 1 concerning the organisation and responsibilities as well as the declaration of commitments of the "Validation checklist for known consignors" as contained in attachment 6-C.IntroductionThe cargo must be originated by your company on the site to be inspected. This covers manufacture on the site and pick and pack operations where the items are not identifiable as air cargo until they are selected to meet an order. (See also Note.)You will have to determine where a consignment of cargo/mail becomes identifiable as air cargo/air mail and demonstrate that you have the relevant measures in place to protect it from unauthorised interference or tampering. This will include details concerning the production, packing, storage and/or despatch.Organisation and responsibilitiesYou will be required to provide details about your organisation (name, VAT or Chamber of Commerce number or Corporate registration number if applicable, AEO certificate number and the date of the last examination of this site by customs authorities, if applicable), address of the site to be validated and main address of organisation (if different from the site to be validated). The date of the previous validation visit and last unique alphanumeric identifier (if applicable) are required, as well as of the nature of the business, the approximate number of employees on site, name and title of the person responsible for air cargo/air mail security and contact details.Staff recruitment procedureYou will be required to provide details of your recruitment procedures for all staff (permanent, temporary or agency staff, drivers) with access to identifiable air cargo/air mail. The recruitment procedure shall include a pre-employment check or a background check in accordance with point 11.1 of the Annex to Implementing Regulation (EU) 2015/1998. The on-site validation visit will involve an interview with the person responsible for the recruitment of staff. He/she will need to present evidence (e.g. blank forms) to substantiate the company procedures. This recruitment procedure shall apply to staff recruited after 29 April 2010.Staff security training procedureYou will need to demonstrate that all staff (permanent, temporary or agency staff, drivers) with access to air cargo/air mail have received the appropriate training on security awareness matters. This training shall take place in accordance with point 11.2.7 of the Annex to Implementing Regulation (EU) 2015/1998. Individual training records should be kept on file. In addition, you will be required to show that all relevant staff implementing security controls have received training or recurrent training in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998.Physical securityYou will be required to demonstrate how your site is protected (e.g. a physical fence or barrier) and that relevant access control procedures are in place. Where applicable, you will be required to provide details of any possible alarm- and/or CCTV system. It is essential that access to the area where air cargo/air mail is processed or stored, is controlled. All doors, windows and other points of access to air cargo/air mail need to be secured or subject to access control.Production (where applicable)You will need to demonstrate that access to the production area is controlled and the production process supervised. If the product can be identified as air cargo/air mail in the course of production then you will have to show that measures are taken to protect air cargo/air mail from unauthorised interference or tampering at this stage.Packing (where applicable)You will need to demonstrate that access to the packing area is controlled and the packing process supervised. If the product can be identified as air cargo/air mail in the course of packing then you will have to show that measures are taken to protect air cargo/air mail from unauthorised interference or tampering at this stage.You will be required to provide details of your packing process and show that all finished goods are checked prior to packing.You will need to describe the finished outer packing and demonstrate that it is robust. You also have to demonstrate how the finished outer packing is made tamper evident, for example by the use of numbered seals, security tape, special stamps or cardboard boxes fixed by a tape. You also need to show that you hold those under secure conditions when not in use and control their issue.Storage (where applicable)You will need to demonstrate that access to the storage area is controlled. If the product can be identified as air cargo/air mail while being stored then you will have to show that measures are taken to protect air cargo/air mail from unauthorised interference or tampering at this stage.Finally, you will have to demonstrate that finished and packed air cargo/air mail is checked before despatch.Despatch (where applicable)You will need to demonstrate that access to the despatch area is controlled. If the product can be identified as air cargo/air mail in the course of despatch then you will have to show that measures are taken to protect air cargo/air mail from unauthorised interference or tampering at this stage.TransportationYou will have to provide details concerning the method of transportation of cargo/mail to the regulated agent.If you use your own transport, you will have to demonstrate that your drivers have been trained to the required level. If a contractor is used by your company, you will have to ensure that a) the air cargo/air mail is sealed or packed by you so as to ensure that any tampering would be evident and b) the haulier declaration as contained in Attachment 6-E of the Annex to Implementing Regulation (EU) 2015/1998 has been signed by the haulier.If you are responsible for the transportation of air cargo/air mail, you will have to show that the means of transport are securable, either through the use of seals, if practicable, or any other method. Where numbered seals are used, you will have to demonstrate that access to the seals is controlled and numbers are recorded; if other methods are used you will have to show how cargo/mail is made tamper evident and/or kept secure. In addition you will need to show that there are measures in place to verify the identity of the drivers of vehicles collecting your air cargo/air mail. You will also need to show that you ensure that cargo/mail is secure when it leaves the premises. You will have to demonstrate that air cargo/air mail is protected from unauthorised interference during transportation.You will not have to provide evidence about driver training or a copy of the haulier declaration where a regulated agent has made the transport arrangements for collecting air cargo/air mail from your premises.Consignor's responsibilitiesYou will need to declare that you will accept unannounced inspections by the appropriate authority's inspectors for the purpose of monitoring these standards.You will also need to declare to provide [name of appropriate authority] with the relevant details promptly but at least within 10 working days if:(a)the overall responsibility for security is assigned to anyone other than the person named(b)there are any other changes to premises or procedures likely to significantly impact on security(c)your company ceases trading, no longer deals with air cargo/air mail or can no longer meet the requirements of the relevant EU legislation.Finally, you will need to declare to maintain standards of security until the subsequent on-site validation visit and/or inspection.You will then be required to accept full responsibility for the declaration and to sign the validation document.NOTES:Explosive and incendiary devicesAssembled explosive and incendiary devices may be carried in consignments of cargo if the requirements of all safety rules are met in full.Consignments from other sourcesA known consignor may pass consignments which it has not itself originated to a regulated agent, provided that:(a)they are separated from consignments which it has originated; and(b)the origin is clearly indicated on the consignment or on accompanying documentation.All such consignments must be screened before they are loaded on to an aircraft.ATTACHMENT 6-CVALIDATION CHECKLIST FOR KNOWN CONSIGNORSCompletion notes:When completing this form please note that:Items marked "(*)" are required data and MUST be completed.If the answer to any question in bold type is NO, the validation MUST be assessed as a FAIL. This does not apply where the questions do not apply.The overall assessment can only be assessed as a PASS after the consignor has signed the declaration of commitments on the last page.The original declaration of commitments must be retained by or made available to the appropriate authority until the validation expires. A copy of the declaration should also be given to the consignor.PART 1Organisation and responsibilities

1.1Date of validation (*)
dd/mm/yyyy
1.2Date of previous validation and Unique Identifier where applicable
dd/mm/yyyy
UNI
1.3Name of organisation to be validated (*)
NameVAT/Chamber of Commerce number/Corporate registration number (if applicable)
1.4Information on AEOF or AEOS certificate, where applicable
AEO certificate number
Date when customs authorities have last examined this site
1.5Address of site to be validated (*)
Number/Unit/Building
Street
Town
Postcode
Country
1.6Main address of organisation (if different from site to be validated, provided that it is in the same country)
Number/Unit/Building
Street
Town
Postcode
Country
1.7Nature of Business(es) — types of cargo processed
1.8Is the applicant responsible for:
(a)Production(b)Packing(c)Storage(d)Dispatch(e)Other, please specify
1.9Approximate number of employees on site
1.10Name and title of person responsible for air cargo/air mail security (*)
Name
Job title
1.11Contact telephone number
Tel. no.
1.12E-mail address (*)
E-mail

PART 2Identifiable air cargo/air mailAim: To establish the point (or: place) where cargo/mail becomes identifiable as air cargo/air mail.2.1By inspection of the production, packing, storage, selection, despatch and any other relevant areas, ascertain where and how a consignment of air cargo/air mail becomes identifiable as such.Describe:NB: Detailed information should be given on the protection of identifiable air cargo/air mail from unauthorised interference or tampering in Parts 5 to 8.PART 3Staff recruitment and trainingAim: To ensure that all staff (permanent, temporary, agency staff, drivers) with access to identifiable air cargo/air mail have been subject to an appropriate pre-employment check and/or background check as well as trained in accordance with point 11.2.7 of the Annex to Implementing Regulation (EU) 2015/1998. In addition, to ensure that all staff implementing security controls in respect of supplies are trained in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998.Whether or not 3.1 and 3.2 are questions in bold type (and thus where a NO answer must be assessed as a fail) depends on the applicable national rules of the State where the site is located. However, at least one of these two questions shall be in bold type, whereby it should also be allowed that where a background has been carried out, then a pre-employment check is no longer required. The person responsible for implementing security controls shall always have a background check.

3.1Is there a recruitment procedure for all staff with access to identifiable air cargo/air mail which includes a pre-employment check in accordance with point 11.1.4 of the Annex to Implementing Regulation (EU) 2015/1998? This applies to staff recruited after 29 April 2010.
YES or NO
If YES, which type
3.2Does this recruitment procedure also include a background check, including a check on criminal records, in accordance with point 11.1.3 of the Annex to Implementing Regulation (EU) 2015/1998?This applies to staff recruited after 29 April 2010.
YES or NO
If YES, which type
3.3Does the appointment process for the named person responsible for the application and supervision of the implementation of security controls at the site include a requirement for a background check, including a check on criminal records in accordance with point 11.1.3 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If YES, describe
3.4Do staff with unsupervised access to identifiable air cargo/air mail and staff implementing security controls receive security training in accordance with point 11.2.3.9 before being given unsupervised access to identifiable air cargo/air mail?
YES or NO
If YES, describe
3.5Do staff (as referred to above) receive refresher training in accordance with the frequency established for this training?
YES or NO
3.6Assessment — Are the measures sufficient to ensure that all staff with access to identifiable air cargo/air mail and staff implementing security controls have been properly recruited and trained in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If NO, specify reasons

PART 4Physical securityAim: To establish if there is a level of (physical) security on the site or at the premises sufficient to protect identifiable air cargo/air mail from unauthorised interference.

4.1Is the site protected by a physical fence or barrier?
YES or NO
4.2Are all the access points to the site subject to access control?
YES or NO
4.3If YES, are the access points…?
Staffed
Manual
Automatic
Electronic
Other, specify
4.4Is the building of sound construction?
YES or NO
4.5Does the building have an effective alarm system?
YES or NO
4.6Does the building have an effective CCTV system?
YES or NO
4.7If yes, are the images of the CCTV recorded?
YES or NO
4.8Are all doors, windows and other points of access to identifiable air cargo/air mail secure or subject to access control?
YES or NO
4.9If no, specify reasons
4.10Assessment: Are the measures taken by the organisation sufficient to prevent unauthorised access to those parts of the site and premises where identifiable air cargo/air mail is processed or stored?
YES or NO
If NO, specify reasons

PART 5ProductionAim: To protect identifiable air cargo/air mail from unauthorised interference or tampering.Answer these questions where the product could be identified as air cargo/air mail in the course of the production process.

5.1Is access controlled to the production area?
YES or NO
5.2If YES, how?
5.3Is the production process supervised?
YES or NO
5.4If YES, how?
5.5Are controls in place to prevent tampering at the stage of production?
YES or NO
If YES, describe
5.6Assessment: Are measures taken by the organisation sufficient to protect identifiable air cargo/air mail from unauthorised interference or tampering during production?
YES or NO
If NO, specify reasons

PART 6PackingAim: To protect identifiable air cargo/air mail from unauthorised interference or tampering.Answer these questions where the product could be identified as air cargo/air mail in the course of the packing process.

6.1Is the packing process supervised?
YES or NO
6.2If YES, how?
6.3Please describe the finished outer packaging:
(a)Is the finished outer packaging robust?
YES or NODescribe:
(b)Is the finished outer packaging tamper evident?
YES or NO
Describe:
6.4 (a)Are numbered seals, security tape, special stamps or cardboard boxes fixed by a tape used to make air cargo/air mail tamper evident?
YES or NO
If YES:
6.4 (b)Are the seals, security tape or special stamps held under secure conditions when not in use?
YES or NO
Describe:
6.4 (c)Is the issue of numbered seals, security tape, and/or stamps controlled?
YES or NO
Describe:
6.5If the answer to 6.4 (a) is YES, how is this controlled?
6.6Assessment: Are the packing procedures sufficient to protect identifiable air cargo/air mail from unauthorised interference and/or tampering?
YES or NO
If NO, specify reasons

PART 7StorageAim: To protect identifiable air cargo/air mail from unauthorised interference or tampering.Answer these questions where the product could be identified as air cargo/air mail in the course of the storage process.

7.1Is the finished and packed air cargo/air mail stored securely and checked for tampering?
YES or NO
7.2Assessment: Are the storage procedures sufficient to protect identifiable air cargo/air mail from unauthorised interference and/or tampering?
YES or NO
If NO, specify reasons

PART 8DespatchAim: To protect identifiable air cargo/air mail from unauthorised interference or tampering.Answer these questions where the product could be identified as air cargo/air mail in the course of the despatch process.

8.1Is access controlled to the despatch area?
YES or NO
8.2If YES, how?
8.3Who has access to the despatch area?
Employees?
YES or NO
Drivers?
YES or NO
Visitors?
YES or NO
Contractors?
YES or NO
8.4Assessment: Is the protection sufficient to protect the air cargo/air mail from unauthorised interference or tampering in the despatch area?
YES or NO
If NO, specify reasons

PART 8AConsignments from other sourcesAim: to establish the procedures for dealing with unsecured consignments.Answer these questions only if consignments for carriage by air are being accepted from other companies.

8A.1Does the company accept consignments of cargo intended for carriage by air from any other companies?
YES OR NO
8A.2If YES, how are these kept separate from the company's own cargo and how are they identified to the regulated agent/haulier?

PART 9TransportationAim: To protect identifiable air cargo/air mail from unauthorised interference or tampering.

9.1How is the air cargo/air mail conveyed to the regulated agent?
(a)By, or on behalf of, the regulated agent?
YES or NO
(b)Consignor's own transport?
YES or NO
(c)Contractor used by the consignor?
YES or NO
9.2Where a contractor is used by the consignor:is the air cargo/air mail being sealed or packed before transportation so as to ensure that any tampering would be evident? andhas the haulier declaration been signed by the haulier?
YES or NO
Only answer the following questions where 9.1(b) or 9.1(c) applies9.3Is the cargo compartment of the transport vehicle securable?
YES or NO
If YES, specify how…
9.4 (a)Where the cargo compartment of the transport vehicle is securable, are numbered seals used?
YES or NO
(b)Where numbered seals are used, is access to the seals controlled and the numbers recorded on issue?
YES or NO
If YES, specify how…
9.5Where the cargo compartment of the transport vehicle is not securable, is the air cargo/air mail tamper evident?
YES or NO
9.6If YES, describe tamper evidence employed.
9.7If NO, how is it kept secure?
9.8Assessment: Are the measures sufficient to protect air cargo/air mail from unauthorised interference during transportation?
YES or NO
If NO, specify reasons

DECLARATION OF COMMITMENTSI declare that:I will accept unannounced inspections by the appropriate authority's inspectors for the purpose of monitoring these standards. If the inspector discovers any serious lapses in security, this could lead to the withdrawal of my status as known consignor.I will provide [name of appropriate authority] with the relevant details promptly but at least within 10 working days if:the overall responsibility for security is assigned to anyone other than the person named at point 1.10;there are any other changes to premises or procedures likely to significantly impact on security; andthe company ceases trading, no longer deals with air cargo/air mail or can no longer meet the requirements of the relevant Union legislation.I will maintain standards of security until the subsequent on-site validation visit and/or inspection.I shall accept full responsibility for this declaration.

Signed
Position in company

Assessment (and notification)

Pass/Fail
Where the overall assessment is a fail, list below the areas where the consignor fails to achieve the required standard of security or has a specific vulnerability. Also advice on the adjustments needed to achieve the required standard and thus to pass.
Signed
(Name of validator)

ATTACHMENT 6-C2VALIDATION CHECKLIST FOR THIRD COUNTRY EU AVIATION SECURITY VALIDATED REGULATED AGENTSThird country entities have the option to become part of an ACC3's (Air cargo or mail carrier operating into the Union from a third country airport) secure supply chain by seeking designation as a third country EU aviation security validated regulated agent (RA3). An RA3 is a cargo handling entity located in a third country that is validated and approved as such on the basis of an EU aviation security validation.An RA3 shall ensure that security controls including screening where applicable have been applied to consignments bound for the Union and the consignments have been protected from unauthorised interference from the time that those security controls were applied and until the consignments are loaded onto an aircraft or are otherwise handed over to an ACC3 or other RA3.The prerequisites for carrying air cargo or air mail into the UnionThe Union Member States: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden and the United Kingdom. or Iceland, Norway and Switzerland are provided for in Implementing Regulation (EU) 2015/1998.The checklist is the instrument to be used by the EU aviation security validator for assessing the level of security applied to EU or EEA bound air cargo or air mailEU or EEA bound air cargo or air mail or aircraft in this validation checklist is equivalent to the Union and Iceland, Norway and Switzerland bound air cargo or air mail or aircraft. by or under the responsibility of the entity seeking designation as a RA3. The checklist is to be used only in the cases specified in point (b) of point 6.8.5.1 of the Annex to Implementing Regulation (EU) 2015/1998. In cases specified in point (a) of point 6.8.5.1 of that Annex, the EU aviation security validator shall use the ACC3 checklist.A validation report shall be delivered to the designating appropriate authority and to the validated entity within a maximum of one month after the on-site verification. Integral parts of the validation report shall be at least:the completed checklist signed by the EU aviation security validator and where applicable commented by the validated entity; andthe declaration of commitments (Attachment 6-H2 to Implementing Regulation (EU) 2015/1998) signed by the validated entity; andan independence declaration (Attachment 11-A to Implementing Regulation (EU) 2015/1998) in respect of the entity validated signed by the EU aviation security validator.Page numbering, the date of the EU aviation security validation and initialling on each page by the validator and the validated entity shall be the proof of the validation report's integrity.The RA3 shall be able to use the report in its business relations with any ACC3 and where applicable, with any RA3.By default the validation report shall be in English.Part 5 — Screening and Part 6 — High risk cargo or mail (HRCM) shall be assessed against the requirements of Chapters 6.7 and 6.8 of the Annex to Implementing Regulation (EU) 2015/1998. For those parts that cannot be assessed against the requirements of Implementing Regulation (EU) 2015/1998, baseline standards are the Standards and Recommended Practices (SARPs) of Annex 17 to the Convention on International Civil Aviation and the guidance material contained in the ICAO Aviation Security Manual (Doc 8973-Restricted).Completion notes:All applicable and relevant parts of the checklist must be completed, in accordance with the business model and operations of the entity being validated. Where no information is available, this must be explained.After each part, the EU aviation security validator shall conclude if and to what extent the objectives of this part are met.PART 1Identification of the entity validated and the validator

1.1.Date(s) of validation1.2.Date of previous validation where applicable1.3.Aviation security validator information1.4.Name of entity1.5.Main address of organisation (if different from site to be validated)1.6.Nature of business — More than one business type may be applicable1.7.Does the applicant …?1.8.Approximate number of employees on site1.9.Name and title of person responsible for third country air cargo or air mail security

Use exact date format, such as from 01.10.2012 to 02.10.2012
dd/mm/yyyy
dd/mm/yyyy
Previous RA3 registration number, where available
AEO certificate or C-TPAT status or other certifications, where available
Name
Company/Organisation/Authority
Unique alphanumeric identifier (UAI)
Email address
Telephone number — including international codes
Name
Company number (for example, commercial register identification number, if applicable)
Number/Unit/Building
Street
Town
Postcode
State (where relevant)
Country
P.O. Box address, if applicable
Number/Unit/Building
Street
Town
Postcode
State (where relevant)
Country
P.O. Box address, if applicable
(a)air cargo only(b)air and other modes of transport(c)freight forwarder with cargo premises(d)freight forwarder without cargo premises(e)handling agent(f)others
(a)receive cargo from another 3rd country regulated agent
(b)receive cargo from 3rd country known consignors
(c)receive cargo from 3rd country account consignors
(d)receive exempted cargo
(e)screen cargo
(f)store cargo
(g)other, please specify
Number
Name
Job title
Email address
Telephone number — including international codes

PART 2Organisation and responsibilities of the third country EU aviation security validated regulated agentObjective: No air cargo or air mail shall be carried to the EU or EEA without being subject to security controls. Cargo and mail delivered by an RA3 to an ACC3 or another RA3 may only be accepted as secure cargo or mail if such security controls are applied by the RA3. Details of such controls are provided in the following Parts of this checklist.The RA3 shall have procedures in place to ensure that appropriate security controls are applied to all EU or EEA bound air cargo and air mail and that secure cargo or mail is protected until being transferred to an ACC3 or another RA3. Security controls shall consist of one of the following:(a)physical screening which shall be of a standard sufficient to reasonably ensure that no prohibited articles are concealed in the consignment;(b)other security controls, part of a supply chain security process, that reasonably ensure that no prohibited articles are concealed in the consignment and which have been applied by another RA3, KC3 or AC3 designated by the RA3.Reference: point 6.8.3 of the Annex to Implementing Regulation (EU) 2015/1998.

2.1.Has the entity established a security programme?2.2.Entity security programme2.3.Does the security programme sufficiently cover the elements mentioned in parts 3 to 9 of the checklist?2.4.Is the security programme conclusive, robust and complete?2.5.Has the entity established a process to ensure that air cargo or air mail is submitted to appropriate security controls before being transferred to an ACC3 or another RA3?2.6.Has the entity a management system (such as instruments, instructions) in place to ensure that the required security controls are implemented?2.7.Conclusions and general comments on the reliance, conclusiveness and robustness of the process.

YES or NO
If NO go directly to point 2.5.
Date — use exact format dd/mm/yyyy
Version
Is the security programme submitted and/or approved by the appropriate authority of the state of the entity? If YES please describe the process.
YES or NO
If NO, describe why detailing the reasons
YES or NO
If NO, specify the reasons
YES or NO
If YES, describe the process
YES or NO
If YES, describe the management system and explain if it is approved, checked or provided by the appropriate authority or another entity.
If NO, explain how the entity ensures that security controls are applied in the required manner.
Comments from the entity
Comments from the EU aviation security validator

PART 3Staff recruitment and trainingObjective: To ensure the required security controls are applied, the RA3 shall assign responsible and competent staff to work in the field of securing air cargo or air mail. Staff with access to secured air cargo must possess all the competencies required to perform their duties and shall be appropriately trained.To fulfil that objective, the RA3 shall have procedures in place to ensure that all staff (such as permanent, temporary, agency staff, drivers) with direct and unescorted access to air cargo or air mail to which security controls are being or have been applied:(a)have been subject to initial and recurrent pre-employment checks or background checks, which are at least in accordance with the requirements of the local authorities of the RA3 premises validated; and(b)have completed initial and recurrent security training to be aware of their security responsibilities in accordance with the requirements of the local authorities of the RA3 premises validated.Note:A background check means a check of a person's identity and previous experience, including where legally permissible, any criminal history as part of the assessment of an individual's suitability to implement a security control and/or for unescorted access to a security restricted area (ICAO Annex 17 definition).A pre-employment check shall establish the person's identity on the basis of documentary evidence, cover employment, education and any gaps during at least the preceding five years, and require the person to sign a declaration detailing any criminal history in all states of residence during at least the preceding 5 years (Union definition).Reference: point 6.8.3.1 of the Annex to Implementing Regulation (EU) 2015/1998.

3.1.Is there a procedure ensuring that all staff with direct and unescorted access to secured air cargo/air mail is subject to a pre-employment check that assesses background and competence?3.2.Does this procedure include?3.3.Is there a procedure ensuring that the person responsible for the application and supervision of the implementation of security controls at the site is subject to a pre-employment check that assesses background and competence?3.4.Does this procedure include?3.5.Do staff with direct and unescorted access to secured air cargo or air mail receive security training before being given access to secured air cargo or air mail?3.6.Do staff that accept, screen or protect air cargo or air mail receive specific job-related training?3.7.Do staff referred to in points 3.5 and 3.6 receive recurrent training?3.8.Conclusion: do the measures concerning staff recruitment and training ensure that all staff with access to secured air cargo or air mail have been properly recruited and trained to a standard sufficient to be aware of their security responsibilities?

YES or NO
If YES, indicate the number of preceding years taken into account for the pre-employment check and state which entity carries it out.
□background check□pre-employment check□check of criminal records□interviews□other (provide details)Explain the elements, indicate which entity carries this element out and where applicable, indicate the preceding timeframe that is taken into account.
YES or NO
If YES, indicate the number of preceding years taken into account for the pre-employment check and state which entity carries it out.
□background check□pre-employment check□check of criminal records□interviews□other (provide details)Explain the elements, indicate which entity carries this element out and where applicable, indicate the preceding timeframe that is taken into account.
YES or NO
If YES, describe the elements and duration of the training
YES or NO
If YES, describe the elements and durations of training courses.
YES or NO
If YES, specify the elements and the frequency of the recurrent training
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 4Acceptance proceduresObjective: The RA3 may receive cargo or mail from another RA3, a KC3, an AC3 or from an unknown consignor. The RA3 shall have appropriate acceptance procedures for cargo and mail in place in order to establish whether a consignment comes from a secure supply chain or not and subsequently which security measures need to be applied to it.When accepting any consignments, the RA3 shall establish the status of the entity from which it receives the consignments verifying whether or not the unique alphanumeric identifier (UAI) of the entity delivering the consignments is indicated on the accompanying documentation, and confirming that the air carrier or entity delivering the consignment is listed as active in the Union database on supply chain security for the specified airport or site, as appropriate.If there is no indication of the UAI on the documentation or if the status of the air carrier or entity on the Union database on supply chain security is not active, the RA3 shall treat the consignments as arriving from an unknown source.Additionally, a RA3 shall maintain a database giving at least the following information for each regulated agent or known consignor that has been subject to EU aviation security validation in accordance with point 6.8.5.1, from which it directly accepts cargo or mail to be delivered to an ACC3 for carriage into the Union:(a)the company details, including the bona fide business address;(b)the nature of the business, excluding business sensitive information;(c)contact details, including those of the person(s) responsible for security;(d)the company registration number, if applicable;(e)where available, the validation report;(f)the unique alphanumeric identifier attributed in the Union database on supply chain security.Reference: points 6.8.3.1, 6.8.3.5, and 6.8.5.4 of the Annex to Implementing Regulation (EU) 2015/1998.Note: An RA3 may only accept cargo from an AC3 as secure cargo, if this RA3 has designated this consignor itself as AC3, in accordance with point (c) of point 6.8.3.1 of the Annex to Implementing Regulation (EU) 2015/1998, and accounts for the cargo delivered by this consignor.

4.1.When accepting a consignment, does the entity establish whether it comes from another RA3, a KC3, an AC3 or an unknown consignor?4.2.Does the entity verify the indication of the UAI on the documentation accompanying consignments received from another ACC3, RA3 or KC3 and confirms the active status of the ACC3, RA3 or KC3 on the Union database on supply chain security?4.3.Does the entity have a procedure to ensure that in case the documentation does not contain the UAI or the entity from which the cargo is received has no active status on the Union database on supply chain security, the consignment is treated as shipment coming from an unknown source?4.4.Does the entity designate consignors as AC3?4.5.When accepting a consignment, does the entity establish whether its destination is an EU or EEA airport?4.6.If YES — does the entity submit all air cargo or air mail to the same security controls when the destination is an EU or EEA airport?4.7.When accepting a consignment, does the entity establish whether it is to be regarded as high risk cargo and mail (HRCM) (see definition in Part 6), including for consignments that are delivered by other modes of transport than by air?4.8.When accepting a secured consignment, does the validated entity establish whether it has been protected from unauthorised interference or tampering?4.9.Is the person making the delivery required to present an official identification document containing a photo?4.10.Is there a process in place to identify consignments that require screening?4.11.Conclusion: Are the acceptance procedures sufficient to establish that air cargo or air mail to an EU or EEA airport destination comes from a secure supply chain or needs to be subject to screening?

YES or NO
If YES, how?
YES or NO
YES or NO
YES or NO
If YES, describe the procedure and the safeguards required by the entity from the consignor.
YES or NO — explain
YES or NO
If YES, describe the procedure
YES or NO
If YES, how?Describe the procedure
YES or NO
If YES, describe by which means (for example, using seals, locks, inspection)
YES or NO
YES or NO
If YES, how?
YES or NO
If NO, specify reasons
Comments from the entity
Comments from EU aviation security validator

PART 5ScreeningObjective: Where the RA3 accepts cargo and mail which does not come from a secure supply chain, the RA3 needs to subject these consignments to appropriate screening before it may be delivered to an ACC3 as secure cargo. The RA3 shall have procedures in place to ensure that EU or EEA bound air cargo and air mail for transfer, transit or unloading at a Union airport is screened by the means or methods referred to in Union legislation to a standard sufficient to reasonably ensure that it contains no prohibited articles.Where screening of air cargo or air mail is performed by or on behalf of the appropriate authority in the third country, the RA3 shall declare this fact and specify the way adequate screening is ensured.Reference: point 6.8.3 of the Annex to Implementing Regulation (EU) 2015/1998.

5.1.Is screening applied on behalf of the entity by another entity?5.2.Is the entity able to request the appropriate security controls in case the screening is carried out by one of the above entities?5.3.By which instruments and instructions (such as oversight, monitoring, and quality control) does the entity ensure that security controls are applied in the required manner by such service providers?5.4.What methods of screening are used for air cargo and mail?5.5.Is the equipment or method (such as explosive detection dogs) used included in the most recent EU, European Civil Aviation Conference (ECAC) or the Transportation Security Administration (TSA) of the US compliance list?5.6.Is the equipment used in accordance with the manufacturers' concept of operations (CONOPS) and is the equipment regularly tested and maintained?5.7.In case EDDs are deployed, are they subjected to initial and recurrent training, approval and quality control process to a standard equivalent to the EU or TSA requirements?5.8.In case EDDs are used, is the screening process following a deployment methodology equivalent to EU or TSA standards?5.9.Is the nature of the consignment taken into consideration during screening?5.10.Is there a process for the resolution of the alarm generated by the screening equipment? For some equipment, such as x-ray equipment, the alarm is triggered by the operator himself.5.11.Are any consignments exempt from security screening?5.12.Are there any exemptions that do not comply with the Union list?5.13.Is access to the screening area controlled to ensure that only authorised and trained staff are granted access?5.14.Is an established quality control and/or testing regime in place?5.15.Conclusion: Is air cargo or air mail screened by one of the means or methods listed in point 6.2.1 of the Annex to Implementing Regulation (EU) 2015/1998 to a standard sufficient to reasonably ensure that it contains no prohibited articles?

YES or NO
If YES,Specify the nature of these entities and provide details:private screening company;government regulated company;government screening facility or body;otherSpecify the nature of the agreement or contract between the validated entity and the entity that applies the screening on its behalf.
YES or NO
If NO, provide details

Specify, including details of equipment used for screening air cargo and air mail (such as manufacturer, type, software version, standard, serial number) for all the methods deployed.
YES or NO
If YES, provide details
If NO, give details specifying the approval of the equipment and date thereof, as well as any indications that it complies with EU equipment standards.
YES or NO
If YES, describe the process
YES or NO
If YES, describe the entire process and the related documentation supporting the assessment
YES or NO
If YES, describe the entire process and the related documentation supporting the assessment
YES or NO
If YES, describe how it is ensured that the screening method selected is employed to a standard sufficient to reasonably ensure that no prohibited articles are concealed in the consignment.
YES or NO
If YES, describe the process of resolving alarms to reasonably ensure the absence of prohibited articles.
If NO, describe what happens to the consignment
YES or NO
YES or NO
If YES, detail
YES or NO
If YES, describe
YES or NO
If YES, describe
YES or NO
If NO, specify reason
Comments from the entity
Comments from the EU aviation security validator

PART 6High Risk Cargo or MailObjective: Consignments which originate from or transfer in locations identified as high risk by the Union or which appear to have been significantly tampered with are to be considered as high risk cargo and mail (HRCM). Such consignments have to be screened in line with specific instructions. The RA3 shall have procedures in place to ensure that EU or EEA bound HRCM is identified and subject to appropriate controls as defined in the Union legislation.The ACC3 to which the RA3 delivers air cargo or mail for transportation shall be authorised to inform the RA3 about the latest state of relevant information on high risk origins.The RA3 shall apply the same measures, irrespective of whether it receives high risk cargo and mail from an air carrier or through other modes of transportation.Reference: point 6.7 of the Annex to Implementing Regulation (EU) 2015/1998.Note: HRCM cleared for carriage into the EU/EEA shall be issued the security status "SHR", meaning secure for passenger, all-cargo and all-mail aircraft in accordance with high risk requirements.

6.1.Do staff responsible for performing security controls know which air cargo and mail is to be treated as high risk cargo and mail (HRCM)?6.2.Does the entity have procedures in place for the identification of HRCM?6.3.Is HRCM subject to HRCM screening procedures according to Union legislation?6.4.After screening, does the entity issue a security status declaration for SHR in the documentation accompanying the consignment?6.5.Conclusion: Is the process put in place by the entity relevant and sufficient to ensure that all HRCM has been properly treated before loading?

YES or NO
If YES, describe
YES or NO
If YES, describe
YES or NO
If NO, indicate procedures applied
YES or NO
If YES, describe how security status is issued and in which document
YES or NO
If NO, specify reason
Comments from the entity
Comments from EU aviation security validator

PART 7Protection of secured air cargo and mailObjective: The RA3 shall have procedures in place to ensure EU or EEA bound air cargo and/or air mail is protected from unauthorised interference and/or any tampering from the point where security screening or other security controls are applied or from the point of acceptance after screening or security controls have been applied, until loading or transferring to an ACC3 or another RA3. If previously secured air cargo and mail is not protected afterwards, it may not be loaded or transferred to an ACC3 or another RA3 as secure cargo or mail.Protection can be provided by different means such as physical (for example barriers, locked rooms), human (for example patrols, trained staff) and technological (for example CCTV, intrusion alarm).EU or EEA bound secured air cargo or mail should be separated from air cargo or mail which is not secured.Reference: point 6.8.3.1 of the Annex to Implementing Regulation (EU) 2015/1998.

7.1.Is protection of secured air cargo and air mail applied on behalf of the validated entity by another entity?7.2.Are security controls and protection in place to prevent tampering during the screening process?7.3.Is the secure air cargo/air mail only accessible to authorised persons?7.4.Are there procedures in place to ensure EU or EEA bound air cargo or air mail to which security controls have been applied are protected from unauthorised interference from the time it has been secured until its loading or is transferred to an ACC3 or another RA3?7.5.Conclusion: Is the protection of consignments sufficiently robust to prevent unlawful interference?

YES or NO
If YES,Specify the nature of these entities and provide details:private screening company;government regulated company;government screening facility or body;other
YES or NO
If YES, describeSpecify what kind(s) of protection(s) are put in place:physical (for example fence, barrier, building of solid construction),human (for example patrols etc.),technological (for example CCTV, alarm system).Explain how they are organised.
YES or NO
If YES, describeSpecify how all access points (including doors and windows) to identifiable and secured air cargo or air mail are controlled.
YES or NO
If YES, describe how it is protected (for example by physical, human, technological means)Specify also if the building is of solid construction and what kinds of materials are used, if available.
If NO, specify reasons
YES or NO
If NO, specify reason
Comments from the entity
Comments from EU aviation security validator

PART 8DocumentationObjective: The RA3 shall ensure that the documentation accompanying a consignment to which the RA3 has applied security controls (such as screening, protection), contains at least:(a)the unique alphanumeric identifier received from the designating appropriate authority; and(b)the unique identifier of the consignment, such as the number of the (house or master) air waybill, when applicable; and(c)the content of the consignment; and(d)the security status, indicated as follows:"SPX", which means secure for passenger, all-cargo and all-mail aircraft, or"SCO", which means secure for all-cargo and all-mail aircraft only, or"SHR", which means secure for passenger, all-cargo and all-mail aircraft in accordance with high risk requirements.If the security status is issued by the RA3, the entity shall additionally indicate the reasons for issuing it, such as the means or method of screening used or the grounds for exempting the consignment from screening, using the standards adopted in the Consignment Security Declaration scheme.The documentation accompanying the consignment may either be in the form of an air waybill, equivalent postal documentation or in a separate declaration, and either in an electronic format or in writing.Reference: point (d) of point 6.3.2.6, points 6.8.3.4, 6.8.3.5 and 6.8.3.6 of the Annex to Implementing Regulation (EU) 2015/1998

8.1.Does the entity ensure that appropriate accompanying documentation is established, and include the information required in point (d) of point 6.3.2.6, points 6.8.3.4, 6.8.3.5 and 6.8.3.6 of the Annex to Implementing Regulation (EU) 2015/1998?8.2.In particular, does the entity specify the status of the cargo and how this was achieved?8.3.Conclusion: Is the documentation process sufficient to ensure that cargo or mail is provided with proper accompanying documentation which specifies the correct security status and all required information?

YES or NO
If NO, explain
YES or NO
If NO, explain
YES or NO
If NO, specify reason
Comments from the entity
Comments from EU aviation security validator

PART 9TransportationObjective: Air cargo and air mail must be protected from unauthorised interference or tampering from the time it has been secured until its loading or until it is transferred to an ACC3 or another RA3. This includes protection during transportation to the aircraft, to the ACC3 or to another RA3. If previously secured air cargo and mail is not protected during transportation, it may not be loaded or transferred to an ACC3 or another RA3 as secure cargo.During transportation to an aircraft, an ACC3 or another RA3, the RA3 is responsible for the protection of the secure consignments. This includes cases where the transportation is undertaken by another entity, such as a freight forwarder, on its behalf. This does not include cases whereby the consignments are transported under the responsibility of an ACC3 or another RA3.Reference: point 6.8.3 of the Annex to Implementing Regulation (EU) 2015/1998.

9.1.How is the air cargo or air mail conveyed to the ACC3 or to another RA3?9.2.Is the air cargo or air mail tamper evidently packed?9.3.Is the vehicle sealed or locked before transportation?9.4.Where numbered seals are used, is access to the seals controlled and are the numbers recorded?9.5.If applicable, does the respective haulier sign the haulier declaration?9.6.Has the person transporting the cargo been subject to specific security controls and awareness training before being authorised to transport secured air cargo or air mail, or both?9.7.Conclusion: Are the measures sufficient to protect air cargo or air mail from unauthorised interference during transportation?

(a)Validated entity's own transport?
YES or NO
(b)Other RA3'sor ACC3's transport?
YES or NO
(c)Contractor used by the validated entity?
YES or NO
YES or NO
If YES, how
YES or NO
If YES, how
YES or NO
If YES, specify how
YES or NO
YES or NO
If YES, please describe what kind of security controls (such as pre-employment check, background check) and what kind of training (such as security awareness training).
YES or NO
If NO, specify reasons
Comments from the entity
Comments from EU aviation security validator

PART 10ComplianceObjective: After assessing Parts 1 to 9 of this checklist, the EU aviation security validator has to conclude if its on-site verification confirms the implementation of the security controls in compliance with the objectives listed in this checklist for the EU or EEA bound air cargo or air mail.Two different scenarios are possible. The EU aviation security validator concludes that the entity:1.has succeeded in complying with the objectives referred to in this checklist. A validation report shall be delivered to the designating appropriate authority and to the validated entity within a maximum of one month after the on-site verification;2.has failed in complying with the objectives referred to in this checklist. In that case, the entity is not authorised to deliver secured air cargo or mail for EU or EEA destination to an ACC3 or to another RA3. It shall receive a copy of the completed checklist stating the deficiencies.

10.1.General conclusion: Indicate the case closest to the situation validated

1 or 2
Comments from EU aviation security validator
Comments from the entity

Name of the validator:Date:Signature:ANNEXList of persons and entities visited and interviewedProviding the name of the entity, the name and the position of the contact person and the date of the visit or interview.

Name of entity	Name of contact person	Position of contact person	Date of visit or interview

ATTACHMENT 6-C3VALIDATION CHECKLIST FOR ACC3ACC3 (Air cargo or mail carrier operating into the Union from a third country airport) designation is the prerequisite for carrying air cargo or air mail into the European UnionThe Union Member States: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden and the United Kingdom. (EU) or Iceland, Norway and Switzerland and is required by Implementing Regulation (EU) 2015/1998.ACC3 designation is in principle required for all flights carrying cargo or mail for transfer, transit or unloading at EU or EEA airportsEU or EEA bound air cargo or air mail or aircraft in this validation checklist is equivalent to EU and Iceland, Norway and Switzerland bound air cargo or air mail or aircraft.. The appropriate authorities of the Member States of the European Union, Iceland, Norway and Switzerland are each responsible for the designation of specific air carriers as ACC3. The designation is based on the security programme of an air carrier and on an on-site verification of the implementation in compliance with the objectives referred to in this validation checklist.The checklist is the instrument to be used by the EU aviation security validator for assessing the level of security applied to EU or EEA bound air cargo or air mail by or under the responsibility of the ACC3 or an air carrier applying for ACC3 designation.A validation report shall be delivered to the designating appropriate authority and to the validated entity within a maximum of one month after the on-site verification. Integral parts of the validation report shall be at least:the completed checklist signed by the EU aviation security validator and where applicable commented by the validated entity; andthe declaration of commitments (Attachment 6-H1 to Implementing Regulation (EU) 2015/1998) signed by the validated entity; andan independence declaration (Attachment 11-A to Implementing Regulation (EU) 2015/1998) in respect of the entity validated signed by the EU aviation security validator.Page numbering, the date of the EU aviation security validation and initialling on each page by the validator and the validated entity shall be the proof of the validation report's integrity. By default the validation report shall be drafted in English.Part 3 — Security programme of the air carrier, Part 6 — Database, Part 7 — Screening and Part 8 — High risk cargo or mail (HRCM) shall be assessed against the requirements of Chapters 6.7 and 6.8 of the Annex to Implementing Regulation (EU) 2015/1998. For the other parts, baseline standards are the Standards and Recommended Practices (SARPs) of Annex 17 to the Convention on International Civil Aviation and the guidance material contained in the ICAO Aviation Security Manual (Doc 8973-Restricted).Completion notes:All applicable and relevant parts of the checklist must be completed, in accordance with the business model and operations of the entity being validated. Where no information is available, this must be explained.After each part, the EU aviation security validator shall conclude if and to what extent the objectives of this part are met.PART 1Identification of the entity validated and the validator

1.1.Date(s) of validation1.2.Date of previous validation and unique alphanumeric identifier (UAI) of the ACC3 where available1.3.Aviation security validator information1.4.Name of air carrier to be validated1.5.Details of third country airport location to be validated or cargo or mail facilities linked to it1.6.Nature of air carrier's business — More than one business type may be applicable1.7.Name and title of person responsible for third country air cargo or air mail security1.8.Address of the air carrier's main office at the airport being visited1.9.Address of the air carrier's main office, for example the corporate headquarters

Use exact date format, such as 01.10.2012 to 02.10.2012
dd/mm/yyyy
dd/mm/yyyy
UAI
Name
Company/Organisation/Authority
UAI
Email address
Telephone number — including international codes
Name
AOC (Air Operators Certificate) issued in (name of State):
International Air Transport Association (IATA) code or International Civil Aviation Organisation (ICAO) code if IATA code does not exist for. Specify which code applies.
State responsible for designating air carrier as ACC3
Name
IATA or ICAO code for the airport
Country
(a)passenger and cargo/mail carrier;(b)cargo and mail only carrier;(c)cargo only carrier;(d)mail only carrier;(e)integrator;(f)charter.
Name
Job title
Email address
Telephone number — including international codes
Number/Unit/Building/Airport
Street
Town
Postcode
State (where relevant)
Country
Number/Unit/Building/Airport
Street
Town
Postcode
State (where relevant)
Country

PART 2Organisation and responsibilities of the ACC3 at the airportObjective: No air cargo or mail shall be carried to the EU or EEA without being subject to security controls. Details of such controls are provided by the following Parts of this checklist. The ACC3 shall not accept cargo or mail for carriage on an EU-bound aircraft unless the application of screening or other security controls is confirmed and accounted for by an EU aviation security validated regulated agent, an EU aviation security validated known consignor or an account consignor designated by itself or by an EU aviation security validated regulated agent, or such consignments are subject to screening in accordance with the Union legislation.The ACC3 shall have a process to ensure that appropriate security controls are applied to all EU or EEA bound air cargo and air mail unless it is exempted from screening in accordance with the Union legislation and that cargo or mail is protected thereafter until loading onto aircraft. Security controls shall consist of:physical screening which shall be of a standard sufficient to reasonably ensure that no prohibited articles are concealed in the consignment, orother security controls which are part of a supply chain security process that reasonably ensure that no prohibited articles are concealed in the consignment applied by EU aviation security validated regulated agents or known consignors or by an account consignor designated by itself or by an EU aviation security validated regulated agent.Reference: point 6.8.3 of the Annex to Implementing Regulation (EU) 2015/1998

2.1.Has the air carrier established a process to ensure that air cargo or air mail is submitted to appropriate security controls prior to being loaded onto an EU or EEA bound aircraft?2.2.Are the security controls applied by the air carrier or on its behalf by an entity covered under the air carrier's security programme?2.3.By which instruments and instructions (such as oversight, monitoring, and quality control) does the air carrier ensure that security controls are applied in the required manner by the above service providers?2.4.Is the air carrier able to request the appropriate security controls in case the screening is carried out by entities which are not covered by the air carrier's security programme, such as government facilities?2.5.By which instruments and instructions (such as oversight, monitoring, and quality control) does the air carrier ensure that security controls are applied in the required manner by such service providers?2.6.Has a regulated agent or known consignor programme for air cargo and mail been put in place in accordance with ICAO standards in the State of the airport at which the validation visit takes place?2.7.Conclusions and general comments on the reliance, conclusiveness and robustness of the process.

YES or NO
If YES, describe the process
If YES, provide details
If NO, which entities not covered by the air carrier's security programme apply security controls to air cargo or mail carried by this air carrier into the EU or EEA?
Specify the nature of these entities and provide details:private handling company;government regulated company;government screening facility or body;other

YES or NO
If NO, provide details

If YES, describe the elements of the programme and how it has been put in place
Comments from the air carrier
Comments from the EU aviation security validator

PART 3Security programme of the air carrierObjective: The ACC3 shall ensure that its security programme includes all the aviation security measures relevant and sufficient for air cargo and mail to be transported into the Union.The security programme and associated documentation of the air carrier shall be the basis of security controls applied in compliance with the objective of this checklist. The air carrier may wish to consider passing its documentation to the EU aviation security validator in advance of the site visit to help acquaint him with the details of the locations to be visited.Reference: point 6.8.2.1 of the Annex and Attachment 6-G to Implementing Regulation (EU) 2015/1998Note: The following points listed in Attachment 6-G to Implementing Regulation (EU) 2015/1998 shall be appropriately covered:(a)description of measures for air cargo and mail;(b)procedures for acceptance;(c)regulated agent scheme and criteria;(d)known consignor scheme and criteria;(e)account consignor scheme and criteria;(f)standard of screening;(g)location of screening;(h)details of screening equipment;(i)details of operator or service provider;(j)list of exemptions from security screening;(k)treatment of high risk cargo and mail.

3.1.Air carrier security programme3.2.Does the security programme cover sufficiently the elements of the list above?3.3.Are the aviation security measures described by the security programme relevant and sufficient to secure EU or EEA bound air cargo or air mail according to the required standards?3.4.Conclusion: Is the security programme conclusive, robust and complete?

Date — use exact date format dd/mm/yyyy
Version
Has the programme been submitted to an EU or EEA appropriate authority at an earlier stage? If YES was it for ACC3 designation? Other purposes?
YES or NO
If NO, describe why detailing the reasons
YES or NO
If NO, describe why detailing the reasons
YES or NO
If NO, specify reasons
Comments from the air carrier
Comments from the EU aviation security validator

PART 4Staff recruitment and trainingObjective: The ACC3 shall assign responsible and competent staff to work in the field of securing air cargo or air mail. Staff with access to secured air cargo possess all the competencies required to perform their duties and are appropriately trained.In order to fulfil that objective, the ACC3 shall have a procedure to ensure that all staff (such as permanent, temporary, agency staff, drivers) with direct and unescorted access to air cargo or air mail to which security controls are being or have been applied:have been subject to initial and recurrent pre-employment checks or background checks, which are at least in accordance with the requirements of the local authorities of the airport validated, andhave completed initial and recurrent security training to be aware of their security responsibilities in accordance with the requirements of the local authorities of the airport validated.Reference: point 6.8.3.1 of the Annex to Implementing Regulation (EU) 2015/1998Note:A background check means a check of a person's identity and previous experience, including where legally permissible, any criminal history as part of the assessment of an individual's suitability to implement a security control or for unescorted access to a security restricted area (ICAO Annex 17 definition).A pre-employment check shall establish the person's identity on the basis of documentary evidence, cover employment, education and any gaps during at least the preceding five years, and require the person to sign a declaration detailing any criminal history in all states of residence during at least the preceding five years (Union definition).

4.1.Is there a procedure ensuring that all staff with direct and unescorted access to secured air cargo or air mail are subject to pre-employment checks that assesses background and competence?4.2.Does this procedure include?4.3.Is there a procedure ensuring that the person responsible for the application and supervision of the implementation of security controls at the site is subject to a pre-employment check that assesses background and competence?4.4.Does this procedure include?4.5.Do staff with direct and unescorted access to secured air cargo or air mail receive security training before being given access to secured air cargo or air mail?4.6.Do staff that accept, screen or protect air cargo or air mail receive specific job related training?4.7.Do staff referred to in points 4.5 and 4.6 receive recurrent training?4.8.Conclusion: do the measures concerning staff recruitment and training ensure that all staff with access to secured air cargo or air mail have been properly assigned and trained to a standard sufficient to be aware of their security responsibilities?

YES or NO
If YES, indicate the number of preceding years taken into account for the pre-employment check and state which entity carries it out.
background checkpre-employment checkcheck of criminal recordsinterviewsother (provide details)Explain the elements, indicate which entity carries this element out and where applicable, indicate the preceding timeframe that is taken into account.
YES or NO
If YES, indicate the number of preceding years taken into account for the pre-employment check and state which entity carries it out.
background checkpre-employment checkcheck of criminal recordsinterviewsother (provide details)Explain the elements, indicate which entity carries this element out and where applicable, indicate the preceding timeframe that is taken into account.
YES or NO
If YES, describe the elements and duration of the training
YES or NO
If YES, describe the elements and durations of training courses.
YES or NO
If YES, specify the elements and the frequency of the recurrent training
YES or NO
If NO, specify reasons
Comments from the air carrier
Comments from the EU aviation security validator

PART 5Acceptance proceduresObjective: The ACC3 shall have a procedure in place in order to assess and verify upon acceptance the security status of a consignment in respect of previous controls.The procedure shall include the following elements:(a)confirmation that the entity delivering the consignment is listed as active in the Union database on supply chain security for the specified airport or site;(b)verification that the Union database unique alphanumeric identifier of the entity delivering the consignment is indicated on the accompanying documentation;(c)in case of consignments received from an account consignor, verification that the entity is in listed in the air carrier's database.If there is no indication on the accompanying documentation of the identifier, or if the air carrier or entity delivering the consignments is not listed as active in the Union database on supply chain security, or in the case of account consignors the entity is not in the air carrier's database, it shall be deemed that no security controls have previously been applied, and the consignments shall be screened by the ACC3 or by another EU aviation security validated RA3 before being loaded onto the aircraft;(d)verification of whether the consignment is delivered by a person nominated by the EU aviation security validated regulated agent or known consignor as listed in its database or an account consignor of such a regulated agent or designated by the air carrier itself;(e)the person nominated shall correspond to the person tasked to deliver the air cargo or air mail to the air carrier. The person delivering the consignment to the air carrier shall present an identity card, passport, driving license or other document, which includes his or her photograph and which has been issued or is recognised by the national authority;(f)where applicable, verification of whether the consignment is presented with all the required security information (air waybill and security status information on paper or by electronic means, description of the consignment and unique identifier thereof, reasons for issuing the security status, means or methods of screening or grounds for exemption from screening) that corresponds to the air cargo and mail consignments being delivered;(g)verification of whether the consignment is free from any signs of tampering; and(h)verification of whether the consignment has to be treated as high risk cargo and mail (HRCM).Reference: point 6.8.3.5, 6.8.3.6, 6.8.3.7, and 6.8.5.4 of the Annex to Implementing Regulation (EU) 2015/1998

5.1.When directly accepting a consignment, does the air carrier establish whether it comes from a regulated agent, a known consignor or an account consignor recognised according to Union air cargo legislation and listed in the Union database on supply chain security and in the database kept by the air carrier?5.2.Does the air carrier verify the indication of the UAI on the documentation accompanying consignments received from another ACC3, RA3 or KC3 and confirms the active status of the ACC3, RA3 or KC3 on the database on supply chain security?5.3.Does the entity have a procedure to ensure that in case the documentation does not contain the UAI or the entity from which the cargo is received has no active status on the Union database on supply chain security, the consignment is treated as shipment coming from an unknown source?5.4.Does the air carrier designate consignors as AC3?5.5.When directly accepting a consignment, does the air carrier establish whether its destination is an EU or EEA airport?5.6.If YES — does the air carrier submit all cargo or mail to the same security controls when the destination is an EU or EEA airport?5.7.When directly accepting a consignment, does the air carrier establish whether it is to be regarded as high risk cargo and mail (HRCM), including for consignments that are delivered by other modes of transport other than air?5.8.When accepting a secured consignment, does the air carrier establish whether it has been protected from unauthorised interference and/or tampering?5.9.If the air carrier accepts transit air cargo or air mail at this location (cargo or mail that departs on the same aircraft it arrived on), does the air carrier establish on the basis of the given data whether or not further security controls need to be applied?5.10.If the air carrier accepts transfer air cargo or air mail at this location (cargo or mail that departs on a different aircraft to the one it arrived on), does the air carrier establish on the basis of the given data whether or not further security controls need to be applied?5.11.Is the person delivering secured known air cargo to the air carrier required to present an official identification document containing a photograph?5.12.Conclusion: Are the acceptance procedures sufficient to establish whether air cargo or air mail comes from a secure supply chain or that it needs to be subjected to screening?

YES or NO
If YES, describe the procedure
YES or NO
YES or NO
YES or NO
If YES, describe the procedure and the safeguards required by the air carrier from the consignor.
YES or NO — explain
YES or NO
If YES, describe the procedure
YES or NO
If YES, how?Describe the procedure
YES or NO
If YES, describe (such as seals, locks).
YES or NO
If YES, how is it established?
If NO, what controls are applied to ensure security of EU or EEA bound cargo and mail?
YES or NO
If YES, how is it established?
If NO, what controls are applied to ensure security of EU or EEA bound cargo and mail?
YES or NO
YES or NO
If NO, specify reasons
Comments from the air carrier
Comments from the EU aviation security validator

PART 6DatabaseObjective: Where the ACC3 is not obliged to apply 100 % screening to EU/EEA bound air cargo or air mail, the ACC3 shall ensure the cargo or mail comes from an EU aviation security validated entity designated by the appropriate authority of an EU Member State as third country regulated agent (RA3) or third country known consignor (KC3), or from an account consignor (AC3) designated by itself or by a third country regulated agent.For monitoring the security relevant audit trail the ACC3 shall verify the active status of the RA3 and KC3 on the Union database of supply chain security, and maintain a database giving the following information for each entity or person from which it directly accepts cargo or mail:the status of the involved entity (regulated agent or known consignor),the company details, including the bona fide business address,the nature of the business, excluding business sensitive information,contact details, including those of the person(s) responsible for security,the unique alphanumeric identifier attributed in the Union database on supply chain security, or in case the entity is an AC3 the company registration number.When receiving air cargo or mail from a RA3 or KC3 the ACC3 shall check in the Union database whether the entity is listed as active, and for AC3 in the air carrier's database. If the RA3 or KC3 status is not active or the AC3 is not included in the database, the air cargo or air mail delivered by such entity shall be screened before loading.Reference: point (a) of point 6.8.3.5 and point 6.8.5.4 of the Annex to Implementing Regulation (EU) 2015/1998

6.1.When directly accepting a consignment, does the air carrier establish whether it comes from a regulated agent, a known consignor or an account consignor recognised according to Union air cargo legislation and listed in the Union database on supply chain security and in the database kept by the air carrier?6.2.Does the air carrier maintain a database including, as appropriate, the details referred to above, of:6.3.Does staff accepting air cargo and air mail have easy access to the Union database on supply chain security and to the air carrier's database?6.4.Is the database updated in a regular manner as to provide reliable data to the staff accepting air cargo and air mail?6.5.Conclusion: Does the air carrier maintain a database that ensures full transparency on its relation to entities from which it directly receives (screened or security controlled) cargo or mail for transport into the Union or EEA?

YES or NO
If YES, describe the procedure
entities designated as third country regulated agent (RA3),entities designated as third country known consignor (KC3),entities designated as account consignors by an RA3 or by the air carrier (AC3)?
YES or NO
If YES, describe the database
If NO, explain why
YES or NO
If YES, describe the process
YES or NO
If NO, explain
YES or NO
If NO, specify reasons
Comments from the air carrier
Comments from the EU aviation security validator

PART 7ScreeningObjective: Where the ACC3 accepts cargo and mail from an entity which is not an EU aviation security validated entity or the cargo received has not been protected from unauthorised interference from the time security controls were applied, the ACC3 shall ensure the air cargo or air mail is screened before being loaded onto an aircraft. The ACC3 shall have a process to ensure that EU or EEA bound air cargo and air mail for transfer, transit or unloading at an Union airport are screened by the means or methods referred to in Union legislation to a standard sufficient reasonably to ensure that it contains no prohibited articles.Where the ACC3 does not screen air cargo or air mail itself, it shall ensure that the appropriate screening is carried out according to Union requirements. Screening procedures shall include where appropriate the treatment of transfer and transit cargo and mailWhere screening of air cargo or mail is performed by or on behalf of the appropriate authority in the third country, the ACC3 receiving such air cargo or air mail from the entity shall declare this fact in its security programme, and specify the way adequate screening is ensured.Reference: points 6.8.3.1, 6.8.3.2, 6.8.3.3 of the Annex to Implementing Regulation (EU) 2015/1998

7.1.Is screening applied by the air carrier or on its behalf by an entity covered under the air carrier's security programme?7.2.Is the entity able to request the appropriate security controls in case the screening is carried out by one of the above entities?7.3.By which instruments and instructions (for example oversight, monitoring, and quality control) does the entity ensure that security controls are applied in the required manner by such service providers?7.4.What methods of screening are used for air cargo and air mail?7.5.Is the equipment or method (for example explosive detection dogs) used included in the most recent EU, European Civil Aviation Conference (ECAC) or the Transportation Security Administration (TSA) of the US compliance list?7.6.Is the equipment used in accordance with the manufacturers' concept of operations (CONOPS) and is the equipment regularly tested and maintained?7.7.In case EDDs are deployed, are they subjected to initial and recurrent training, approval and quality control process to a standard equivalent to the EU or TSA requirements?7.8.In case EDDs are used, is the screening process following a deployment methodology equivalent to EU or TSA standards?7.9.Is the nature of the consignment taken into consideration during screening?7.10.Is there a process for the resolution of the alarm generated by the screening equipment?7.11.Are any consignments exempt from security screening?7.12.Are there any exemptions that do not comply with the Union list?7.13.Is access to the screening area controlled to ensure that only authorised and trained staff is granted access?7.14.Is an established quality control or testing regime in place?7.15.Conclusion: Is air cargo or air mail screened by one of the means or methods listed in point 6.2.1 of the Annex to Implementing Regulation (EU) 2015/1998 to a standard sufficient to reasonably ensure that it contains no prohibited articles?

If YES, provide details.If applicable, provide details of the entity or entities covered under the air carrier's security programme:namesite specific addresspresence of AEO status, if applicable
If NO, which entities not covered by the air carrier's security programme apply screening to air cargo or mail carried by this air carrier into the EU or EEA?Specify the nature of these entities and provide detailsprivate handling companygovernment regulated companygovernment screening facility or bodyother
YES or NO
If NO, provide details

Specify, including details of equipment used for screening air cargo and air mail (such as manufacturer, type, software version, standard, serial number) for all the methods deployed
YES or NO
If YES, provide details
If NO, give details specifying the approval of the equipment and date thereof, as well as any indications that it complies with EU equipment standards
YES or NO
If YES, describe the process
YES or NO
If YES, describe the entire process and the related documentation supporting the assessment
YES or NO
If YES, describe the entire process and the related documentation supporting the assessment
YES or NO
If YES, describe how it is ensured that the screening method selected is employed to a standard sufficient to reasonably ensure that no prohibited articles are concealed in the consignment
YES or NO
If YES, describe the process of resolving alarms to reasonably ensure the absence of prohibited articles.
If NO, describe what happens to the consignment.
YES or NO
YES or NO
If YES, detail
YES or NO
If YES, describe
YES or NO
If YES, describe
YES or NO
If NO, specify reason
Comments from the air carrier
Comments from the EU aviation security validator

PART 8High risk cargo or mailObjective: Consignments which originate from or transfer in locations identified as high risk by the EU or which appear to have been significantly tampered with are to be considered as high risk cargo and mail (HRCM). Such consignments have to be screened in line with specific instructions. High risk origins and screening instructions are provided by the appropriate EU/EEA authority having designated the ACC3. The ACC3 shall have a procedure to ensure that EU or EEA bound HRCM is identified and subject to appropriate controls as defined in the Union legislation.The ACC3 shall remain in contact with the appropriate authority responsible for the EU/EEA airports to which it carries cargo in order to have available the latest state of information on high risk origins.The ACC3 shall apply the same measures, irrespective of whether it receives high risk cargo and mail from another air carrier or through other modes of transportation.Reference: points 6.7 and 6.8.3.6 of the Annex to Implementing Regulation (EU) 2015/1998Note: HRCM cleared for carriage into the EU or EEA shall be issued the security status "SHR", which means secure for passenger, all-cargo and all-mail aircraft in accordance with high risk requirements.

8.1.Does the air carrier staff responsible for performing security controls know which air cargo and mail is to be treated as high risk cargo and mail (HRCM)?8.2.Does the air carrier have procedures in place for the identification of HRCM?8.3.Is HRCM subject to HRCM screening procedures according to the EU legislation?8.4.After screening, does the air carrier issue a security status declaration for SHR in the documentation accompanying the consignment?8.5.Conclusion: Is the process put in place by the air carrier relevant and sufficient to ensure that all HRCM has been properly treated before loading?

YES or NO
If YES, describe
YES or NO
If YES, describe
YES or NO
If NO, indicate procedures applied
YES or NO
If YES, describe how security status is issued and in which document
YES or NO
If NO, specify reason
Comments from the air carrier
Comments from EU aviation security validator

PART 9ProtectionObjective: The ACC3 shall have processes in place to ensure EU or EEA bound air cargo or air mail is protected from unauthorised interference from the point where security screening or other security controls are applied or from the point of acceptance after screening or security controls have been applied, until loading.Protection can be provided by different means such as physical (for example barriers, locked rooms), human (for example patrols, trained staff) and technological (for example CCTV, intrusion alarm).EU or EEA bound secured air cargo or mail should be separated from air cargo or mail which is not secured.Reference: point 6.8.3 of the Annex to Implementing Regulation (EU) 2015/1998

9.1.Is protection of secured air cargo and air mail applied by the air carrier or on its behalf by an entity covered under the air carrier's security programme?9.2.Are security controls and protection in place to prevent tampering during the screening process?9.3.Are there processes in place to ensure EU or EEA bound air cargo or air mail to which security controls have been applied are protected from unauthorised interference from the time it has been secured until its loading?9.4.Conclusions: Is the protection of consignments sufficiently robust to prevent unlawful interference?

If YES, provide details
If NO, which entities not covered by the air carrier's security programme apply protection measures to secured air cargo or mail carried by this air carrier into the EU or EEA?Specify the nature of these entities and provide details:private handling companygovernment regulated companygovernment screening facility or bodyother
YES or NO
If YES, describe
YES or NO
If YES, describe how it is protected
If NO, specify reasons
YES or NO
If NO specify reason
Comments from the air carrier
Comments from EU aviation security validator

PART 10Accompanying documentationObjective: The ACC3 shall ensure that the documentation accompanying a consignment to which the ACC3 has applied security controls (for example screening, protection), contains at least:(a)the unique alphanumeric identifier received from the designating appropriate authority; and(b)the unique identifier of the consignment, such as the number of the (house or master) air waybill, when applicable; and(c)the content of the consignment; and(d)the security status, indicated as follows:"SPX", which means secure for passenger, all-cargo and all-mail aircraft, or"SCO", which means secure for all-cargo and all-mail aircraft only, or"SHR", which means secure for passenger, all-cargo and all-mail aircraft in accordance with high risk requirements.In the absence of a third country regulated agent, the security status declaration may be issued by the ACC3 or by the air carrier arriving from a third country exempted from the ACC3 regime.If the security status is issued by the ACC3, the air carrier shall additionally indicate the reasons for issuing it, such as the means or method of screening used or the grounds for exempting the consignment from screening, using the standards adopted in the consignment security declaration scheme.In the event that the security status and the accompanying documentation have been established by an upstream RA3 or by another ACC3, the ACC3 shall verify, during the acceptance process, that the above information is contained in the accompanying documentation.The documentation accompanying the consignment may either be in the form of an air waybill, equivalent postal documentation or in a separate declaration, and either in an electronic format or in writing.Reference: point (d) of point 6.3.2.6, points 6.8.3.4, 6.8.3.5, 6.8.3.6 and 6.8.3.7 of the Annex to Implementing Regulation (EU) 2015/1998

10.1.Does the air carrier ensure that appropriate accompanying documentation is established, and include the information required in point (d) of point 6.3.2.6), points 6.8.3.4, 6.8.3.5 and 6.8.3.6 of the Annex to Implementing Regulation (EU) 2015/1998?10.2.Does the documentation include the air carrier's ACC3 unique alphanumeric identifier?10.3.Does the documentation specify the security status of the cargo and how this status was achieved?10.4.Conclusion: Is the documentation process sufficient to ensure that cargo or mail is provided with proper accompanying documentation which specifies the correct security status and all required information?

YES or NO
If YES, describe the content of the documentation
If NO, explain why and how the cargo or mail is treated as "secure" by the air carrier if it is loaded onto an aircraft
YES or NO
If NO, explain why
YES or NO
Describe how this is specified
YES or NO
If NO specify reason
Comments from the air carrier
Comments from EU aviation security validator

PART 11ComplianceObjective: After assessing the ten previous Parts of this checklist, the EU aviation security validator has to conclude if its on-site verification corresponds with the content of the part of the air carrier security programme describing the measures for the EU or EEA bound air cargo or air mail and if the security controls sufficiently implements the objectives listed in this checklist.Conclusions may comprise one of the following four possible main cases:(1)the air carrier security programme is in compliance with Attachment 6-G to Implementing Regulation (EU) 2015/1998 and the on-site verification confirms compliance with the objective of the checklist; or(2)the air carrier security programme is in compliance with Attachment 6-G to Implementing Regulation (EU) 2015/1998 but the on-site verification does not confirm compliance with the objective of the checklist; or(3)the air carrier security programme is not in compliance with Attachment 6-G to Implementing Regulation (EU) 2015/1998 but the on-site verification confirms compliance with the objective of the checklist; or(4)the air carrier security programme is not in compliance with Attachment 6-G to Implementing Regulation (EU) 2015/1998 and the on-site verification does not confirm compliance with the objective of the checklist.

11.1.General conclusion: Indicate the case closest to the situation validated

1, 2, 3 or 4
Comments from EU aviation security validator
Comments from the air carrier

Name of entity	Name of contact person	Position of contact person	Date of visit or interview

ATTACHMENT 6-C4VALIDATION CHECKLIST FOR THIRD COUNTRY EU AVIATION SECURITY VALIDATED KNOWN CONSIGNORThird country entities have the option to become part of an ACC3's (Air cargo or mail carrier operating into the Union from a third country airport) secure supply chain by seeking designation as a third country EU aviation security validated known consignor (KC3). A KC3 is a cargo handling entity located in a third country that is validated and approved as such on the basis of an EU aviation security validation.A (KC3) shall ensure that security controls have been applied to consignments bound for the UnionThe Union Member States: Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden and the United Kingdom and the consignments have been protected from unauthorised interference from the time that those security controls were applied and until transferring to an ACC3 or a third country EU aviation security validated regulated agent (RA3).The prerequisites for carrying air cargo or air mail into the Union (EU) or Iceland, Norway and Switzerland are required by Implementing Regulation (EU) 2015/1998.The checklist is the instrument to be used by the EU aviation security validator for assessing the level of security applied to EU or EEA bound air cargo or air mailEU or EEA bound air cargo or air mail or aircraft in this validation checklist is equivalent to the Union and Iceland, Norway and Switzerland bound air cargo or air mail or aircraft. by or under the responsibility of the entity seeking designation as a KC3. The checklist is to be used only in the cases specified in point (b) of point 6.8.5.1 of the Annex to Implementing Regulation (EU) 2015/1998. In cases specified in point (a) of point 6.8.5.1 of that Annex, the EU aviation security validator shall use the ACC3 checklist.A validation report shall be delivered to the designating appropriate authority and to the validated entity within a maximum of one month after the on-site verification. Integral parts of the validation report shall be at least the following:the completed checklist signed by the EU aviation security validator and where applicable commented by the validated entity; andthe declaration of commitments (Attachment 6-H3 to Implementing Regulation (EU) 2015/1998) signed by the validated entity; andan independence declaration (Attachment 11-A to Implementing Regulation (EU) 2015/1998) in respect of the entity validated signed by the EU aviation security validator.Page numbering, the date of the EU aviation security validation and initialling on each page by the validator and the validated entity shall be the proof of the validation report's integrity.The KC3 shall be able to use the report in its business relations with any ACC3 and any RA3.By default the validation report shall be in English.For those parts that cannot be assessed against the requirements of Implementing Regulation (EU) 2015/1998, baseline standards are the Standards and Recommended Practices (SARPs) of Annex 17 to the Convention on International Civil Aviation and the guidance material contained in the ICAO Aviation Security Manual (Doc 8973-Restricted).Completion notes:(1)All applicable and relevant parts of the checklist must be completed, in accordance with the business model and operations of the entity being validated. Where no information is available, this must be explained.(2)After each part, the EU aviation security validator shall conclude if and to what extent the objectives of this part are met.PART 1Organisation and responsibilities

1.1.Date(s) of validation1.2.Date of previous validation where applicable.1.3.Aviation security validator information1.4.Name of entity1.5.Main address of organisation (if different from site to be validated)1.6.Nature of business — Types of cargo processed1.7.Is the applicant responsible for…?1.8.Approximate number of employees on site1.9.Name and title of person responsible for third country air cargo or air mail security

Use exact date format, such as from 01.10.2012 to 02.10.2012
dd/mm/yyyy
dd/mm/yyyy
Previous KC3 registration number, where available
AEO certificate or C-TPAT status or other certifications, where available
Name
Company/Organisation/Authority
Unique alphanumeric identifier (UAI)
Email address
Telephone number — including international codes
Name
Company number (for example commercial register identification number, if applicable)
Number/Unit/Building
Street
Town
Postcode
State (where relevant)
Country
P.O. Box address, if applicable
Number/Unit/Building
Street
Town
Postcode
State (where relevant)
Country
P.O. Box address, if applicable
What is the nature of business(es) — type of cargo processed in the applicant's premises?
(a)production(b)packing(c)storage(d)despatch(e)other, please specify
Number
Name
Job title
Email address
Telephone number — including international codes

PART 2Organisation and responsibilities of the third country EU aviation security validated known consignorObjective: No air cargo or air mail shall be carried to the EU or EEA without being subject to security controls. Cargo and mail delivered by a KC3 to an ACC3 or RA3 may only be accepted as secure cargo or mail if such security controls are applied by the KC3. Details of such controls are provided by the following Parts of this checklist.The KC3 shall have procedures in place to ensure that appropriate security controls are applied to all EU or EEA bound air cargo and air mail and that secure cargo or mail is protected until being transferred to an ACC3 or a RA3. Security controls reasonably ensure that no prohibited articles are concealed in the consignment.Reference: point 6.8.3 of the Annex to Implementing Regulation (EU) 2015/1998.

2.1.Has the entity established a security programme?2.2.Entity security programme information2.3.Does the security programme sufficiently cover the elements mentioned in parts 4 to 11 of the checklist?2.4.Is the security programme conclusive, robust and complete?2.5.Has the entity established a process to ensure that EU or EEA bound air cargo or air mail is submitted to appropriate security controls before being transferred to an ACC3 or an RA3?2.6.Has the entity a management system (for example instruments, instructions) in place to ensure that the required security controls are implemented?2.7.Conclusions and general comments on the reliance, conclusiveness and robustness of the process.

YES or NO
If NO, go directly to point 2.5
Date — use exact format dd/mm/yyyy
Version
Is the security programme submitted to or approved by the appropriate authority of the state in which the entity is located? If YES, please describe the process.
YES or NO
If NO, describe why, detailing the reasons
YES or NO
If NO, specify the reasons
YES or NO
If YES, describe the process
YES or NO
If YES, describe the management system and explain if it is approved, checked or provided by the appropriate authority or other entity.
If NO, explain how the entity ensures that security controls are applied in the required manner.
Comments from the entity
Comments from the EU aviation security validator

PART 3Identifiable air cargo or air mailObjective: To establish the point or place where cargo or mail becomes identifiable as air cargo or air mail.

3.1.By inspection of the production, packing, storage, selection, despatch and any other relevant areas, ascertain where and how a consignment of EU or EEA bound air cargo or air mail becomes identifiable as such.

Describe
Comments from the entity
Comments from the EU aviation security validator

Please note that detailed information should be given on the protection of identifiable air cargo or air mail from unauthorised interference or tampering in Parts 6 to 9.PART 4Staff recruitment and trainingObjective: In order to ensure that the required security controls are applied, the KC3 shall assign responsible and competent staff to work in the field of securing air cargo or air mail. Staff with access to identifiable air cargo shall possess all the competencies required to perform their duties and be appropriately trained.In order to fulfil that objective, the KC3 shall have procedures in place to ensure that all staff (such as permanent, temporary, agency staff, drivers) with direct and unescorted access to air cargo or air mail to which security controls are being or have been applied:(a)have been subject to initial and recurrent pre-employment checks or background checks, which are at least in accordance with the requirements of the local authorities of the KC3 premises validated; and(b)have completed initial and recurrent security training to be aware of their security responsibilities in accordance with the requirements of the local authorities of the KC3 premises validated.Note:A background check means a check of a person's identity and previous experience, including where legally permissible, any criminal history as part of the assessment of an individual's suitability to implement a security control or for unescorted access to a security restricted area (ICAO Annex 17 definition).A pre-employment check shall establish the person's identity on the basis of documentary evidence, cover employment, education and any gaps during at least the preceding five years, and require the person to sign a declaration detailing any criminal history in all states of residence during at least the preceding 5 years (Union definition).Reference: point 6.8.3.1 of the Annex to Implementing Regulation (EU) 2015/1998.

4.1.Is there a procedure ensuring that all staff with access to identifiable air cargo or air mail is subject to a pre-employment check that assesses background check and competence?4.2.Does this procedure include?4.3.Is there a procedure ensuring that the person responsible for the application and supervision of the implementation of security controls at the site is subject to a pre-employment check that assesses background and competence?4.4.Does this procedure include?4.5.Do staff with access to identifiable air cargo/air mail receive training before being given access to identifiable air cargo or air mail?4.6.Do staff referred to in point 4.5 receive recurrent training?4.7.Conclusion: do measures concerning staff recruitment and training ensure that all staff with access to identifiable EU or EEA bound air cargo or air mail have been properly recruited and trained to a standard sufficient to be aware of their security responsibilities?

YES or NO
If YES, indicate the number of preceding years taken into account for the pre-employment check and state which entity carries it out.
□background check□pre-employment check□check of criminal records□interviews□other (provide details)Explain the elements, indicate which entity carries this element out and where applicable, indicate the preceding timeframe that is taken into account.
YES or NO
If YES, indicate the number of preceding years taken into account for the pre-employment check and state which entity carries it out.
□background check□pre-employment check□check of criminal records□interviews□other (provide details)Explain the elements, indicate which entity carries this element out and where applicable, indicate the preceding timeframe that is taken into account.
YES or NO
If YES, describe the elements and duration of the training
YES or NO
If YES, specify the elements and the frequency of the recurrent training
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 5Physical securityObjective: The KC3 shall have procedures in place to ensure identifiable air cargo or air mail bound for the EU or EEA is protected from unauthorised interference or any tampering. If such cargo or mail is not protected, it cannot be forwarded to an ACC3 or RA3 as secure cargo or mail.The entity has to demonstrate how its site or its premises are protected and that relevant access control procedures are in place. It is essential that access to the area where identifiable air cargo or air mail is processed or stored, is controlled. All doors, windows and other points of access to secure EU or EEA bound air cargo or air mail need to be secured or subject to access control.Physical security can be, but is not limited to:physical obstacles such as fencing or barriers,technology using alarms and/or CCTV systems,human security such as staff dedicated to carry out surveillance activities.Reference: point 6.8.3.1 of the Annex to Implementing Regulation (EU) 2015/1998.

5.1.Are all access points to identifiable air cargo/air mail subject to access control and is access limited to authorised persons?5.2.Are all access points to identifiable air cargo or air mail secured? This includes access points which are not permanent in use and points which are normally not used as access points, such as windows.5.3.Are there additional measures to enhance the security of the premises in general?5.4.Is the building of solid construction?5.5.Conclusion: Are the measures taken by the entity sufficient to prevent unauthorised access to those parts of the site and premises where identifiable EU or EEA bound air cargo or air mail is processed or stored?

YES or NO
If YES, how is access controlled? Explain and describe. Multiple answers may be possible.□by security staff□by other staff□manual checking if persons are allowed to enter the area□electronic access control systems□other, specify
If YES, how is it ensured that a person is authorised to enter the area? Explain and describe. Multiple answers may be possible.use of a company identification carduse of another type of identification card such as passport or driver's licencelist of authorised persons used by (security) staffelectronic authorisation, e.g. by use of a chip;distribution of keys or access codes only to authorised personnelother, specify
YES or NO
If YES, how are these points secured? Explain and describe. Multiple answers may be possible.presence of security staffelectronic access control systems which allow access to one person at a timebarriers, for example shutters or locksCCTV systemintruder detection system
YES or NO
If YES, explain and describe what they are□fencing or barriers□CCTV system□intruder detection system□surveillance and patrols□other, specify
YES or NO
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 6ProductionObjective: The KC3 shall have procedures in place to ensure identifiable air cargo or air mail bound for the EU or EEA is protected from unauthorised interference or any tampering during the production process. If such cargo or mail is not protected, it cannot be forwarded to an ACC3 or RA3 as secure cargo or mail.The entity has to demonstrate that access to the production area is controlled and the production process is supervised. If the product becomes identifiable as EU or EEA bound air cargo or air mail in the course of production, the entity has to show that measures are taken to protect air or cargo or air mail from unauthorised interference or tampering from this stage.Answer these questions where the product can be identified as EU or EEA bound air cargo/air mail in the course of the production process.

6.1.Is access to the production area controlled and limited to authorised persons?6.2.Is the production process supervised?6.3.Are controls in place to prevent tampering at the stage of production?6.4.Conclusion: Are measures taken by the entity sufficient to protect identifiable EU or EEA bound air cargo or air mail from unauthorised interference or tampering during production?

YES or NO
If YES, explain how the access is controlled and limited to authorised persons
YES or NO
If YES, explain how it is supervised
YES or NO
If YES, describe
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 7PackingObjective: The KC3 shall have procedures in place to ensure identifiable air cargo or air mail bound for the EU or EEA is protected from unauthorised interference or any tampering during the packing process. If such cargo or mail is not protected, it cannot be forwarded to an ACC3 or RA3 as secure cargo or mail.The entity has to demonstrate that access to the packing area is controlled and the packing process is supervised. If the product becomes identifiable as EU or EEA bound air cargo or air mail in the course of packing, the entity has to show that measures are taken to protect air cargo/air mail from unauthorised interference or tampering from this stage. All finished goods need to be checked prior to packing.Answer these questions where the product can be identified as EU or EEA bound air cargo/air mail in the course of the packing process.

7.1.Is access to the packing area controlled and limited to authorised persons?7.2.Is the packing process supervised?7.3.Are controls in place to prevent tampering at the stage of packing?(a)Is the finished outer packing robust?(b)Is the finished outer packaging tamper evident?7.5.Conclusion: Are measures taken by the entity sufficient to protect identifiable EU or EEA bound air cargo or air mail from unauthorised interference or tampering during packing?

YES or NO
If YES, explain how the access is controlled and limited to authorised persons
YES or NO
If YES, explain how it is supervised
YES or NO
If YES, describe
7.4.Describe the finished outer packaging:
YES or NO
Describe
YES or NO
If YES, describe which process is used to make the packaging tamper evident, for example by use of numbered seals, special stamps or security tape.
If NO, describe what protection measures that ensure the integrity of the consignments are taken.
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 8StorageObjective: The KC3 shall have procedures in place to ensure identifiable air cargo or air mail bound for the EU or EEA is protected from unauthorised interference or any tampering during storage. If such cargo or mail is not protected, it cannot be forwarded to an ACC3 or RA3 as secure cargo or mail.The entity has to demonstrate that access to the storage area is controlled. If the product becomes identifiable as EU or EEA bound air cargo or air mail while being stored, the entity has to show that measures are taken to protect air cargo or air mail from unauthorised interference or tampering as from this stage.Answer these questions where the product can be identified as EU or EEA bound air cargo/air mail in the course of the storage process.

8.1.Is access to the storage area controlled and limited to authorised persons?8.2.Is the finished and packed air cargo or air mail stored securely and checked for tampering?8.3.Conclusion: Are measures taken by the entity sufficient to protect identifiable EU or EEA bound air cargo or air mail from unauthorised interference or tampering during storage?

YES or NO
If YES, explain how the access is controlled and limited to authorised persons
YES or NO
If YES, describe
If NO, explain how the entity ensures that the finished and packed EU or EEA bound air cargo and air mail is protected against unauthorised interference and any tampering.
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 9DespatchObjective: The KC3 shall have procedures in place to ensure identifiable air cargo or air mail bound for the EU or EEA is protected from unauthorised interference or any tampering during the despatch process. If such cargo or mail is not protected, it must not be forwarded to an ACC3 or RA3 as secure cargo or mail.The entity has to demonstrate that access to the despatch area is controlled. If the product becomes identifiable as EU or EEA bound air cargo or air mail in the course of despatch, the entity has to show that measures are taken to protect air cargo or air mail from unauthorised interference or tampering from this stage.Answer these questions where the product can be identified as EU/EEA bound air cargo or air mail in the course of the despatch process.

9.1.Is access to the despatch area controlled and limited to authorised persons?9.2.Who has access to the despatch area? Multiple answers may be possible.9.3.Is the despatch process supervised?9.4.Are controls in place to prevent tampering in the despatch area?9.5.Conclusion: Are measures taken by the entity sufficient to protect identifiable EU or EEA bound air cargo or air mail from unauthorised interference or tampering during the despatch process?

YES or NO
If YES, explain how the access is controlled and limited to authorised persons
□employees of the entity□drivers□visitors□contractors□others, specify
YES or NO
If YES, explain how it is supervised
YES or NO
If YES, describe
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 10Consignments from other sourcesObjective: The KC3 shall have procedures in place to ensure that cargo or mail which it has not originated itself, shall not be forwarded to an ACC3 or an RA3 as secure cargo or mail.A KC3 may pass consignments which it has not itself originated to a RA3 or an ACC3, provided that following conditions are met:(a)they are separated from consignments which it has originated; and(b)the origin is clearly indicated on the consignment or an accompanying documentation.All such consignments must be screened by an RA3 or ACC3 before they are loaded onto an aircraft.

10.1.Does the entity accept consignments of cargo or mail intended for carriage by air from any other entity?

YES or NO
If YES, how are these consignments kept separate from the company's own cargo or mail and how are they identified to the regulated agent or haulier?
Comments from the entity
Comments from the EU aviation security validator.

PART 11DocumentationObjective: The KC3 shall ensure that the documentation accompanying a consignment to which the KC3 has applied security controls (for example protection), contains at least:(a)the unique alphanumeric identifier received from the designating appropriate authority; and(b)the content of the consignment.The documentation accompanying the consignment may either be in an electronic format or in writing.Reference: point 6.8.3.4 of the Annex to Implementing Regulation (EU) 2015/1998

11.1.Does the entity ensure that appropriate accompanying documentation is established, containing the UAI received from the designating appropriate authority and a description of the consignment?11.2.Conclusion: Is the documentation process sufficient to ensure that cargo or mail is provided with proper accompanying documentation?

YES or NO
If NO, explain
YES or NO
If NO, specify reason
Comments from the entity
Comments from EU aviation security validator

PART 12TransportationObjective: The KC3 shall have procedures in place in order to ensure identifiable air cargo or air mail bound for the EU or EEA is protected from unauthorised interference or any tampering during transportation. If such cargo or mail is not protected, it must not be accepted by an ACC3 or RA3 as secure cargo or mail.During transportation, the KC3 is responsible for the protection of the secure consignments. This includes cases where the transportation is undertaken by another entity, such as a freight forwarder, on its behalf. This does not include cases whereby the consignments are transported under the responsibility of an ACC3 or RA3.Answer these questions where the product can be identified as EU or EEA bound air cargo or air mail when transported.

12.1.How is the air cargo or air mail conveyed to the ACC3 or RA3?(a)Validated entity's own transport?(b)ACC3's or RA3's transport?(c)Contractor used by the validated entity?12.2.Is the air cargo or air mail tamper evidently packed?12.3.Is the vehicle sealed or locked before transportation?12.4.Where numbered seals are used, is access to the seals controlled and are the numbers recorded?12.5.If applicable, does the respective haulier sign the haulier declaration?12.6.Has the person transporting the cargo been subject to specific security controls and awareness training before being authorised to transport secured air cargo or air mail, or both?12.7.Conclusion: Are the measures sufficient to protect air cargo or air mail from unauthorised interference during transportation?

YES or NO
YES or NO
YES or NO
YES or NO
If YES, how
YES or NO
If YES, how
YES or NO
If YES, specify how
YES or NO
YES or NO
If YES, please describe what kind of security controls (for example, pre-employment check, background check) and what kind of training (for example, security awareness training, etc.)
YES or NO
If NO, specify reasons
Comments from the entity
Comments from the EU aviation security validator

PART 13ComplianceObjective: After assessing the twelve previous parts of this checklist, the EU aviation security validator has to conclude whether its on-site verification confirms the implementation of the security controls in compliance with the objectives listed in this checklist for EU or EEA bound air cargo or air mail.Two different scenarios are possible. The EU aviation security validator concludes that the entity:(1)has succeeded in complying with the objectives referred to in this checklist. A validation report shall be delivered to the designating appropriate authority and to the validated entity within a maximum of one month after the on-site verification;(2)has failed in complying with the objectives referred to in this checklist. In that case, the entity is not authorised to deliver air cargo or mail for EU or EEA destination to an ACC3 or RA3 without it being screened by an authorised party. It shall receive a copy of the completed checklist stating the deficiencies.The EU aviation security validator has to keep in mind that the assessment is based on an overall objective-based compliance methodology.

12.1.General conclusion: Indicate the scenario closest to the situation validated

1 or 2
Comments from EU aviation security validator
Comments from the entity

Name of entity	Name of contact person	Position of contact person	Date of visit or interview

ATTACHMENT 6–DAVIATION SECURITY INSTRUCTIONS FOR ACCOUNT CONSIGNORSThese instructions have been prepared for your use and for information to your staff engaged in the preparation and control of consignments of air cargo/air mail. These instructions are provided to you in accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts.PremisesAccess to areas where consignments of identifiable air cargo/air mail are prepared, packaged and/or stored shall be controlled to ensure that no unauthorised persons have access to the consignments.Visitors shall be accompanied at all times in, or prevented access to, those areas where consignments of identifiable air cargo/air mail are prepared, packaged and/or stored.StaffThe integrity of all staff being recruited who will have access to identifiable air cargo/air mail shall be verified. This verification shall include at least a check of the identity (if possible by photographic identity card, driving licence or passport) and a check of the curriculum vitae and/or provided references.All staff who have access to identifiable air cargo/air mail shall be made aware of their security responsibilities as set out in these instructions.Responsible nomineeAt least one person responsible for the application and control of these instructions shall be nominated (responsible nominee).Consignment integrityConsignments of air cargo/air mail shall not contain any prohibited articles, unless they have been properly declared and subjected to the applicable laws and regulations.Consignments of air cargo/air mail shall be protected against unauthorised interference.Consignments of air cargo/air mail shall be adequately packaged and, where possible, include tamper evident closure.Consignments of air cargo/air mail being shipped shall be fully described on the attached documentation together with correct addressing information.TransportWhere the account consignor is responsible for the transport of consignments of air cargo/air mail, the consignments shall be protected against unauthorised interference.Where a contractor is used by the account consignor:(a)the consignments shall be sealed before transportation; and(b)the haulier declaration as contained in Attachment 6-E shall be agreed by the haulier who transports on behalf of the account consignor.The signed declaration or a copy of the appropriate authority equivalent shall be retained by the account consignor.IrregularitiesIrregularities, apparent or suspected, related to these instructions shall be reported to the responsible nominee. The responsible nominee shall take appropriate action.Consignments from other sourcesAn account consignor may pass consignments which it has not itself originated to a regulated agent, provided that:(a)they are separated from consignments which it has originated; and(b)the origin is clearly indicated on the consignment or on accompanying documentation.All such consignments must be screened before they are loaded on to an aircraft.Unannounced inspectionsAviation security inspectors from the appropriate authority may conduct unannounced inspections to verify compliance with these instructions. The inspectors will always carry an official pass, which must be produced on demand when an inspection is being conducted on your premises. The pass includes the name and photograph of the inspector.Prohibited articlesAssembled explosive and incendiary devices shall not be carried in consignments of cargo unless the requirements of all safety rules are met in full.Declaration of commitmentsThe "Declaration of commitments — account consignor" does not have to be signed and submitted to the regulated agent, if your company is a holder of an AEO certificate referred to in point (b) or (c) of Article 14a(1) of Commission Regulation (EEC) No 2454/93Commission Regulation (EEC) No 2454/93 of 2 July 1993 laying down provisions for the implementation of Council Regulation (EEC) No 2913/92 establishing the Community Customs Code (OJ L 253, 11.10.1993, p. 1).However, you must inform the regulated agent immediately if your company is no longer a holder of an AEO certificate. In this case, the regulated agent will inform you of how to ensure the account consignor status.DECLARATION OF COMMITMENTS — ACCOUNT CONSIGNORIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts,I declare that,[name of company] complies with these "Aviation security instructions for account consignors",[name of company] ensures that these instructions are communicated to staff with access to air cargo/air mail,[name of company] keeps air cargo/air mail secure until it is handed over to the regulated agent,[name of company] accepts that consignments may be subject to security controls, including screening, and[name of company] accepts unannounced inspections at its premises by the appropriate authority of the Member State in which it is located in order to assess whether [name of company] complies with these instructions.I shall accept full responsibility for this declaration.Name:Position in company:Date:Signature:ATTACHMENT 6-DDECLARATION OF COMMITMENTS – APPROVED HAULIERIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72, ELI: http://data.europa.eu/eli/reg/2008/300/oj). on common rules in the field of civil aviation security and its implementing acts,I declare that,to the best of my knowledge, the information contained in the company’s security programme is true and accurate;the practices and procedures set out in the security programme will be implemented and maintained at all locations covered by the programme;the security programme will be adjusted and adapted to comply with all future relevant changes to Union legislation, unless [name of company] informs [name of appropriate authority] that it no longer wishes to trade as an approved haulier;[name of company] will inform [name of appropriate authority] in writing of:(a)minor changes to its security programme, such as company name or person responsible for security or contact details, promptly and at least within 10 working days;(b)major planned changes, such as procedural changes that might affect its compliance with relevant Union or national legislation or change of site or address, at least 15 working days prior to their commencement or the planned change;in order to ensure compliance with relevant Union legislation, [name of company] will cooperate fully with all inspections, as required, and provide access to all documents, as requested by inspectors;[name of company] will inform [name of appropriate authority] of any serious security breaches and of any suspicious circumstances which may be relevant to air cargo or air mail security, in particular any attempt to conceal prohibited articles in consignments or interference with secure transport, or both;[name of company] will ensure that all relevant staff receive training in accordance with Chapter 11 of the Annex to Commission Implementing Regulation (EU) 2015/1998Commission Implementing Regulation (EU) 2015/1998 of 5 November 2015 laying down detailed measures for the implementation of the common basic standards on aviation security (OJ L 299, 14.11.2015, p. 1, ELI: http://data.europa.eu/eli/reg_impl/2015/1998/oj). and are aware of their security responsibilities under the company’s security programme;[name of company] will inform [name of appropriate authority] if:(a)it ceases trading;(b)it is no longer involved in transportation of air cargo/air mail;(c)it can no longer meet the requirements of the relevant Union legislation.I accept full responsibility for this declaration.Name:Position in company:Name and registered address of the company:Date:Signature:ATTACHMENT 6-EHAULIER DECLARATIONIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts,When collecting, carrying, storing and delivering air cargo/mail to which security controls have been applied [on behalf of name of regulated agent/air carrier applying security controls for cargo or mail/known consignor], I confirm that the following security procedures will be adhered to:All staff who performs transport of cargo and mail will have received general security awareness training in accordance with point 11.2.7. Additionally, if such staff is also granted unsupervised access to cargo and mail to which the required security controls have been applied it will have received security training in accordance with point 11.2.3.9;The integrity of all staff being recruited with access to this air cargo/mail will be verified. This verification shall include at least a check of the identity (if possible by photographic identity card, driving licence or passport) and a check of the curriculum vitae and/or provided references;Load compartments in vehicles will be sealed or locked. Curtain sided vehicles will be secured with TIR cords. The load areas of flatbed trucks will be kept under observation when air cargo is being transported;Immediately prior to loading, the load compartment will be searched and the integrity of this search maintained until loading is completed;Each driver will carry an identity card, passport, driving licence or other document, containing a photograph of the person, which has been issued or recognised by the national authorities;Drivers will not make unscheduled stops between collection and delivery. Where this is unavoidable, the driver will check the security of the load and the integrity of locks and/or seals on his return. If the driver discovers any evidence of interference, he will notify his supervisor and the air cargo/mail will not be delivered without notification at delivery;Transport will not be subcontracted to a third party, unless the third party:(a)has a haulier agreement with the regulated agent or known consignor responsible for the transport [same name as above]; or(b)is approved or certified by the appropriate authority; or(c)has a haulier agreement with the undersigned haulier requiring that the third party will not subcontract further and implements the security procedures contained in this declaration. The undersigned haulier retains full responsibility for the entire transport on behalf of the regulated agent or known consignor; andNo other services (e.g. storage) will be sub-contracted to any other party other than a regulated agent or an entity that has been certified or approved and listed for the provision of these services by the appropriate authority.I accept full responsibility for this declaration.Name:Position in company:Name and address of the company:Date:Signature:ATTACHMENT 6-FCARGO AND MAIL6-FiTHIRD COUNTRIES, AS WELL AS OTHER COUNTRIES AND TERRITORIES TO WHICH, IN ACCORDANCE WITH ARTICLE 355 OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION, TITLE VI OF PART THREE OF THAT TREATY DOES NOT APPLY, THAT ARE RECOGNISED AS APPLYING SECURITY STANDARDS EQUIVALENT TO THE COMMON BASIC STANDARDS ON CIVIL AVIATION SECURITYAs regards cargo and mail, the following third countries have been recognised as applying security standards equivalent to the common basic standards on civil aviation security:Kingdom of Norway, in regard to Svalbard AirportMontenegroRepublic of SerbiaUnited Kingdom of Great Britain and Northern IrelandThe Commission shall notify without delay the appropriate authorities of the Member States if it has information indicating that security standards applied by the third country or other country or territory concerned with a significant impact on overall levels of aviation security in the Union are no longer equivalent to the common basic standards of the Union.The appropriate authorities of the Member States shall be notified without delay when the Commission has information about actions, including compensatory measures, confirming that the equivalency of relevant security standards applied by the third country or other country or territory concerned is re-established.6-FiiTHIRD COUNTRIES, AS WELL AS OTHER COUNTRIES AND TERRITORIES TO WHICH, IN ACCORDANCE WITH ARTICLE 355 OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION, TITLE VI OF PART THREE OF THAT TREATY DOES NOT APPLY, FOR WHICH ACC3 DESIGNATION IS NOT REQUIRED, ARE LISTED IN COMMISSION IMPLEMENTING DECISION C(2015)8005.6-FiiiVALIDATION ACTIVITIES OF THIRD COUNTRIES, AS WELL AS OF OTHER COUNTRIES AND TERRITORIES TO WHICH, IN ACCORDANCE WITH ARTICLE 355 OF THE TREATY ON THE FUNCTIONING OF THE EUROPEAN UNION, TITLE VI OF PART THREE OF THAT TREATY DOES NOT APPLY, THAT ARE RECOGNISED AS EQUIVALENT TO EU AVIATION SECURITY VALIDATION.No provisions adopted yet.ATTACHMENT 6-GPROVISIONS RELATING TO THIRD COUNTRY CARGO AND MAILThe ACC3 security programme shall set out, as applicable and either for each third country airport individually or as a generic document specifying any variations at named third country airports:(a)description of measures for air cargo and mail;(b)procedures for acceptance;(c)regulated agent scheme and criteria;(d)known consignor scheme and criteria;(e)account consignor scheme and criteria;(f)standard of screening;(g)location of screening;(h)details of screening equipment;(i)details of operator or service provider;(j)list of exemptions from security screening;(k)treatment of high risk air cargo and mail.ATTACHMENT 6-H1DECLARATION OF COMMITMENTS — EU AVIATION SECURITY VALIDATED ACC3On behalf of [name of air carrier] I take note of the following:This report establishes the level of security applied to EU or EEA bound air cargo operations in respect of the security standards listed in the checklist or referred to therein.[name of air carrier] can only be designated "air cargo or mail carrier operating into the Union from a third country airport" (ACC3) once an EU aviation security validation report has been submitted to and accepted by the appropriate authority of a Member State of the European Union or Iceland, Norway or Switzerland for that purpose, and the details of the ACC3 have been entered in the Union database on supply chain security.If a non-compliance in the security measures the report refers to is identified by the appropriate authority of an EU Member State or by the European Commission, this could lead to the withdrawal of [name of air carrier] designation as ACC3 already obtained for this airport which will prevent [name of air carrier] transport air cargo or mail into the EU or EEA area from this airport.The report is valid for five years and shall therefore expire on … at the latest.On behalf of [air carrier] I declare that:(1)[name of air carrier] will accept appropriate follow-up action for the purpose of monitoring the standards confirmed by the report.(2)I will provide the designating appropriate authority with the relevant details promptly but at least within 15 days if:(a)any changes to [name of air carrier] security programme occur;(b)the overall responsibility for security is assigned to anyone other than the person named in point 1.7 of Attachment 6-C3 to Implementing Regulation (EU) 2015/1998;(c)there are any other changes to premises or procedures likely to significantly impact on security;(d)the air carrier ceases trading, no longer deals with air cargo or mail bound to the Union, or can no longer meet the requirements of the relevant Union legislation that have been validated in this report.(3)[name of air carrier] will maintain the security level confirmed in this report as compliant with the objective set out in the checklist and, where appropriate, implement and apply any additional security measures required to be designated ACC3 where security standards were identified as insufficient, until the subsequent validation of [name of air carrier] activities.(4)[name of air carrier] will inform the designating appropriate authority in case it is not able to request, obtain or ensure the application of appropriate security controls in respect of cargo or mail it accepts for carriage into the EU or EEA area, or it cannot exercise effective oversight on its supply chain.On behalf of [name of air carrier] I accept full responsibility for this declaration.Name:Position in company:Date:Signature:ATTACHMENT 6-H2DECLARATION OF COMMITMENTS — THIRD COUNTRY EU AVIATION SECURITY VALIDATED REGULATED AGENT (RA3)On behalf of [name of entity] I take note of the following:This report establishes the level of security applied to EU or EEA bound air cargo operations in respect of the security standards listed in the checklist or referred to therein.[Name of entity] can only be designated "third country EU aviation security validated regulated agent" (RA3) once an EU aviation security validation report has been submitted to and accepted by the appropriate authority of a Member State of the European Union or Iceland, Norway or Switzerland for that purpose, and the details of the RA3 have been entered in the Union database on supply chain security.If a non-compliance in the security measures the report refers to is identified by the appropriate authority of a Union Member State or by the European Commission, this could lead to the withdrawal of [name of entity] designation as a RA3 already obtained for this premises which will prevent [name of entity] from delivering secured air cargo or mail for EU or EEA destination to an ACC3 or another RA3.The report is valid for three years and shall therefore expire on … at the latest.On behalf of [name of entity] I declare that:(1)[name of entity] will accept appropriate follow-up action for the purpose of monitoring the standards confirmed by the report.(2)I will provide the designating appropriate authority with the relevant details promptly but at least within 15 days if:(a)any changes to [name of entity] security programme occur;(b)the overall responsibility for security is assigned to anyone other than the person named in point 1.9 of Attachment 6-C2 to Implementing Regulation (EU) 2015/1998;(c)there are any other changes to premises or procedures likely to significantly impact on security;(d)the company ceases trading, no longer deals with air cargo or mail bound to the European Union, or can no longer meet the requirements of the relevant Union legislation that have been validated in this report.(3)[name of entity] will maintain the security level confirmed in this report as compliant with the objective set out in the checklist and, where appropriate, implement and apply any additional security measures required to be designated RA3 where security standards were identified as insufficient, until the subsequent validation of [name of entity] activities.(4)[name of entity] will inform the ACC3s and RA3s to which it delivers secured air cargo and/or air mail if [name of entity] ceases trading, no longer deals with air cargo/air mail or can no longer meet the requirements validated in this report.On behalf of [name of entity] I accept full responsibility for this declaration.Name:Position in company:Date:Signature:ATTACHMENT 6-H3DECLARATION OF COMMITMENTS — THIRD COUNTRY EU AVIATION SECURITY VALIDATED KNOWN CONSIGNOR (KC3)On behalf of [name of entity] I take note of the following:This report establishes the level of security applied to EU or EEA bound air cargo operations in respect of the security standards listed in the checklist or referred to therein.[Name of entity] can only be designated "third country EU aviation security validated known consignor" (KC3) once an EU aviation security validation report has been submitted to and accepted by the appropriate authority of a Member State of the European Union or Iceland, Norway or Switzerland for that purpose, and the details of the KC3 have been entered in the Union database on supply chain security.If a non-compliance in the security measures the report refers to is identified by the appropriate authority of a Union Member State or by the European Commission, this could lead to the withdrawal of [name of entity] designation as a KC3 already obtained for this premises which will prevent [name of entity] from delivering secured air cargo or mail for EU or EEA destination to an ACC3 or an RA3.The report is valid for three years and shall therefore expire on … at the latest.On behalf of [name of entity] I declare that:(1)[name of entity] will accept appropriate follow-up action for the purpose of monitoring the standards confirmed by the report;(2)I will provide the designating appropriate authority with the relevant details promptly but at least within 15 days if:(a)any changes to [name of entity] security programme occur;(b)the overall responsibility for security is assigned to anyone other than the person named in point 1.9 of Attachment 6-C4 to Implementing Regulation (EU) 2015/1998;(c)there are any other changes to premises or procedures likely to significantly impact on security;(d)the company ceases trading, no longer deals with air cargo/mail bound to the European Union, or can no longer meet the requirements of the relevant Union legislation that have been validated in this report.(3)[name of entity] will maintain the security level confirmed in this report as compliant with the objective set out in the checklist and, where appropriate, implement and apply any additional security measures required to be designated KC3 where security standards were identified as insufficient, until the subsequent validation of [name of entity] activities.(4)[name of entity] will inform the ACC3s and RA3s to which it delivers secured air cargo and/or air mail if [name of entity] ceases trading, no longer deals with air cargo/air mail or can no longer meet the requirements validated in this report.On behalf of [name of entity] I accept full responsibility for this declaration.Name:Position in company:Date:Signature:ATTACHMENT 6-IProvisions for high risk cargo are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 6-JProvisions for the use of screening equipment are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 6-KSECURITY PROGRAMME OF THE APPROVED HAULIERIntroductionThis template for approved haulier security programme is designed to help you describe and assess your existing security precautions based on the criteria for hauliers set out in point 6.5 of Implementing Regulation (EU) 2015/1998. It is intended to enable you to ensure that you meet the requirements before you are subject to an official verification.The applicant shall submit a security programme to the appropriate authority concerned. The programme shall describe the methods and procedures which are to be followed by the haulier in order to comply with the requirements of Regulation (EC) No 300/2008 and its implementing acts.The approved haulier security programme shall be protected from unauthorised access and only used on a company-internal basis, as it contains security-relevant information. All persons entrusted with aviation security tasks must have demonstrable knowledge of the content as well as the ability to apply it.Instructions for completion:If specified procedures do not apply to your operating site, that must be indicated in the approved haulier security programme.Insofar as you make changes to a chapter of this security programme in the future, note the date of change of the respective chapter in the table of contents and submit the entire haulier security programme with the changes to the appropriate authority that has given your approval. In addition, changes to the approved haulier security programme must be highlighted in colour.

Table of contents

Chapter	Contents	Date of the last modification
1	Contact details
2	Personnel
3	Transport and protection of air cargo and mail
4	Limited storage/transhipment of air cargo and mail
5	Internal quality assurance
6	Insider threat and security culture
7	Attachments: national requirements

CHAPTER 1Contact details1.1Name, registered address and contact details of the haulierPlease indicate the name, full address and contact details (telephone, email address, etc.) of the company headquarters. Please note that your company will be approved under the official company name entered in the commercial register. Small or sole traders are approved as hauliers under their first and last names (as stated in the trade licence).Please indicate the VAT/Chamber of Commerce number/Corporate registration number (as applicable).1.2Person responsible for the implementation of the security programme of the approved haulier (security manager)Please indicate name and contact details (telephone, email address, etc.) of the person responsible for the compilation of the security programme, its implementation, and the compliance therewith.1.3Self-presentation of the companyPlease provide detailed information on the specific business activities of your company, in particular:the types of cargo you transport (e.g. live animals, perishable goods, dangerous goods, etc.);whether or not you subcontract (or intend to subcontract) the transport of air cargo or air mail to which security controls have been applied to third parties (i.e. another approved haulier or regulated agent).1.4Operating sites (to be completed if not identical to 1.1)1.4.1Please indicate:the name and full address of all the operating sites in the Member State (if applicable);the approximate number of employees on each operating site (at the time of establishing this security programme);the type and approximate share of operations carried out on each operational site (as a percentage of the total).1.4.2Please indicate:the name and full address of all the operating sites in each Member State other than the approving Member State (if applicable);the approximate number of employees on each operating site (at the time of establishing this security programme);the type and approximate share of operations carried out on each operational site (as a percentage of the total).CHAPTER 2PersonnelThe personnel recruitment procedure and training are carried out in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998, as described below.2.1RecruitmentPlease describe the personnel recruitment procedure in place and how it ensures compliance with points 11.1.8, 11.1.9 and 11.1.10 of the Annex to Implementing Regulation (EU) 2015/1998.Recruitment and training records, including results of any assessment tests, must be kept for at least the duration of the contract. Please describe how your procedures ensure compliance with point 11.1.10 of the Annex to Implementing Regulation (EU) 2015/1998.2.2Background checkA successful enhanced background check is required for the person responsible for the implementation of the security programme of the approved haulier (security manager), as indicated in point 1.2.A successful background check is required for persons having unescorted access to air cargo and mail to which the required security controls have been applied, as well as for persons implementing protection and any other security controls in respect of that air cargo and mail. Whether an enhanced or a standard background check has to be completed shall be determined by the appropriate authority approving the haulier in accordance with applicable national rules.Please describe the background check procedure for the different categories of personnel and how the procedure ensures that the relevant staff has a valid background check at all times.If a person fails a background check or the background check is withdrawn by the competent authority, the access and entry rights of the person are immediately withdrawn and this person will no longer be deployed for activities that require the successful completion of a background check. Please describe the relevant procedure applicable in such cases.2.3.Categories of personnel and trainingThe following categories of personnel exist and are subject to the relevant training specifications contained in the following points of the Annex to Implementing Regulation (EU) 2015/1998:person responsible for the implementation of the security programme of the approved haulier (security manager): training in accordance with point 11.2.5;personnel with unsupervised or unescorted access performing collection, carriage, limited storage and delivery of air cargo or air mail to which security controls have been applied: training in accordance with point 11.2.3.9;personnel with supervised or escorted access performing collection, carriage, limited storage and delivery of air cargo or air mail to which security controls have been applied: training in accordance with point 11.2.7;personnel with no access to air cargo or air mail to which security controls have been applied, involved in the transport or limited storage thereof: training in accordance with point 11.2.7.Recurrent training of personnel must be carried out in accordance with point 11.4.3(a) of the Annex to Implementing Regulation (EU) 2015/1998.The personnel includes both the company’s own personnel and personnel from service providers deployed at the operating site.The approved haulier ensures that an up-to-date list of the personnel referred to in this point and the relevant training records are made available to the appropriate authority on request at any time.Please describe the procedure and measures taken to ensure compliance with the requirements of this point at all times.CHAPTER 3Transport and protection of air cargo and mailWhen collecting, transporting and delivering air cargo or air mail to which security controls have been applied, the haulier must ensure that it implements the requirements of point 6.5.2.1, 6.5.2.2 and 6.6 of the Annex to the Implementing Regulation (EU) 2015/1998 in its operations.Please describe how the haulier ensures compliance with those legal provisions.Please describe the actions implemented by the haulier where there is any reason to believe that a consignment to which security controls have been applied has been subject to an unlawful interference or has not been protected in accordance with point 6.6 of the Annex to Implementing Regulation (EU) 2015/1998, or both.CHAPTER 4Limited storage/Transhipment of air cargo and mailIn accordance with point 6.0.6 of the Annex to Implementing Regulation (EU) 2015/1998 "limited storage" means the overall time strictly necessary for an approved haulier to perform the transhipment of cargo and mail from one means of transport onto the one used for the subsequent portion of the surface transport of that shipment.During the limited storage the consignment shall be kept protected from unauthorised interference in accordance with points 6.5.2, 6.6.1 and 6.6.2 of the Annex to Implementing Regulation (EU) 2015/1998.Please indicate whether or not the haulier performs limited storage operations. If applicable:please describe all types and means of storage used at each of the locations where that applies (e.g. warehouse, container, etc.), the reasons for their use and the relevant procedures in place;please explain how air cargo and mail to which security controls have been applied is protected from unauthorised interference during limited storage;please describe the actions implemented by the haulier where there is any reason to believe that a consignment to which security controls have been applied has been subject to an unlawful interference or has not been protected in accordance with points 6.5.2, 6.6.1 and 6.6.2 of the Annex to Implementing Regulation (EU) 2015/1998, or both.CHAPTER 5Internal quality assurance conducted by the approved haulierThe approved haulier must carry out internal quality assurance regularly, in accordance with national requirements.The approved haulier must indicate the person responsible for aviation security internal quality activities (if different from the person indicated in point 1.2).The approved haulier must ensure that the statutory requirements for the protection of air cargo or air mail to which security controls have been applied are complied with and that the procedures described in the security programme are up to date. To that end, the haulier must draw up an internal quality report.Please list and describe the quality control activities performed, ensuring that they include and cover the following:scope and frequency of the quality control activities;areas and items to be checked;weighting of the individual deficiencies (e.g. minor, serious or very serious deficiency);responsibilities for rectification of deficiencies and deadlines for completion, as well as any escalation procedures.The approved haulier shall ensure that the records of aviation security internal quality activities are made available to the appropriate authority on request at any time.CHAPTER 6Insider threat and security cultureTo combat and mitigate the threat of internal offenders (insider threat), the approved haulier must lay down appropriate internal regulations and related preventive measures to raise awareness and promote a culture of security.To that end, the haulier implements preventive measures to identify insider threat and radicalization and to counter those threats, as well as systems for the assessment of incidents relevant to aviation security. The measures taken and the assessment systems are being continuously analysed and corrected, in accordance with the following:please indicate name and contact details of the person (if different from the person indicated in point 1.2) or the function responsible for the coordination of those measures;please indicate name and contact details of the person (if different from the person indicated in point 1.2) or the function responsible for assessing incoming reports and for initiating and coordinating the measures to be derived from them;please describe the personnel awareness measures and information on the internal reporting system.CHAPTER 7Attachments: national requirementsPlease include any information and policy or regulatory documents established at national level that the approved haulier shall comply with.ATTACHMENT 6-LVALIDATION CHECKLIST FOR APPROVED HAULIERSCompletion notesWhen completing this checklist, please note that if the answer to any question presented in bold type is NO, the validation MUST be assessed as a FAIL, unless the question does not apply.Please note that questions on this checklist are of two types: (1) those where a negative response will automatically mean that you cannot be accepted as an approved haulier and (2) those which will be used to build up a general picture of the security provisions of the haulier to allow the validator to reach an overall conclusion. The areas where a "fail" will automatically be recorded are indicated by the requirements indicated in bold type. If there is a "fail" on the requirements indicated in bold type, the reasons will be given to the haulier, as well as advice on adjustments needed in order to pass.PART 1Organisation and responsibilities

1.1	Date of validation
	dd/mm/yyyy
1.2	Date of previous validation and unique alphanumeric identifier (UAI) where applicable
	dd/mm/yyyy
	UAI
1.3	Name of organisation to be validated
	Name:VAT/chamber of commerce number/corporate registration number (if applicable):
1.4	Geographical scope of operations:Does the applicant have more than one site in the Member State from which it is seeking approval?
YES or NO
If YES, list all the sites in this Member State
Indicate for each site the approximate total number of:all employeesthe employees dealing with secure air cargo and mailthe type and share of operations carried out (as a percentage of the total)
1.5	Geographical scope of operations:Is the applicant also operating in Member State(s) other than the one from which it is seeking the approval?
YES or NO
If YES, list all sites in other Member States:
Approximate number of employees on each site
Indicate the type and share of operations in each of the other Member States (as a percentage of the total)
1.6	Address of site(s) to be validated and reason for the selection in case of multiple sites.NB. this can also include site(s) in other Member State(s) [add rows as necessary]
	Reason for selection of the site
	Number/Unit/Building
	Street
	Town
	Postcode
	Country
1.7	Main address of organisation (if different from site to be validated) in the approving Member State
	Number/Unit/Building
	Street
	Town
	Postcode
	Country
1.8	Name and title of person responsible for air cargo/air mail security
	Name
	Job title
1.9	Contact telephone number
Tel. no.
1.10	Contact email address
Email

PART 2Staff recruitment and trainingAim: To ensure that all personnel required to do so have been subject to an appropriate background check as well as trained in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998.

2.1	Does the appointment process for the named person responsible for the application and supervision of the implementation of security controls at the site include a requirement for an enhanced background check in accordance with point 11.1.1(b) of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If YES, describe
2.2	Is there a recruitment procedure to ensure that all staff with unsupervised or unescorted access to identifiable air cargo or air mail to which the required security controls have been applied completed a background check in accordance with point 11.1.2(b) of the Annex to Implementing Regulation (EU) 2015/1998, and to the extent required by the approving appropriate authority?
YES or NO
If YES, describe
2.3	Is there a recruitment procedure to ensure that all staff who do not have unsupervised or unescorted access to and perform transport or limited storage of cargo or mail to which the required security controls have been applied have received general security awareness training in accordance with point 11.2.7 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If YES, describe
2.4	Is there a recruitment procedure to ensure that all staff with unsupervised or unescorted access to identifiable air cargo or air mail to which the required security controls have been applied have received security training in accordance with point 11.2.3.9 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If YES, describe
2.5	Does the appointment process for the named person responsible for the application and supervision of the implementation of security controls at the site include a security training in accordance with point 11.2.5 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If YES, describe
2.6	Do staff (as referred to in points 2.3, 2.4 and 2.5) receive recurrent training in accordance with the frequency established for this training?
YES or NO
If YES, describe
2.7	Assessment – Are the measures sufficient to ensure that all staff with access to identifiable air cargo or air mail have been properly recruited and trained in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If NO, specify reasons

PART 3TransportationAim: To protect identifiable air cargo or air mail from unauthorised interference or tampering.

3.1	Is the haulier transporting the air cargo or air mail on behalf of a regulated agent or a known consignor, or both?
YES or NO
3.2	Is the haulier using a subcontractor for transport?
YES or NO
If YES, describe how does the haulier verify that the contractor itself is an approved haulier or a regulated agent?
3.3	Is the cargo compartment of the transport vehicle securable?
YES or NO
If YES, describe how
3.4 (a)	Where the cargo compartment of the transport vehicle is securable, are numbered seals used?
YES or NO
(b)	Where numbered seals are used, is access to the seals controlled and the numbers recorded when applied?
YES or NO
If YES, describe how
3.5	Assessment: Are the measures sufficient to protect air cargo or air mail from unauthorised interference during transportation?
YES or NO
If NO, specify reasons

PART 4Limited storage/TranshipmentAim: To protect identifiable air cargo or air mail from unauthorised interference or tampering during limited storage.

4.1	Is limited storage or transhipment performed by the haulier?
YES or NO
If YES, describe the type of storage used or measures for transhipment, or both:
4.2	Is the air cargo or air mail kept protected from unauthorised interference during the limited storage or transhipment in accordance with points 6.5.2, 6.6.1 and 6.6.2 of the Annex to Implementing Regulation (EU) 2015/1998?
YES or NO
If YES, describe the measures to protect the air cargo or air mail:
4.3	Assessment: Are the limited storage or transhipment procedures sufficient to protect identifiable air cargo or air mail from unauthorised interference or tampering, or both?
YES or NO
If NO, specify reasons

PART 5Assessment (and notification)

Pass/Fail
Where the overall assessment is a fail, list the areas where the haulier fails to achieve the required standard of security or has a specific vulnerability. Also, provide advice on the adjustments needed to achieve the required standard and thus to pass.
Signed
(Name of validator)

7.AIR CARRIER MAIL AND AIR CARRIER MATERIALS7.0GENERAL PROVISIONSUnless otherwise stated or unless the implementation of security controls as referred to in Chapters 4, 5 and 6, respectively, are ensured by an authority, airport operator, entity or another air carrier, an air carrier shall ensure the implementation of the measures set out in this Chapter as regards its air carrier mail and air carrier materials.7.1AIR CARRIER MAIL AND AIR CARRIER MATERIALS TO BE LOADED ONTO AN AIRCRAFT7.1.1Before being loaded into the hold of an aircraft, air carrier mail and air carrier materials shall either be screened and protected in accordance with Chapter 5 or be subjected to security controls and protected in accordance with Chapter 6.7.1.2Before being loaded into any part of an aircraft other than the hold, air carrier mail and air carrier materials shall be screened and protected in accordance with the provisions on cabin baggage in Chapter 4.7.1.3Air carrier mail and air carrier materials to be loaded onto an aircraft shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.7.2AIR CARRIER MATERIALS USED FOR PASSENGER AND BAGGAGE PROCESSING7.2.1Air carrier materials which are used for the purposes of passenger and baggage processing and which could be used to compromise aviation security shall be protected or kept under surveillance in order to prevent unauthorised access.Self-check-in and applicable Internet options allowed for use by passengers shall be considered as authorised access to such materials.7.2.2Discarded materials which could be used to facilitate unauthorised access or move baggage into the security restricted area or onto aircraft shall be destroyed or invalidated.7.2.3Departure control systems and check-in systems shall be managed in such a manner as to prevent unauthorised access.Self-check-in allowed for use by passengers shall be considered as authorised access to such systems.8.IN-FLIGHT SUPPLIES8.0GENERAL PROVISIONS8.0.1Unless otherwise stated, the authority, airport operator, air carrier or entity responsible in accordance with the national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 shall ensure the implementation of the measures set out in this Chapter.8.0.2For the purpose of this Chapter, "in-flight supplies" means all items intended to be taken on board an aircraft for use, consumption or purchase by passengers or crew during a flight, other than:(a)cabin baggage; and(b)items carried by persons other than passengers; and(c)air carrier mail and air carrier materials.For the purpose of this Chapter, "regulated supplier of in-flight supplies" means a supplier whose procedures meet common security rules and standards sufficient to allow delivery of in-flight supplies directly to aircraft.For the purpose of this Chapter, "known supplier of in-flight supplies" means a supplier whose procedures meet common security rules and standards sufficient to allow delivery of in-flight supplies to an air carrier or regulated supplier, but not directly to aircraft.8.0.3Supplies shall be considered as in-flight supplies from the time that they are identifiable as supplies to be taken on board an aircraft for use, consumption or purchase by passengers or crew during a flight.8.0.4The list of prohibited articles in in-flight supplies is the same as the one set out in Attachment 1-A. Prohibited articles shall be handled in accordance with point 1.6.8.1SECURITY CONTROLS8.1.1Security controls — general provisions8.1.1.1In-flight supplies shall be screened by or on behalf of an air carrier, a regulated supplier or an airport operator before being taken into a security restricted area, unless:(a)the required security controls have been applied to the supplies by an air carrier that delivers these to its own aircraft and the supplies have been protected from unauthorised interference from the time that those controls were applied until delivery at the aircraft; or(b)the required security controls have been applied to the supplies by a regulated supplier and the supplies have been protected from unauthorised interference from the time that those controls were applied until arrival at the security restricted area or, where applicable, until delivery to the air carrier or another regulated supplier; or(c)the required security controls have been applied to the supplies by a known supplier and the supplies have been protected from unauthorised interference from the time that those controls were applied until delivery to the air carrier or regulated supplier.8.1.1.2Where there is any reason to believe that in-flight supplies to which security controls have been applied have been tampered with or have not been protected from unauthorised interference from the time that those controls were applied, they shall be screened before being allowed into security restricted areas.8.1.1.3The security controls of in-flight supplies shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.8.1.2Screening8.1.2.1When screening in-flight supplies, the means or method employed shall take into consideration the nature of the supplies and shall be of a standard sufficient to reasonably ensure that no prohibited articles are concealed in the supplies.8.1.2.2The screening of in-flight supplies shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.8.1.2.3The following means or method of screening, either individually or in combination, shall be applied:(a)visual check;(b)hand search;(c)x-ray equipment;(d)EDS equipment;(e)ETD equipment in combination with point (a);(f)explosive detection dogs in combination with point (a);(g)EVD equipment applied in accordance with the relevant provisions contained in Attachment 6-J and in combination with point (a).Where the screener cannot determine whether or not the item contains any prohibited articles, it shall be rejected or rescreened to the screener's satisfaction.8.1.3Approval of regulated suppliers8.1.3.1Regulated suppliers shall be approved by the appropriate authority.The approval as a regulated supplier shall be site specific.Any entity that ensures the security controls as referred to in point 8.1.5 and delivers in-flight supplies directly to aircraft shall be approved as a regulated supplier. This shall not apply to an air carrier that applies these security controls itself and delivers supplies only to its own aircraft.8.1.3.2The following procedure shall apply for the approval of regulated suppliers:(a)the entity shall seek approval from the appropriate authority of the Member State in which its site is located in order to be granted the status of regulated supplier.The applicant shall submit a security programme to the appropriate authority concerned. The programme shall describe the methods and procedures which are to be followed by the supplier in order to comply with the requirements of point 8.1.5. The programme shall also describe how compliance with these methods and procedures is to be monitored by the supplier itself.The applicant shall also submit the "Declaration of commitments — regulated supplier of in-flight supplies" as contained in Attachment 8-A. This declaration shall be signed by the legal representative or by the person responsible for security.The signed declaration shall clearly state the location of the site or sites to which it refers and be retained by the appropriate authority concerned;(b)the appropriate authority, or an EU aviation security validator acting on its behalf, shall examine the security programme and then make an on-site verification of the sites specified in order to assess whether the applicant complies with the requirements of point 8.1.5;(c)if the appropriate authority is satisfied with the information provided in accordance with points (a) and (b), it shall ensure that the necessary details of the regulated supplier are entered into the Union database on supply chain security not later than the next working day. When making the database entry the appropriate authority shall give each approved site a unique alphanumeric identifier in the standard format. If the appropriate authority is not satisfied, the reasons shall promptly be notified to the entity seeking approval as a regulated supplier;(d)a regulated supplier shall not be considered as approved until its details are listed in the Union database on supply chain security.8.1.3.3A regulated supplier shall be re-validated at regular intervals not exceeding 5 years. This shall include an on-site verification in order to assess whether the regulated supplier still complies with the requirements of point 8.1.5.An inspection at the premises of the regulated supplier by the appropriate authority in accordance with its national quality control programme may be considered as an on-site verification, provided that it covers all the requirements of point 8.1.5.8.1.3.4If the appropriate authority is no longer satisfied that the regulated supplier complies with the requirements of point 8.1.5, it shall withdraw the status of regulated supplier for the specified sites.8.1.3.5Without prejudice to the right of each Member State to apply more stringent measures in accordance with Article 6 of Regulation (EC) No 300/2008, a regulated supplier approved in accordance with point 8.1.3 shall be recognised in all Member States.8.1.4Designation of known suppliers8.1.4.1Any entity ("the supplier") that ensures the security controls as referred to in point 8.1.5 and delivers in-flight supplies, but not directly to aircraft, shall be designated as a known supplier by the operator or the entity to whom it delivers ("the designating entity"). This shall not apply to a regulated supplier.8.1.4.2In order to be designated as a known supplier, the supplier must provide the designating entity with:(a)the "Declaration of commitments – known supplier of in-flight supplies" as contained in Attachment 8-B. This declaration shall clearly state the location of the site or sites to which it refers and be signed by the legal representative; and(b)the security programme covering the security controls as referred to in point 8.1.5.8.1.4.3All known suppliers must be designated on the basis of validations of:(a)the relevance and completeness of the security programme in respect of point 8.1.5; and(b)the implementation of the security programme without deficiencies.If the appropriate authority or the designating entity is no longer satisfied that the known supplier complies with the requirements of point 8.1.5, the designating entity shall withdraw the status of known supplier without delay.8.1.4.4The appropriate authority shall define in its national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 if the validations of the security programme and its implementation shall be performed by a national auditor, an EU aviation security validator, or a person acting on behalf of the designating entity appointed and trained for that purpose.Validations must be recorded and if not otherwise stated in this legislation, must take place before designation and repeated every 2 years thereafter.If the validation is not done on behalf of the designating entity any record thereof must be made available to it.8.1.4.5The validation of the implementation of the security programme confirming the absence of deficiencies shall consist of either:(a)an on-site visit of the supplier every 2 years; or(b)regular checks upon reception of supplies delivered by that known supplier, starting after the designation, including:a verification that the person delivering supplies on behalf of the known supplier was properly trained; anda verification that the supplies are properly secured; andscreening of the supplies in the same way as supplies coming from an unknown supplier.These checks must be carried out in an unpredictable manner and take place at least either, once every three months or on 20 % of the known supplier's deliveries to the designating entity.Option (b) may only be used if the appropriate authority defined in its national civil aviation security programme that the validation shall be performed by a person acting on behalf of the designating entity.8.1.4.6The methods applied and procedures to be followed during and after designation shall be laid down in the security programme of the designating entity.8.1.4.7The designating entity shall keep:(a)a list of all known suppliers it has designated indicating the expiry date of their designation, and(b)the signed declaration, a copy of the security programme, and any reports recording its implementation for each known supplier, at least until 6 months after the expiry of its designation.Upon request, these documents shall be made available to the appropriate authority for compliance monitoring purposes.8.1.5Security controls to be applied by an air carrier, a regulated supplier and a known supplier8.1.5.1An air carrier, a regulated supplier and a known supplier of in-flight supplies shall:(a)appoint a person responsible for security in the company; and(b)ensure that persons with access to in-flight supplies receive general security awareness training in accordance with point 11.2.7 before being given access to those supplies. In addition, ensure that persons implementing screening of in-flight supplies receive training in accordance with point 11.2.3.3 and persons implementing other security controls in respect of in-flight supplies receive training in accordance with point 11.2.3.10; and(c)prevent unauthorised access to its premises and in-flight supplies; and(d)reasonably ensure that no prohibited articles are concealed in in- flight supplies; and(e)apply tamper-evident seals to, or physically protect, all vehicles and/or containers that transport in-flight supplies.Point (e) shall not apply during airside transportation.8.1.5.2If a known supplier uses another company that is not a known supplier to the air carrier or regulated supplier for transporting supplies, the known supplier shall ensure that all security controls listed in point 8.1.5.1 are adhered to.8.1.5.3The security controls to be applied by an air carrier and a regulated supplier shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.8.2PROTECTION OF IN-FLIGHT SUPPLIESDetailed provisions for the protection of in-flight supplies are laid down in Commission Implementing Decision C(2015) 8005.8.3ADDITIONAL SECURITY PROVISIONS FOR IN-FLIGHT SUPPLIES OF LAGS AND STEBS8.3.1In-flight supplies of STEBs shall be delivered in tamper-evident packaging to an airside area or to a security restricted area.8.3.2After first reception on airside or in a security restricted area and until their final sale on the aircraft, LAGs and STEBs shall be protected from unauthorised interference.8.3.3Detailed provisions for the additional security provisions for in- flight supplies of LAGs and STEBs are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 8-ADECLARATION OF COMMITMENTSREGULATED SUPPLIER OF IN-FLIGHT SUPPLIESIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts,I declare that,to the best of my knowledge, the information contained in the company's security programme is true and accurate,the practices and procedures set out in this security programme will be implemented and maintained at all sites covered by the programme,this security programme will be adjusted and adapted to comply with all future relevant changes to Union legislation, unless [name of company] informs [name of appropriate authority] that it no longer wishes to deliver in-flight supplies directly to aircraft (and thus no longer wishes to trade as a regulated supplier),[name of company] will inform [name of appropriate authority] in writing of:(a)minor changes to its security programme, such as company name, person responsible for security or contact details, promptly but at least within 10 working days; and(b)major planned changes, such as new screening procedures, major building works which might affect its compliance with relevant Union legislation or change of site/address, at least 15 working days prior to their commencement/the planned change,in order to ensure compliance with relevant Union legislation, [name of company] will cooperate fully with all inspections, as required, and provide access to all documents, as requested by inspectors,[name of company] will inform [name of appropriate authority] of any serious security breaches and of any suspicious circumstances which may be relevant to in-flight supplies, in particular any attempt to conceal prohibited articles in supplies,[name of company] will ensure that all relevant staff receive training in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998 and are aware of their security responsibilities under the company's security programme; and[name of company] will inform [name of appropriate authority] if:(a)it ceases trading;(b)it no longer delivers in-flight supplies directly to aircraft; or(c)it can no longer meet the requirements of the relevant Union legislation.I shall accept full responsibility for this declaration.Name:Position in company:Date:Signature:ATTACHMENT 8-BDECLARATION OF COMMITMENTSKNOWN SUPPLIER OF IN-FLIGHT SUPPLIESIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts,I declare that,[name of company] will(a)appoint a person responsible for security in the company; and(b)ensure that persons with access to in-flight supplies receive general security awareness training in accordance with point 11.2.7 before being given access to those supplies. In addition, ensure that persons implementing security controls other than screening in respect of in-flight supplies receive training in accordance with point 11.2.3.10; and(c)prevent unauthorised access to its premises and in-flight supplies; and(d)reasonably ensure that no prohibited articles are concealed in in-flight supplies; and(e)apply tamper-evident seals to, or physically protect, all vehicles and/or containers that transport in-flight supplies (this point will not apply during airside transportation).When using another company that is not a known supplier to the air carrier or regulated supplier for transporting supplies, [name of company] will ensure that all security controls listed above are adhered to,in order to ensure compliance, [name of company] will cooperate fully with all inspections, as required, and provide access to all documents, as requested by inspectors,[name of company] will inform [the air carrier or regulated supplier to whom it delivers in-flight supplies] of any serious security breaches and of any suspicious circumstances which may be relevant to in-flight supplies, in particular any attempt to conceal prohibited articles in supplies,[name of company] will ensure that all relevant staff receive training in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998 and are aware of their security responsibilities, and[name of company] will inform [the air carrier or regulated supplier to whom it delivers in-flight supplies] if:(a)it ceases trading; or(b)it can no longer meet the requirements of the relevant Union legislation.I shall accept full responsibility for this declaration.Legal representativeName:Date:Signature:9.AIRPORT SUPPLIES9.0GENERAL PROVISIONS9.0.1Unless otherwise stated or unless the implementation of screening is ensured by an authority or entity, an airport operator shall ensure the implementation of the measures set out in this Chapter.9.0.2For the purpose of this Chapter,(a)"airport supplies" mean all items intended to be sold, used or made available for any purpose or activity in the security restricted area of airports, other than "items carried by persons other than passengers";(b)"known supplier of airport supplies" means a supplier whose procedures meet common security rules and standards sufficient to allow delivery of airport supplies to security restricted areas.9.0.3Supplies shall be considered as airport supplies from the time that they are identifiable as supplies to be sold, used or made available in security restricted areas of airports.9.0.4The list of prohibited articles in airport supplies is the same as the one set out in Attachment 1-A. Prohibited articles shall be handled in accordance with point 1.6.9.1SECURITY CONTROLS9.1.1Security controls — general provisions9.1.1.1Airport supplies shall be screened by or on behalf of an airport operator or a regulated supplier before being taken into a security restricted area, unless:(a)the required security controls have been applied to the supplies by an airport operator that delivers these to its own airport and the supplies have been protected from unauthorised interference from the time that those controls were applied until delivery to the security restricted area; or(b)the required security controls have been applied to the supplies by a known supplier or regulated supplier and the supplies have been protected from unauthorised interference from the time that those controls were applied until delivery to the security restricted area.9.1.1.2Airport supplies which originate in the security restricted area may be exempted from these security controls.9.1.1.3Where there is any reason to believe that airport supplies to which security controls have been applied have been tampered with or have not been protected from unauthorised interference from the time that those controls were applied, they shall be screened before being allowed into security restricted areas.9.1.2Screening9.1.2.1When screening airport supplies, the means or method employed shall take into consideration the nature of the supply and shall be of a standard sufficient to reasonably ensure that no prohibited articles are concealed in the supply.9.1.2.2The screening of airport supplies shall also be subject to the additional provisions laid down in Commission Implementing Decision C(2015) 8005.9.1.2.3The following means or method of screening, either individually or in combination, shall be applied:(a)visual check;(b)hand search;(c)x-ray equipment;(d)EDS equipment;(e)ETD equipment in combination with point (a);(f)explosive detection dogs in combination with point (a);(g)EVD equipment applied in accordance with the relevant provisions contained in Attachment 6-J and in combination with point (a).Where the screener cannot determine whether or not the item contains any prohibited articles, it shall be rejected or rescreened to the screener's satisfaction.9.1.3Designation of known suppliers9.1.3.1Any entity ("the supplier") that ensures the security controls as referred to in point 9.1.4 and delivers airport supplies shall be designated as a known supplier by the airport operator.9.1.3.2In order to be designated as a known supplier, the supplier must provide the airport operator with:(a)the "Declaration of commitments – known supplier of airport supplies" as contained in Attachment 9-A. This declaration shall clearly state the location of the site or sites to which it refers and be signed by the legal representative; and(b)the security programme covering the security controls as referred to in point 9.1.4.9.1.3.3All known suppliers must be designated on the basis of validations of:(a)the relevance and completeness of the security programme in respect of point 9.1.4; and(b)the implementation of the security programme without deficiencies.As a legal proof of the designation, the appropriate authority may require airport operators to enter the necessary details of the known suppliers they designate into the "Union database on supply chain security" not later than the next working day. When making the database entry, the airport operator shall give each designated site a unique alphanumeric identifier in the standard format.Access into the security restricted areas of airport supplies may only be granted after having established the status of the supplier. This shall be done by verifying in the "Union database on supply chain security", if applicable, or by using an alternative mechanism delivering the same objective.If the appropriate authority or the airport operator is no longer satisfied that the known supplier complies with the requirements of point 9.1.4, the airport operator shall withdraw the status of known supplier without delay.9.1.3.4The appropriate authority shall define in its national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 if the validations of the security programme and its implementation shall be performed by a national auditor, an EU aviation security validator, or a person acting on behalf of the airport operator appointed and trained for that purpose.Validations must be recorded and if not otherwise stated in this legislation, must take place before designation and repeated every 2 years thereafter.If the validation is not done on behalf of the airport operator any record thereof must be made available to it.9.1.3.5The validation of the implementation of the security programme confirming the absence of deficiencies shall consist of either:(a)an on-site visit of the supplier every 2 years; or(b)regular checks upon access to the security restricted area of supplies delivered by that known supplier, starting after the designation, including:a verification that the person delivering supplies on behalf of the known supplier was properly trained; anda verification that the supplies are properly secured; andscreening of the supplies in the same way as supplies coming from an unknown supplier.These checks must be carried out in an unpredictable manner and take place at least either once every three months or on 20 % of the known supplier's deliveries to the airport operator.Option (b) may only be used if the appropriate authority defined in its national civil aviation security programme that the validation shall be performed by a person acting on behalf of the airport operator.9.1.3.6The methods applied and procedures to be followed during and after designation shall be laid down in the security programme of the airport operator.9.1.3.7The airport operator shall keep:(a)a list of all known suppliers it has designated indicating the expiry date of their designation, and(b)the signed declaration, a copy of the security programme, and any reports recording its implementation for each known supplier, at least until 6 months after the expiry of its designation.Upon request, these documents shall be made available to the appropriate authority for compliance monitoring purposes.9.1.4Security controls to be applied by a known supplier or airport operator9.1.4.1A known supplier of airport supplies or airport operator delivering airport supplies to the security restricted area shall:(a)appoint a person responsible for security in the company; and(b)ensure that persons with access to airport supplies receive general security awareness training in accordance with point 11.2.7 before being given access to those supplies. In addition, ensure that persons implementing screening of airport supplies receive training in accordance with point 11.2.3.3 and persons implementing other security controls in respect of airport supplies receive training in accordance with point 11.2.3.10; and(c)prevent unauthorised access to its premises and airport supplies; and(d)reasonably ensure that no prohibited articles are concealed in airport supplies; and(e)apply tamper-evident seals to, or physically protect, all vehicles and/or containers that transport airport supplies.Point (e) shall not apply during airside transportation.9.1.4.2If a known supplier uses another company that is not a known supplier to the airport operator for transporting supplies to the airport, the known supplier shall ensure that all security controls listed in this point are adhered to.9.2PROTECTION OF AIRPORT SUPPLIESDetailed provisions for the protection of airport supplies are laid down in Commission Implementing Decision C(2015) 8005.9.3ADDITIONAL SECURITY PROVISIONS FOR SUPPLIES OF LAGS AND STEBS9.3.1Supplies of STEBs shall be delivered in tamper-evident packaging to an airside area beyond the point where boarding passes are controlled or to a security restricted area.9.3.2After first reception on airside or in a security restricted area and until their final sale at the outlet, LAGs and STEBs shall be protected against unauthorised interference.9.3.3Detailed provisions for the additional security provisions for supplies of LAGs and STEBs are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 9-ADECLARATION OF COMMITMENTSKNOWN SUPPLIER OF AIRPORT SUPPLIESIn accordance with Regulation (EC) No 300/2008 of the European Parliament and of the CouncilRegulation (EC) No 300/2008 of the European Parliament and of the Council of 11 March 2008 on common rules in the field of civil aviation security and repealing Regulation (EC) No 2320/2002 (OJ L 97, 9.4.2008, p. 72). and its implementing acts,I declare that,[name of company] will(a)appoint a person responsible for security in the company; and(b)ensure that persons with access to airport supplies receive general security awareness training in accordance with point 11.2.7 before being given access to these supplies. In addition, ensure that persons implementing security controls other than screening in respect of airport supplies receive training in accordance with point 11.2.3.10; and(c)prevent unauthorised access to its premises and airport supplies; and(d)reasonably ensure that no prohibited articles are concealed in airport supplies; and(e)apply tamper-evident seals to, or physically protect, all vehicles and/or containers that transport airport supplies (this point will not apply during airside transportation).When using another company that is not a known supplier to the airport operator for transporting supplies, [name of company] will ensure that all security controls listed above are adhered to,in order to ensure compliance, [name of company] will cooperate fully with all inspections, as required, and provide access to all documents, as requested by inspectors,[name of company] will inform [the airport operator] of any serious security breaches and of any suspicious circumstances which may be relevant to airport supplies, in particular any attempt to conceal prohibited articles in supplies,[name of company] will ensure that all relevant staff receive training in accordance with Chapter 11 of the Annex to Implementing Regulation (EU) 2015/1998 and are aware of their security responsibilities, and[name of company] will inform [the airport operator] if:(a)it ceases trading; or(b)it can no longer meet the requirements of the relevant EU legislation.I shall accept full responsibility for this declaration.Legal representativeName:Date:Signature:10.IN-FLIGHT SECURITY MEASURESNo provisions in this Regulation.11.STAFF RECRUITMENT AND TRAINING11.0GENERAL PROVISIONS11.0.1The authority, airport operator, air carrier or entity deploying persons implementing, or responsible for implementing, measures for which it is responsible in accordance with the national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 shall ensure that these persons meet the standards set out in this Chapter.11.0.2For the purpose of this Chapter, "certification" means a formal evaluation and confirmation by or on behalf of the appropriate authority indicating that the person has successfully completed the relevant training and that the person possesses the necessary competencies to perform assigned functions to an acceptable level.11.0.3For the purposes of this Chapter, a "state of residence" shall be any country in which the person has been resident continuously for 6 months or more and a "gap" in the record of education or employment shall mean any gap of more than 28 days.11.0.4For the purposes of this Chapter, "competency" means being able to demonstrate suitable knowledge and skills.11.0.5Competencies acquired by persons prior to recruitment may be taken into consideration when assessing any training needs under this Chapter.11.0.6Where relevant competencies required by this Regulation that are not specific to aviation security have been acquired through training not delivered by an instructor in line with point 11.5 of this Regulation and/or through courses not specified or approved by the appropriate authority, it may be taken into consideration when assessing any training needs under this Chapter.11.0.7Where a person has received training and acquired competencies listed in point 11.2, the training need not be repeated for another function other than for the purposes of recurrent training.11.0.8For the purposes of this Chapter, "radicalisation" means the phenomenon of socialisation to extremism of people embracing opinions, views and ideas, which could lead to terrorism.11.0.9For the purposes of this Chapter and without prejudice to the applicable Union and national laws, in determining the reliability of an individual undergoing the process described in points 11.1.3 and 11.1.4, Member States shall consider at least:(a)the offences referred to in the Annex II to the Directive (EU) 2016/681 of The European Parliament and of the CouncilDirective (EU) 2016/681 of the European Parliament and of the Council of 27 April 2016 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime (OJ L 119, 4.5.2016, p. 132).;and(b)the terrorist offences referred to in the Directive (EU) 2017/541 of the European Parliament and of the CouncilDirective (EU) 2017/541 of the European Parliament and of the Council of 15 March 2017 on combating terrorism and replacing Council Framework Decision 2002/475/JHA and amending Council Decision 2005/671/JHA (OJ L 88, 31.3.2017, p. 6)..The offences listed in point (b) shall be considered as disqualifying crimes.11.1RECRUITMENT11.1.1The following personnel shall have successfully completed an enhanced background check:(a)persons being recruited to implement, or to be responsible for the implementation of screening, access control or other security controls in a security restricted area;(b)persons with general responsibility at national or local level for ensuring that a security programme and its implementation meet all legal provisions (security managers);(c)instructors, as referred to in Chapter 11.5;(d)EU aviation security validators, as referred to in Chapter 11.6.Point (b) of the first paragraph shall apply from 1 January 2023. Before that date, such persons shall have completed an enhanced or a standard background check either in accordance with point 1.2.3.1 or as determined by the appropriate authority in accordance with applicable national rules.11.1.2The following personnel shall have successfully completed an enhanced or a standard background check:a)Persons being recruited to implement, or to be responsible for the implementation of, screening, access control or other security controls elsewhere than a security restricted area;b)Persons having unescorted access to air cargo and mail, air carrier mail and air carrier material, in-flight supplies and airport supplies to which the required security controls have been applied;c)Persons having administrator rights or unsupervised and unlimited access to critical information and communications technology systems and data used for civil aviation security purposes as described in 1.7.1 in accordance with the national aviation security programme, or having been otherwise identified in the risk assessment in accordance with 1.7.3.Unless otherwise specified in this Regulation, whether an enhanced or a standard background check has to be completed shall be determined by the appropriate authority in accordance with applicable national rules.11.1.3In accordance with the applicable rules of Union and national law, an enhanced background check shall at least:(a)establish the person's identity on the basis of documentary evidence;(b)cover criminal records in all states of residence during at least the preceding 5 years;(c)cover employment, education and any gaps during at least the preceding 5 years;(d)cover intelligence and any other relevant information available to the competent national authorities that they consider may be relevant to the suitability of a person to work in a function which requires an enhanced background check.11.1.4In accordance with the applicable rules of Union and national law, a standard background check shall:(a)establish the person's identity on the basis of documentary evidence;(b)cover criminal records in all states of residence during at least the preceding 5 years;(c)cover employment, education and any gaps during at least the preceding 5 years.11.1.5A standard background check or points (a) to (c) of an enhanced background check shall be completed before the person undergoes initial security training involving access to information which is not publicly available due to its security sensitivity. Where applicable, point (d) of an enhanced background check shall be completed before a person is allowed to implement, or to be responsible for the implementation of, screening, access control or other security controls.Whenever an enhanced background check is required, it shall be fully completed before the person undergoes the training referred to in points 11.2.3.1 to 11.2.3.5.11.1.6Enhanced or standard background checks shall be considered as failed if not all the elements specified in points 11.1.3 and 11.1.4 respectively, are completed satisfactorily, or if at any point in time these elements do not provide the necessary level of assurance as to the reliability of the individual.Member States shall endeavour to establish appropriate and effective mechanisms in order to ensure information sharing at national level and with other States for the purposes of elaboration and evaluation of information relevant to background check.11.1.7Background checks shall be subject to the following:(a)a mechanism for the ongoing review of the elements specified in points 11.1.3 and 11.1.4 through the prompt notification to the competent authority, operator or issuing entity, as applicable, of any occurrence that may affect the reliability of the individual. Modalities for the notification, exchange of information and content thereof between the competent authorities, operators and entities, shall be established and monitored in accordance with the national law; or(b)a repeat at regular intervals not exceeding 12 months for enhanced background checks, or three years for standard background checks.11.1.8The recruitment process for all persons being recruited under points 11.1.1 and 11.1.2 shall include at least a written application and an interview stage designed to provide an initial assessment of abilities and aptitudes.11.1.9Persons being recruited to implement security controls shall have the mental and physical abilities and aptitudes required to carry out their designated tasks effectively and shall be made aware of the nature of these requirements at the outset of the recruitment process.These abilities and aptitudes shall be assessed during the recruitment process and before completion of any probationary period.11.1.10Recruitment records, including results of any assessment tests, shall be kept for all persons recruited under points 11.1.1 and 11.1.2 for at least the duration of their contract.11.1.11In order to address the insider threat, and notwithstanding the respective staff training contents and competences listed in paragraph 11.2, the security programme of operators and entities referred to in Articles 12, 13 and 14 of Regulation (EC) No 300/2008 shall include an appropriate internal policy and related measures enhancing staff awareness and promoting security culture.11.1.12Background checks successfully completed before 31 December 2021 will remain valid until their expiry or at the latest until 30 June 2024, whichever date comes earlier.11.2TRAINING11.2.1General training obligations11.2.1.1Persons shall have successfully completed relevant training before being authorised to implement security controls unsupervised.11.2.1.2Training of persons performing tasks as listed in points 11.2.3.1 to 11.2.3.5 and point 11.2.4 shall include theoretical, practical and on- the-job training elements.11.2.1.3The content of courses shall be specified or approved by the appropriate authority before:(a)an instructor delivers any training required under Regulation (EC) No 300/2008 and its implementing acts; or(b)a computer based training course is used in order to meet the requirements of Regulation (EC) No 300/2008 and its implementing acts.Computer based training may be used with or without the support of an instructor or coach.11.2.1.4Training records shall be kept for all persons trained for at least the duration of their contract.11.2.2Basic trainingBasic training of persons performing tasks as listed in points 11.2.3.1, 11.2.3.4 and 11.2.3.5 as well as in points 11.2.4, 11.2.5 and 11.5 shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)knowledge of the legal framework for aviation security;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls;(d)knowledge of access control procedures;(e)knowledge of identification card systems in use;(f)knowledge of procedures for challenging persons and of circumstances in which persons should be challenged or reported;(g)knowledge of reporting procedures;(h)ability to identify prohibited articles;(i)ability to respond appropriately to security related incidents;(j)knowledge of how human behaviour and responses can affect security performance;(k)ability to communicate clearly and confidently; and(l)knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation.11.2.3Job specific training for persons implementing security controls11.2.3.1Job specific training of persons implementing screening of persons, cabin baggage, items carried and hold baggage shall result in all of the following competencies:(a)understanding of the configuration of the screening checkpoint and the screening process;(b)knowledge of how prohibited articles may be concealed;(c)ability to respond appropriately to the detection of prohibited articles;(d)knowledge of the capabilities and limitations of security equipment or screening methods used;(e)knowledge of emergency response procedures.In addition, where the designated tasks of the person concerned so require, training shall also result in the following competences:(f)interpersonal skills, in particular how to deal with cultural differences and with potentially disruptive passengers;(g)knowledge of hand searching techniques;(h)ability to carry out hand searches to a standard sufficient to reasonably ensure the detection of concealed prohibited articles;(i)knowledge of exemptions from screening and special security procedures;(j)ability to operate the security equipment used;(k)ability to correctly interpret images produced by security equipment; and(l)knowledge of protection requirements for hold baggage.11.2.3.2Training of persons implementing screening of cargo and mail shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls in the supply chain;(d)ability to identify prohibited articles;(e)ability to respond appropriately to the detection of prohibited articles;(f)knowledge of the capabilities and limitations of security equipment or screening methods used;(g)knowledge of how prohibited articles may be concealed;(h)knowledge of emergency response procedures;(i)knowledge of protection requirements for cargo and mail;In addition, where the designated tasks of the person concerned so require, training shall also result in the following competences:(j)knowledge of screening requirements for cargo and mail, including exemptions and special security procedures;(k)knowledge of screening methods appropriate for different types of cargo and mail;(l)knowledge of hand searching techniques;(m)ability to carry out hand searches to a standard sufficient to reasonably ensure the detection of concealed prohibited articles;(n)ability to operate the security equipment used;(o)ability to correctly interpret images produced by security equipment;(p)knowledge of transportation requirements.11.2.3.3Training of persons implementing screening of air carrier mail and materials, in-flight supplies and airport supplies shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls in the supply chain;(d)ability to identify prohibited articles;(e)ability to respond appropriately to the detection of prohibited articles;(f)knowledge of how prohibited articles may be concealed;(g)knowledge of emergency response procedures;(h)knowledge of the capabilities and limitations of security equipment or screening methods used;In addition, where the designated tasks of the person concerned so require, training shall also result in the following competences:(i)knowledge of hand searching techniques;(j)ability to carry out hand searches to a standard sufficient to reasonably ensure the detection of concealed prohibited articles;(k)ability to operate the security equipment used;(l)ability to correctly interpret images produced by security equipment;(m)knowledge of transportation requirements.11.2.3.4Specific training of persons performing vehicle examinations shall result in all of the following competencies:(a)knowledge of the legal requirements for vehicle examinations, including exemptions and special security procedures;(b)ability to respond appropriately to the detection of prohibited articles;(c)knowledge of how prohibited articles may be concealed;(d)knowledge of emergency response procedures;(e)knowledge of vehicle examination techniques;(f)ability to carry out vehicle examinations to a standard sufficient to reasonably ensure the detection of concealed prohibited articles.11.2.3.5Specific training of persons implementing access control at an airport as well as surveillance and patrols shall result in all of the following competencies:(a)knowledge of the legal requirements for access control, including exemptions and special security procedures;(b)knowledge of access control systems used at the airport;(c)knowledge of authorisations, including identification cards and vehicle passes, providing access to airside areas and ability to identify those authorisations;(d)knowledge of procedures for patrolling and for challenging persons and of circumstances in which persons should be challenged or reported:(e)ability to respond appropriately to the detection of prohibited articles;(f)knowledge of emergency response procedures;(g)interpersonal skills, in particular how to deal with cultural differences and with potentially disruptive passengers.11.2.3.6Training of persons implementing aircraft security searches shall result in all of the following competencies:(a)knowledge of the legal requirements for aircraft security searches and of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(b)knowledge of the configuration of the type(s) of aircraft on which the person is to implement aircraft security searches;(c)ability to identify prohibited articles;(d)ability to respond appropriately to the detection of prohibited articles;(e)knowledge of how prohibited articles may be concealed;(f)ability to implement aircraft security searches to a standard sufficient to reasonably ensure the detection of concealed prohibited articles.In addition, where the person holds an airport identification card, training shall also result in all of the following competences:(g)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(h)knowledge of the legal framework for aviation security;(i)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls;(j)understanding of the configuration of the screening checkpoint and the screening process;(k)awareness of access control and relevant screening procedures;(l)knowledge of airport identification card used at the airport.11.2.3.7Training of persons implementing aircraft protection shall result in all of the following competencies:(a)knowledge of how to protect and prevent unauthorised access to aircraft and of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(b)knowledge of procedures for sealing aircraft, if applicable for the person to be trained;(c)knowledge of identification card systems used at the airport;(d)knowledge of procedures for challenging persons and of circumstances in which persons should be challenged or reported; and(e)knowledge of emergency response procedures.In addition, where the person holds an airport identification card, training shall also result in all of the following competences:(f)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(g)knowledge of the legal framework for aviation security;(h)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls;(i)understanding of the configuration of the screening checkpoint and the screening process;(j)awareness of access control and relevant screening procedures.11.2.3.8Training of persons implementing baggage reconciliation shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls;(d)ability to respond appropriately to the detection of prohibited articles;(e)knowledge of emergency response procedures;(f)knowledge of passenger and baggage reconciliation requirements and techniques;(g)knowledge of protection requirements for air carrier materials used for passenger and baggage processing.In addition, where the person holds an airport identification card, training shall also result in all of the following competences:(h)understanding of the configuration of the screening checkpoint and the screening process;(i)awareness of access control and relevant screening procedures;(j)knowledge of airport identification cards used at the airport;(k)knowledge of reporting procedures;(l)ability to respond appropriately to security related incidents.11.2.3.9Training of persons with unsupervised access to identifiable air cargo and mail to which the required security controls have been applied and persons implementing security controls for air cargo and mail other than screening shall result in all of the following competences:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls in the supply chain;(d)knowledge of procedures for challenging persons and of circumstances in which persons should be challenged or reported;(e)knowledge of reporting procedures;(f)ability to identify prohibited articles;(g)ability to respond appropriately to the detection of prohibited articles;(h)knowledge of how prohibited articles may be concealed;(i)knowledge of protection requirements for cargo and mail;(j)knowledge of transportation requirements, if applicable.In addition, where the person holds an airport identification card, training shall also result in all of the following competences:(k)understanding of the configuration of the screening checkpoint and the screening process;(l)awareness of access control and relevant screening procedures;(m)knowledge of identification cards in use;(n)ability to respond appropriately to security related incidents.11.2.3.10Training of persons implementing security controls for air carrier mail and materials, in-flight supplies and airport supplies other than screening shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls;(d)knowledge of procedures for challenging persons and of circumstances in which persons should be challenged or reported;(e)knowledge of reporting procedures;(f)ability to identify prohibited articles;(g)ability to respond appropriately to the detection of prohibited articles;(h)knowledge of how prohibited articles may be concealed;(i)knowledge of protection requirements for air carrier mail and materials, in-flight supplies and airport supplies, as applicable;(j)knowledge of transportation requirements, if applicable.In addition, where the person holds an airport identification card, training shall also result in all of the following competences:(k)understanding of the configuration of the screening checkpoint and the screening process;(l)awareness of access control and relevant screening procedures;(m)knowledge of identification cards in use;(n)ability to respond appropriately to security related incidents.11.2.3.11Training of flight and cabin crew members implementing in-flight security measures shall result in all of the following competences:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of flight and cabin crew members;(d)knowledge of how to protect and prevent unauthorised access to aircraft;(e)knowledge of procedures for sealing aircraft, if applicable for the person to be trained;(f)ability to identify prohibited articles;(g)knowledge of how prohibited articles may be concealed;(h)ability to implement aircraft security searches to a standard sufficient to reasonably ensure the detection of concealed prohibited articles;(i)knowledge of the configuration of the type or types of aircraft on which the duties are performed;(j)ability to protect flight deck during the flight;(k)knowledge of procedures relevant to carriage of potentially disruptive passengers on board an aircraft, if applicable for the person to be trained;(l)knowledge of handling persons authorised to carry firearms on board, if applicable for the person to be trained;(m)knowledge of reporting procedures;(n)ability to respond appropriately to security related incidents and emergencies on board an aircraft.11.2.4Specific training for persons directly supervising persons implementing security controls (supervisors)Specific training of supervisors shall, in addition to the competencies of the persons to be supervised, result in all of the following competencies:(a)knowledge of the relevant legal requirements and how they should be met;(b)knowledge of supervisory tasks;(c)knowledge of internal quality control;(d)ability to respond appropriately to the detection of prohibited articles;(e)knowledge of emergency response procedures;(f)ability to provide mentoring and on-the-job training and to motivate other.In addition, where the designated tasks of the person concerned so require, that training shall also result in all of the following competences:(g)knowledge of conflict management;(h)knowledge of the capabilities and limitations of security equipment or screening methods used.11.2.5Specific training for persons with general responsibility at national or local level for ensuring that a security programme and its implementation meet all legal provisions (security managers)Specific training of security managers shall result in all of the following competencies:(a)knowledge of the relevant legal requirements and how they should be met;(b)knowledge of internal, national, Union and international quality control;(c)ability to motivate others;(d)knowledge of the capabilities and limitations of security equipment or screening methods used.11.2.6Training of persons other than passengers requiring unescorted access to security restricted areas11.2.6.1Persons other than passengers requiring unescorted access to security restricted areas and not falling under points 11.2.3 to 11.2.5 and 11.5 shall receive security awareness training before being issued with an authorisation granting unescorted access to security restricted areas.For objective reasons, the appropriate authority may exempt persons from this training requirement if their access is limited to areas in the terminal accessible to passengers.11.2.6.2Security awareness training shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security, including the obligations and responsibilities of persons implementing security controls;(d)understanding of the configuration of the screening checkpoint and the screening process;(e)awareness of access control and relevant screening procedures;(f)knowledge of airport identification cards used at the airport;(g)knowledge of reporting procedures;(h)ability to respond appropriately to security related incidents.11.2.6.3Each person undergoing security awareness training shall be required to demonstrate understanding of all subjects referred to in point 11.2.6.2 before being issued with an authorisation granting unescorted access to security restricted areas.11.2.7Training of persons requiring general security awarenessGeneral security awareness training shall result in all of the following competencies:(a)knowledge of previous acts of unlawful interference with civil aviation, terrorist acts and current threats;(b)awareness of the relevant legal requirements and knowledge of elements contributing to the establishment of a robust and resilient security culture in the workplace and in the aviation domain, including, inter alia, insider threat and radicalisation;(c)knowledge of the objectives and organisation of aviation security in their working environment, including the obligations and responsibilities of persons implementing security controls;(d)knowledge of reporting procedures;(e)ability to respond appropriately to security related incidents.Each person undergoing general security awareness training shall be required to demonstrate understanding of all subjects referred to in this point before taking up duty.This training shall not apply to instructors falling under point 11.5.11.2.8Training of persons with roles and responsibility related to cyber threats11.2.8.1Persons implementing the measures as laid down in point 1.7.2 shall have the skills and aptitudes required to carry out their designated tasks effectively. They shall be made aware of relevant cyber risks on a need-to-know basis.11.2.8.2Persons having access to data or systems shall receive appropriate and specific job related training commensurate with their role and responsibilities, including being made aware of relevant risks where their job function requires this. The appropriate authority, or the authority or agency as laid down in point 1.7.4 shall specify or approve the content of the course.11.3CERTIFICATION OR APPROVAL11.3.1Persons performing tasks as listed in points 11.2.3.1 to 11.2.3.5 shall be subject to:(a)an initial certification or approval process; and(b)for persons operating x-ray or EDS equipment, recertification at least every 3 years; and(c)for all other persons, recertification or reapproval at least every 5 years.Persons performing tasks as listed in point 11.2.3.3 may be exempted from these requirements if they are only authorised to implement visual checks and/or hand searches.11.3.2Persons operating x-ray or EDS equipment shall, as part of the initial certification or approval process, pass a standardised image interpretation test.11.3.3The recertification or re-approval process for persons operating x-ray or EDS equipment shall include both the standardised image interpretation test and an evaluation of operational performance.11.3.4Failure to undertake or successfully complete recertification or reapproval within a reasonable timescale, not normally exceeding 3 months, shall result in the related security entitlements being withdrawn.11.3.5Certification or approval records shall be kept for all persons certified or approved, respectively, for at least the duration of their contract.11.4RECURRENT TRAINING11.4.1Persons operating x-ray or EDS equipment shall be subject to recurrent training consisting of image recognition training and testing. This shall take the form of:(a)classroom and/or computer based training; or(b)on-the-job TIP training, on condition that a TIP library of at least 6000 images, as specified below, is employed on the x-ray or EDS equipment used and the person works with this equipment during at least one third of his working hours.The results of testing shall be provided to the person and recorded and may be taken into consideration as part of the recertification or re-approval process.For classroom and/or computer based training, persons shall be subject to image recognition training and testing for at least 6 hours in every 6 month period, using either:an image library containing at least 1000 images of at least 250 different threat articles, including images of component parts of threat articles, with each article captured in a variety of different orientations, and arranged to provide an unpredictable selection of images from the library during the training and testing; orthe most frequently missed TIP images from the TIP library in use combined with images of recently captured threat articles relevant for the type of screening operation and covering all types of relevant threat articles if only used once for the training of a given screener over a three-year period.For on-the-job TIP training, the TIP library shall consist of at least 6000 images of at least 1500 different threat articles, including images of component parts of threat articles, with each article captured in a variety of different orientations.11.4.2Evaluation of the performance of individual screeners shall be carried out at the end of every 6 month period. The results of this evaluation:(a)shall be provided to the person and recorded;(b)shall be used to identify weaknesses and inform future training and testing adapted to address those weaknesses; and(c)may be taken into consideration as part of the recertification or re-approval process.11.4.3Persons performing tasks as listed under point 11.2 other than those referred to in point 11.4.1 and 11.4.2 shall undergo recurrent training at a frequency sufficient to ensure that competencies are maintained and acquired in line with security developments.Recurrent training shall be conducted:(a)for competencies acquired during initial basic, specific and security awareness training, at least once every 5 years or, in cases where the competencies have not been exercised for more than 6 months, before return to security duties; and(b)for new or extended competencies, as required to ensure that persons implementing, or responsible for implementing, security controls are promptly made aware of new threats and legal requirements by the time they have to be applied.The requirements under (a) shall not apply to competencies acquired during specific training which are no longer required for the person's designated tasks.11.4.4Records of recurrent training shall be kept for all persons trained for at least the duration of their contract.11.5QUALIFICATION OF INSTRUCTORS11.5.1Instructors shall at least fulfil all of the following requirements:(a)the successful completion of an enhanced background check in accordance with point 11.1.3;(b)competency in instructional techniques;(c)knowledge of the work environment in the relevant aviation security field;(d)competency in the security elements to be taught.Certification shall at least apply to those instructors authorised to give training defined in points 11.2.3.1 to 11.2.3.5 and in points 11.2.4 (unless it concerns the training of supervisors exclusively supervising persons referred to in points 11.2.3.6 to 11.2.3.11) and 11.2.5.Instructors shall be subject to recertification at least every 5 years.11.5.2Instructors shall receive regular training or information on developments in the relevant fields.11.5.3The appropriate authority shall maintain or have access to lists of instructors operating in the Member State.11.5.4If the appropriate authority is no longer satisfied that training delivered by an instructor is resulting in persons having the relevant competencies, or where the instructor fails the background check, it shall either withdraw approval of the course or ensure that the instructor is suspended or removed from the list of instructors, as appropriate. Where such action is taken, the appropriate authority shall also specify how the instructor may apply to have the suspension lifted, be reinstated on the list of instructors or have the course approval reinstated.11.5.5Any competencies acquired by an instructor in order to meet the requirements under this Chapter in one Member State shall be recognised in another Member State.11.6EU AVIATION SECURITY VALIDATION11.6.1EU aviation security validation is a standardised, documented, impartial and objective process for obtaining and evaluating evidence to determine the level of compliance of the validated entity with requirements set out in Regulation (EC) No 300/2008 and its implementing acts.11.6.2EU aviation security validationEU aviation security validation:(a)may be a requirement for obtaining or maintaining a legal status under Regulation (EC) No 300/2008 and its implementing acts;(b)may be performed by an appropriate authority or a validator approved as EU aviation security validator or a validator recognised as equivalent to it, in accordance with this Chapter;(c)shall assess security measures applied under the responsibility of the validated entity or parts thereof for which the entity seeks validation. At least, it shall consist of:(1)an evaluation of security relevant documentation, including the validated entity's security programme or equivalent; and(2)a verification of the implementation of aviation security measures, which shall include an on-site verification of the validated entity's relevant operations, unless otherwise stated;(d)shall be recognised by all Member States.11.6.3Approval requirements for EU aviation security validators11.6.3.1Member States shall approve EU aviation security validators based on conformity assessment capacity, which shall comprise:(a)independence from the validated industry, unless otherwise stated; and(b)appropriate personnel competence in the security area to be validated as well as methods to maintain such competence at the level referred to in 11.6.3.5; and(c)the functionality and appropriateness of validation processes.11.6.3.2Where relevant, the approval shall take account of accreditation certificates in relation to the relevant harmonised standards, namely with EN-ISO/IEC 17020 instead of re-assessing conformity assessment capacity.11.6.3.3An EU aviation security validator may be any individual or a legal entity.11.6.3.4The national accreditation body established pursuant to Regulation (EC) No 765/2008 of the European Parliament and of the CouncilRegulation (EC) No 765/2008 of the European Parliament and of the Council of 9 July 2008 setting out the requirements for accreditation and market surveillance relating to the marketing of products and repealing Regulation (EEC) No 339/93 (OJ L 218, 13.8.2008, p. 30). may be empowered to accredit the conformity assessment capacity of legal entities to perform EU aviation security validation, adopt administrative measures in that respect and carry out the surveillance of EU aviation security validation activities.11.6.3.5Every individual performing EU aviation security validation shall have appropriate competence and background, and shall meet all of the following requirements:(a)have been subjected to an enhanced background check in accordance with point 11.1.3;(b)perform EU aviation security validation impartially and objectively, shall understand the meaning of independence and apply methods to avoid situations of conflict of interest in respect of the validated entity;(c)have sufficient theoretical knowledge and practical experience in the field of quality control as well as respective skills and personal attributes to collect, record and assess findings based on a checklist, in particular regarding:(1)compliance monitoring principles, procedures and techniques;(2)factors affecting human performance and supervision;(3)the role and powers of the validator, including on conflict of interest;(d)provide proof of appropriate competence based on training and/or a minimum work experience in respect of the following areas:(1)general aviation security principles of Union and ICAO aviation security standards;(2)specific standards related to the activity validated and how they are applied to operations;(3)security technologies and techniques relevant for the validation process;(e)undergo recurrent training at a frequency sufficient to ensure that existing competencies are maintained and new competencies are acquired to take account of developments in the field of aviation security.11.6.3.6The appropriate authority shall either itself provide training for EU aviation security validator or approve and maintain a list of appropriate security training courses. The appropriate authority shall provide the validators it approves with the relevant parts of the non-public legislation and national programmes referring to the operations and areas to validate.11.6.3.7Member States may limit the approval of an EU aviation security validator to validation activities which are carried out solely on the territory of that Member State on behalf of the appropriate authority of that Member State. In such cases, the requirements of point 11.6.4.2 do not apply.11.6.3.8The appropriate authority acting as validator may only perform validations in respect of air carriers, operators and entities that are placed under its responsibility or under the responsibility of the appropriate authority of another Member State, where it has been explicitly requested or appointed to do so by that authority.11.6.3.9As from the date of withdrawal of the United Kingdom of Great Britain and Northern Ireland from the European Union pursuing Article 50 of the TEU, the following provisions apply in respect of EU aviation security validators approved by this Member State to perform validations in respect of airlines, operators and entities seeking respectively ACC3, RA3 and KC3 designation:(a)they are no longer recognised in the Union;(b)the EU aviation security validations performed before the date of withdrawal of the United Kingdom from the Union, including the EU validation reports issued before that date remain valid for the purpose of the designation of air carriers, operators and entities they have validated;11.6.3.10Individuals and entities indicated in the previous point may seek approval as EU aviation security validator by the appropriate authority of a Member State. The approving Member State shall:(a)Obtain from the appropriate authority of the United Kingdom the necessary documentation on which basis the individual or legal entity had been approved as EU aviation security validator;(b)Verify that the applicant fulfils the Union requirements in this Chapter. If the appropriate authority is satisfied, it may approve the individual or the entity as EU aviation security validator for a period not exceeding the approval that was granted by the appropriate authority of the United Kingdom;(c)Promptly inform the Commission that will ensure the listing of the EU aviation security validator into the Union database on supply chain security.11.6.3.11The approval of an EU aviation security validator shall be valid for a maximum period of five years.11.6.4Recognition and discontinuation of EU aviation security validators11.6.4.1An EU aviation security validator:(a)shall not be considered to be approved until its details are listed in the "Union database on supply chain security";(b)shall be provided with proof of its status by or on behalf of the appropriate authority;(c)may not perform EU aviation security validations if it holds the status of aviation security validator under an equivalent scheme in place in a third country or an international organisation, unless the third country or international organisation grants reciprocal opportunities to EU aviation security validators within its scheme.EU aviation security validators listed in the "Union database on supply chain security" on account of the appropriate authority, may only perform validations of airlines, operators or entities under the responsibility of that appropriate authority.11.6.4.2Approved EU aviation security validators shall be recognised by all Member States.11.6.4.3When a Member State is no longer satisfied that an EU aviation security validator meets the requirements referred to in points 11.6.3.1 or 11.6.3.5, it shall withdraw the approval and remove the validator from the Union database on supply chain security, or inform the appropriate authority that approved it, sharing the basis for its concern.11.6.4.4Industry associations and entities under their responsibility operating quality assurance programmes may be approved as EU aviation security validators provided equivalent measures of those programmes ensure impartial and objective validation. Recognition shall be done in cooperation of the appropriate authorities of at least two Member States.11.6.4.5The Commission may recognise validation activities undertaken by authorities or aviation security validators under the jurisdiction of and recognised by a third country or an international organisation where it can confirm their equivalency to EU aviation security validation. A list thereof shall be kept in Attachment 6-Fiii.11.6.5EU aviation security validation report ("the validation report")11.6.5.1The validation report shall record the EU aviation security validation and contain at least:(a)a completed checklist signed by the EU aviation security validator including, where requested, comments by the validated entity in the necessary detail; and(b)a declaration of commitments signed by the validated entity; and(c)an independence declaration in respect of the entity validated signed by the individual performing the EU aviation security validation.11.6.5.2The EU aviation security validator shall establish the level of compliance with the objectives contained in the checklist and record these findings in the appropriate part of the checklist.11.6.5.3A declaration of commitment shall state the validated entity's commitment to continue operation under the successfully validated operation standards.11.6.5.4The validated entity may declare its agreement or disagreement to the validation report's established compliance level. Such a declaration shall become an integral part of the validation report.11.6.5.5Page numbering, date of the EU aviation security validation and initialling by the validator and the validated entity on each page shall prove the validation report's integrity. Manual initialling on each page may be replaced by an electronic signature of the entire document.11.6.5.6By default the report shall be in English and delivered to the appropriate authority along with the validated entity, within not more than one month after the on-site verification.The appropriate authority shall assess the validation report within not more than six weeks after its reception.Where the report concerns an airline, operator or entity undergoing validation for the purposes of an existing designation that expires after the periods referred to in the paragraphs above, the appropriate authority may set a longer period to complete the assessment.In such case, and unless further information and additional documentary evidence is necessary to successfully conclude the assessment, the appropriate authority shall ensure that the process is completed before the expiry of the validity of status.Within three months from the date of reception of the report, the validator shall be provided with a written feedback regarding the quality of the report, and where applicable, any recommendations and remarks that the appropriate authority may deem necessary. Where applicable, a copy of such feedback shall be transmitted to the appropriate authority that has approved the validator.For the purposes of the designation of other airlines, operators or entities as provided for in this Regulation, an appropriate authority may request and shall obtain, within 15 days, from the appropriate authority that has drafted a validation report in its national language or has required the validator performing the validation to do so, a copy of the full validation report in the English language.11.7.MUTUAL RECOGNITION OF TRAINING11.7.1Any competencies acquired by a person in order to meet the requirements under Regulation (EC) No 300/2008 and its implementing acts in one Member State shall be recognised in another Member State.ATTACHMENT 11-AINDEPENDENCE DECLARATION — EU AVIATION SECURITY VALIDATOR(a)I confirm that I have established the level of compliance of the validated entity in an impartial and objective way.(b)I confirm that I am not, and have not in the preceding two years, been employed by the validated entity.(c)I confirm that I have no economic or other direct or indirect interest in the outcome of the validation activity, the validated entity or its affiliates.(d)I confirm that I have, and have had in the preceding 12 months no business relations such as training and consultancy beyond the validation process with the validated entity in areas related to aviation security.(e)I confirm that the EU aviation security validation report is based on a thorough fact finding evaluation of relevant security documentation, consisting of:the validated entities' security programme or equivalent, andan on- site verification of the implementation thereof.(f)I confirm that the EU aviation security validation report is based on an assessment of all security relevant areas on which the validator is required to give an opinion based on the relevant EU checklist.(g)I confirm that I have applied a methodology that allows for separate EU aviation security validation reports in respect of each entity validated and ensures objectivity and impartiality of the fact finding and evaluation, where several entities are being validated in a joint action.(h)I confirm that I accepted no financial or other benefits, other than a reasonable fee for the validation and a compensation of travel and accommodation costs.I accept full responsibility for the EU aviation security validation report.Name of the validated entity:Name of the EU aviation security validator:Date:Signature:12.SECURITY EQUIPMENT12.0.GENERAL PROVISION AND APPROVAL OF SECURITY EQUIPMENT12.0.1.General provision12.0.1.1.The authority, operator or entity using equipment for the implementation of measures for which it is responsible in accordance with the national civil aviation security programme as referred to in Article 10 of Regulation (EC) No 300/2008 shall ensure that the equipment meets the standards set out in this Chapter.The information contained in this Chapter and classified in accordance with Decision (EU, Euratom) 2015/444Commission Decision (EU, Euratom) 2015/444 of 13 March 2015 on the security rules for protecting EU classified information (OJ L 72, 17.3.2015, p. 53). shall be made available by the appropriate authority to manufacturers on a need-to-know basis.12.0.1.2.There shall be routine testing of each piece of security equipment.12.0.1.3.Equipment manufacturers shall provide a concept of operations and equipment shall be evaluated and used in accordance with it.12.0.1.4.Where several security equipment are combined, each one has to comply with the defined specifications and meet the standards set out in this Chapter, both used separately and combined as a system.12.0.1.5.Equipment shall be positioned, installed and maintained in compliance with the requirements of equipment manufacturers.12.0.2.Approval of security equipment12.0.2.1.Subject to point 12.0.5, the following security equipment and software may be installed after 1 October 2020 only if it has been granted an "EU Stamp" marking or an "EU Stamp pending" marking status as referred to in point 12.0.2.5:(a)walk-through metal detection (WTMD) equipment;(b)explosive detection systems (EDS) equipment;(c)explosive trace detection (ETD) equipment;(d)liquid explosive detection systems (LEDS) equipment;(e)metal detection equipment (MDE);(f)security scanners;(g)shoe scanner equipment;(h)explosive vapour detection (EVD) equipment;(i)automated prohibited items detections (APID) software.12.0.2.2.The Commission shall approve the security equipment listed in 12.0.2.1 and shall grant the "EU Stamp" marking.12.0.2.3.The "EU Stamp" marking shall be granted to security equipment tested by test centres which implement quality control measures in accordance with the Common Evaluation Process of the European Civil Aviation Conference under the responsibility of the appropriate authority.12.0.2.4.The Commission may grant an "EU Stamp" marking to security equipment only after it has received the test reports for the equipment in question or Level 2 reports by the Common Evaluation Process of the European Civil Aviation Conference.The Commission may request additional information relating to test reports.12.0.2.5.The Commission may grant an "EU Stamp" marking to security equipment confirmed by the Common Evaluation Process of the European Civil Aviation Conference. Such equipment shall be automatically eligible to the "EU Stamp" marking, and shall receive a temporary "EU Stamp pending" marking status until the final approval.Security equipment with an "EU Stamp pending" marking status shall be allowed for installation and use.12.0.3."EU Stamp" marking and Union database on supply chain security — security equipment12.0.3.1.Security equipment listed in point 12.0.2.1 for which "EU Stamp" marking has been granted shall be entered into the "Union database on supply chain security — security equipment".12.0.3.2.The "EU Stamp" marking shall be affixed by manufacturers on security equipment approved by the Commission and visible on one side or on-screen.12.0.3.3.Equipment with "EU Stamp" marking shall be installed with hardware and software versions corresponding to its description in the "Union database on supply chain security — security equipment".12.0.3.4.Without prejudice to points 12.0.4 and 12.0.5, security equipment with "EU Stamp" marking benefits from mutual recognition and shall be recognised for availability, deployment and use in all Member States.12.0.3.5.The Commission shall maintain the "Union database on supply chain security — security equipment".12.0.3.6.An entry in the "Union database on supply chain security — security equipment" shall contain the following information:(a)a unique alphanumeric identifier;(b)the manufacturer name;(c)the designation name;(d)the detailed configuration with at least:(i)the hardware version;(ii)the detection algorithm;(iii)if necessary, the system software version;(iv)if necessary, the auxiliary hardware version; and(v)if necessary, the concept of operations version;(e)the standard obtained;(f)the status of the equipment, stating one of the following:(i)"EU Stamp";(ii)"EU Stamp pending";(iii)"EU Stamp suspended";(iv)"EU Stamp withdrawn";(v)"EU Stamp obsolete";(g)the date of issuance of the status of the equipment.12.0.4.Suspension and withdrawal of "EU Stamp" marking12.0.4.1.On request from Member States or on its own initiative, the Commission can suspend the "EU Stamp" marking and the "EU Stamp pending" marking status of security equipment without prior notice when it receives information indicating that the equipment does not meet the standard for which it has been approved. In doing so, the Commission updates the status in the "Union database on supply chain security — security equipment" accordingly.12.0.4.2.Security equipment whose "EU Stamp" marking or "EU Stamp pending" marking status has been suspended may be operated subject to the implementation of additional compensatory measures, as appropriate. In suspending the "EU Stamp" marking or "EU Stamp pending" marking status, the Commission may indicate whether new pieces of the equipment in respect of which the marking status has been suspended may be deployed and operated with the addition of the same compensatory measures.12.0.4.3.On request from Member States or on its own initiative, the Commission can withdraw the "EU Stamp" marking or the "EU Stamp pending" marking status of security equipment when it is no longer satisfied that the security equipment meets the standard for which it has been approved.12.0.4.4.Security equipment whose "EU Stamp" marking or "EU Stamp pending" marking status has been withdrawn or has become obsolete can no longer be operated from the date of issuance of the status as recorded in the "Union database on supply chain security — security equipment".12.0.4.5.The Commission can reinstate the "EU Stamp" marking or "EU Stamp pending" marking status when it receives information that the equipment meets again the standard for which is has been approved.12.0.5.More stringent measures on security equipment and national approval12.0.5.1.Member States may derogate from the principle of mutual recognition by applying more stringent measures on security equipment. They shall notify the Commission of these measures, their approvals of security equipment and the steps taken to ensure that security equipment they approve meets the standards set out in this Chapter.12.0.5.2.Member States may derogate from the principle of mutual recognition by applying their own national approval mechanism of security equipment. They shall notify the Commission of this mechanism, their approvals of equipment and the additional steps taken to ensure that security equipment meets the standards set out in this Chapter.12.0.5.3.Security equipment approved at national level on the basis of point 12.0.5.1 or 12.0.5.2 shall not automatically receive the "EU Stamp" marking.12.0.5.4.The Commission may grant the "EU Stamp" marking status to security equipment referred to in point 12.0.5.3. under the condition that it has received the evidence submitted by the Member State that such security equipment meets the standards set out in this Chapter.12.1WALK-THROUGH METAL DETECTION (WTMD) EQUIPMENT12.1.1General principles12.1.1.1Walk-through metal detection equipment (WTMD) shall be able to detect and to indicate by means of an alarm at least specified metallic items, both individually and in combination.12.1.1.2The detection by WTMD shall be independent of the position and orientation of the metallic item.12.1.1.3WTMD shall be firmly fixed to a solid base.12.1.1.4WTMD shall have a visual indicator to show that the equipment is in operation.12.1.1.5The means for adjusting the detection settings of WTMD shall be protected and accessible only to authorised persons.12.1.1.6WTMD shall give both a visual alarm and an audible alarm when it detects metallic items as referred to in point 12.1.1.1. Both types of alarm shall be noticeable at a range of 2 metres.12.1.1.7The visual alarm shall give an indication of the strength of signal detected by the WTMD.12.1.1.8WTMD shall be positioned so as to ensure it is not affected by sources of interference.12.1.2Standards for WTMD12.1.2.1There shall be four standards for WTMD. Detailed requirements on those standards are laid down in Commission Implementing Decision C(2015) 8005.12.1.2.2All WTMD exclusively used for screening persons other than passengers shall meet at least standard 1.12.1.2.3All WTMD used for screening of passengers shall meet standard 2.12.1.2.4All WTMD installed as of 1 July 2023 shall meet standard 1.1 or standard 2.1.12.1.3Additional requirements for WTMDAll WTMD for which a contract to install them was placed as from 5 January 2007 shall be able to:(a)generate an audible and/or visual signal on a percentage of persons passing through the WTMD who did not cause an alarm as referred to in point 12.1.1.1. It shall be possible to set the percentage; and(b)count the number of persons screened, excluding any person that passes through the WTMD in the opposite direction; and(c)count the number of alarms; and(d)calculate the number of alarms as a percentage of the number of screened persons.12.1.4Additional requirements for WTMD used in combination with shoe metal detection (SMD) equipment12.1.4.1All WTMD equipment used in combination with shoe metal detection (SMD) equipment shall be able to detect and indicate by means of a visual indication at least specified metallic items, both individually and in combination, and this shall correspond to the height at which this item (or items) is located on the person passing through it. This shall be irrespective of the type and number of items and their orientation.12.1.4.2All WTMD equipment used in combination with SMD equipment shall be able to detect and indicate all alarms generated by metallic items on a person in at least two zones. The first zone shall correspond to the lower legs of a person and shall be between the floor and a maximum of 35 cm above the floor. All other zones shall be above the first zone.12.2HAND-HELD METAL DETECTION (HHMD) EQUIPMENT12.2.1Hand-held metal detection equipment (HHMD) shall be able to detect ferrous and non-ferrous metallic items. Detection and identification of the position of the detected metal shall be indicated by means of an alarm.12.2.2The means for adjusting the sensitivity settings of HHMD shall be protected and accessible only to authorised persons.12.2.3HHMD shall give an audible alarm when it detects metallic items. The alarm shall be noticeable at a range of 1 metre.12.2.4The performance of HHMD shall not be affected by sources of interference.12.2.5HHMD shall have a visual indicator to show that the equipment is in operation.12.3X-RAY EQUIPMENTX-ray equipment shall comply with the detailed requirements laid down in Commission Implementing Decision C(2015) 8005.12.3.1All equipment installed from 1 January 2023 at the latest, to be used in the Union for the screening of cargo and mail, as well as air carrier mail and air carrier materials subject to security controls in accordance with Chapter 6, shall be multi-view.The appropriate authority, for objective reasons, may allow the use of single-view X-ray equipment installed before 1 January 2023 until the following dates:(a)single-view X-ray equipment installed before 1 January 2016, until 31 December 2025 at the latest;(b)single-view X-ray equipment installed from 1 January 2016, for a maximum period of 10 years from the date of its installation or at the latest until 31 December 2027, whichever is the earlier.The appropriate authority shall inform the Commission where it applies the provisions of the second paragraph.12.4EXPLOSIVE DETECTION SYSTEMS (EDS) EQUIPMENT12.4.1General principles12.4.1.1Explosive detection systems equipment (EDS) shall be able to detect and to indicate by means of an alarm specified and higher individual quantities of explosive or chemical material contained in baggage or other consignments.12.4.1.2The detection shall be independent of the shape, position or orientation of the explosive or chemical material.12.4.1.3EDS shall give an alarm in each of the following circumstances:when it detects explosive or chemical material, andwhen it detects the presence of an item that prevents explosive or chemical material from being detected, andwhen the contents of a bag or consignment are too dense to be analysed.12.4.2Standards for EDS12.4.2.1All EDS equipment shall fulfil the following requirements:(a)equipment installed before 1 September 2014 must at least meet standard 2;(b)equipment installed from 1 September 2014 to 31 August 2022 must at least meet standard 3;(c)equipment installed from 1 September 2022 to 31 August 2026 must at least meet standard 3.1;(d)equipment installed from 1 September 2026 must at least meet standard 3.2.12.4.2.2Standard 2 shall expire on 1 September 2021.12.4.2.3For the purposes of allowing an extension of the use of standard 2 EDS, there shall be four categories of airports:(a)category I – airport with more than 25 million passengers in 2019;(b)category II – airport with scheduled services to at least one of the third countries listed in Attachment 5-A of this Regulation, with the exception of the United Kingdom of Great Britain and Northern Ireland;(c)category III – airport with the highest volume of traffic in 2019 in each Member State where they are not already listed under category I or II;(d)category IV – other airport.12.4.2.4The appropriate authority may allow the use of standard 2 EDS as of 1 September 2021, in accordance with the following table, until:

	Standard 2 EDS equipment installed before 1 January 2011	Standard 2 EDS equipment installed between 1 January 2011 and 1 September 2014
Airports in Category I	1 March 2022	1 March 2023
Airports in Category II or Category III	1 September 2022	1 September 2023
Airports in Category IV	1 March 2023	1 March 2024

Additionally, the appropriate authority may allow the use of standard 2 EDS for the screening of cargo and mail as well as air carrier mail and air carrier materials subject to security controls in accordance with Chapter 6, until 1 September 2022 at the latest.12.4.2.5The appropriate authority shall inform the Commission when it allows the use of standard 2 EDS to continue as of 1 September 2021.12.4.2.6All EDS equipment designed to screen cabin baggage shall meet at least standard C1.12.4.2.7All EDS equipment designed to screen cabin baggage containing portable computers and other large electrical items shall meet at least standard C2.12.4.2.8.All EDS equipment designed to screen cabin baggage containing portable computers, other large electrical items and LAGs shall meet at least standard C3.12.4.2.9.All EDS equipment that meets standard C3 shall be considered as equivalent to LEDS equipment that meets standard 2 for the screening of LAGs.12.4.2.10.Standard C3 equipment designed to screen cabin baggage that has received the "EU Stamp" marking or "EU Stamp pending" marking before 1 August 2024 may only be used to screen LAGs with a screening limit of the maximum volume of individual LAG containers not to exceed 100 ml.12.4.3Image quality requirements for EDSImage quality for EDS shall comply with the detailed requirements laid down in Commission Implementing Decision C(2015) 8005.12.5THREAT IMAGE PROJECTION (TIP)12.5.1General principles12.5.1.1Threat image projection (TIP) shall be able to project combined threat images (CTI) or fictional threat images (FTI).CTI are x-ray images of bags or other consignments containing threat articles.FTI are x-ray images of threat articles which are projected into x-ray images of bags or other consignments being screened.Threat articles shall appear within the x-ray image of bags and other consignments in an evenly distributed manner and not in a fixed position.It shall be possible to set the percentage of CTI and FTI to be projected.Where CTI are used:(a)the concept of operation must ensure that the screener cannot see the bags or other consignments that are introduced into the x-ray or EDS equipment and cannot determine that a CTI is or might be projected to him/her; and(b)the TIP system and library size shall reasonably ensure that a screener is not exposed to the same CTI again within 12 months.Where CTI TIP is deployed with EDS equipment used exclusively for hold baggage screening, the requirement in point (b) shall only apply as of 1 September 2020.12.5.1.2TIP shall not impair the performance and normal functioning of x-ray or EDS equipment.No indication shall be given to the screener that a CTI or FTI is about to be projected or has been projected until a message is presented in accordance with point 12.5.2.2.12.5.1.3The means for managing TIP shall be protected and accessible only to authorised persons.12.5.1.4There shall be a TIP administrator responsible for the configuration management of the TIP system.12.5.1.5The appropriate authority shall regularly monitor the correct implementation of the TIP systems and ensure that the systems are correctly configured, including realistic and relevant projection of CTI and FTI where in use, are in compliance with the requirements and have up-to-date image libraries.12.5.2Composition of TIP12.5.2.1TIP shall comprise of at least:(a)a library of CTI or FTI; and(b)a means for presenting messages and for messages to be cleared; and(c)a means for recording and presenting the results of the responses of individual screeners.12.5.2.2TIP shall present a message to the screener in each of the following circumstances:(a)where the screener responded and a CTI or FTI was projected;(b)where the screener did not respond and a CTI or FTI was projected;(c)where the screener responded and no CTI or FTI was projected;(d)where an attempt to project a CTI or FTI failed and was visible to the screener.The message shall be presented so that it does not obscure the image of the bag or consignment to which it refers.The message shall remain until it has been cleared by the screener. In the case of points (a) and (b) the message shall be presented together with the CTI or FTI.12.5.2.3Access to equipment with TIP installed and deployed shall require that the screener uses a unique identifier.12.5.2.4TIP shall be able to store the results of the responses of individual screeners for a minimum of 12 months and in a format to allow the provision of reports.12.5.2.5The composition of TIP shall also be subject to the additional detailed requirements laid down in Commission Implementing Decision C(2015) 8005.12.6EXPLOSIVE TRACE DETECTION (ETD) EQUIPMENT12.6.1ETD equipment shall be able to collect and analyse trace levels of particles from contaminated surfaces, or the contents of baggage or consignments, and indicate, by means of an alarm, the presence of explosives or chemicals. For the purpose of screening, it shall meet all of the following requirements:(a)consumables shall not be used beyond the recommendations of the manufacturer of the consumable or if the performance of the consumable appears to have deteriorated through use;(b)ETD equipment shall only be used in an environment for which the equipment has been approved for use.There shall be standards for ETD set for particulate sampling. Detailed requirements for these standards are laid down in Commission Implementing Decision C(2015) 8005.12.6.2The standard for ETD equipment for the detection of explosives, that uses particulate sampling, shall apply to ETD equipment deployed from 1 September 2014.The standard for ETD equipment for the detection of chemicals, that uses particulate sampling, shall apply as of 1 October 2025 to ETD equipment deployed from 1 September 2014.12.6.3The appropriate authority may permit ETD equipment not certified to comply with attachment 12-L that was deployed before 1 July 2014 and uses particulate sampling to continue to be used until 1 July 2021 at the latest.12.7EQUIPMENT FOR SCREENING LIQUIDS, AEROSOLS AND GELS (LAGs)12.7.1General principles12.7.1.1LEDS equipment shall be able to detect and to indicate by means of an alarm specified and higher individual quantities of threat materials in LAGs.12.7.1.2The equipment shall be used in a manner that ensures that the container is positioned and orientated so as to ensure that the detection capabilities are utilised in full.12.7.1.3The equipment shall give an alarm in each of the following circumstances:(a)when it detects threat material;(b)when it detects the presence of an item that prevents threat material from being detected;(c)when it cannot assess whether the LAG is benign or not;(d)when the contents of the screened bag are too dense to be analysed.12.7.1.4The equipment shall give an alarm in each of the following circumstances:(a)when it detects threat material;(b)when it detects the presence of an item that prevents threat material from being detected;(c)when it cannot assess whether the LAG is benign or not;(d)when the contents of the screened bag are too dense to be analysed.12.7.2Standards for Liquid Explosive Detection Systems (LEDS) equipment12.7.2.1There shall be three standards for LEDS equipment. Detailed requirements on these standards are laid down in Commission Implementing Decision C(2015) 8005.12.7.2.2All LEDS equipment shall meet standard 2.12.7.2.3Standard 2 shall apply to all LEDS equipment installed as from the day of the entry in force of this Regulation.All LEDS equipment shall meet standard 2 with effect from 31 January 2016 at the latest.12.7.3Approval of equipment for the screening of LAGsEquipment that is approved by or on behalf of the appropriate authority of a Member State to meet the standards as laid down in Commission Implementing Decision C(2015) 8005 shall be recognised by other Member States to meet these standards. Member States shall submit to the Commission the name and, upon request, other relevant details of bodies designated to approve equipment. The Commission shall inform other Member States of the bodies.12.8METHODS OF SCREENING USING NEW TECHNOLOGIES12.8.1A Member State may allow a method of screening using new technologies other than those laid down in this Regulation, provided that:(a)it is being used for the purpose of evaluating a new method of screening; and(b)it will not negatively affect the overall level of security being attained; and(c)appropriate information that a trial is being conducted shall be given to those affected, including passengers.12.8.2Before its planned introduction the Member State concerned shall inform in writing the Commission and the other Member States of the proposed method of screening it intends to allow, enclosing an assessment indicating how it shall guarantee that the application of the new method will meet the requirement of point 12.8.1(b). The notification shall also contain detailed information on the location(s) where the method of screening is planned to be used and the intended length of the evaluation period.12.8.3If the Commission gives the Member State a positive reply, or if no reply is received within three months upon receipt of the written request, the Member State may then allow the introduction of the method of screening using new technologies.If the Commission is not satisfied that the proposed method of screening provides sufficient guarantees that the overall level of aviation security will be maintained in the Union, the Commission shall inform the Member State thereof within three months of receipt of the notification referred to in point 12.8.2, explaining its concerns. In such a circumstance the Member State concerned shall not commence with the method of screening until it has satisfied the Commission.12.8.4The maximum evaluation period for each method of screening using new technologies shall be eighteen months. This evaluation period may be extended by the Commission by a maximum of a further twelve months on condition that the Member State provides adequate justification for the extension.12.8.5At intervals of no more than six months during the evaluation period, the appropriate authority in the Member State concerned shall provide the Commission with a progress report on the evaluation. The Commission shall inform the other Member States of the contents of the progress report. If no progress reports are provided, the Commission may request the Member State to suspend the trial.12.8.6If, on the basis of a report, the Commission is not satisfied that the method of screening being trialled is providing sufficient guarantees that the overall level of aviation security is being maintained in the Union, the Commission shall inform the Member State that the trial shall be suspended until such guarantees can be given.12.8.7No evaluation period may be longer than thirty months.12.9EXPLOSIVE DETECTION DOGS12.9.1General Principles12.9.1.1An explosive detection dog (EDD) shall be able to detect and indicate specified and higher individual quantities of explosive material.12.9.1.2The detection shall be independent of the shape, position or orientation of the explosive materials.12.9.1.3An EDD shall give an alarm, in the form of a passive response, when it detects explosive materials set in Attachment 12-D of Commission Implementing Decision C(2015) 8005.12.9.1.4An EDD and its handler can be used for screening if they both have been approved independently and in combination as a team.12.9.1.5An EDD and its handler shall be subject to initial and recurrent training to ensure that required competencies are learned and maintained and, where appropriate, new competencies are learned.12.9.1.6In order to be approved, an EDD team, consisting of an EDD and handler(s), shall have successfully passed a training course.12.9.1.7An EDD team shall be approved by or on behalf of the appropriate authority in accordance with Attachments 12-E and 12-F to Commission Implementing Decision C(2015) 8005. The appropriate authority may allow the deployment and use of EDD teams trained and/or approved by the appropriate authority of another Member State, provided it has formally agreed with the approving authority on the respective roles and responsibilities in ensuring that all the requirements in Chapter 12.9 of this Annex are fulfilled, in accordance with Attachment 12-P to this Annex. In the absence of such agreement, full responsibility for the fulfilment of all requirements in Chapter 12.9 of this Annex remains with the appropriate authority of the Member State where the EDD team is deployed and used.12.9.1.8After approval by the appropriate authority, an EDD team may be used for security screening by use of free running or remote explosive scent tracing method.12.9.2Standards for EDD12.9.2.1The performance requirements for an EDD are laid down in Attachment 12-D of Commission Implementing Decision C(2015) 8005.12.9.2.2An EDD team used for the screening of persons, cabin baggage, items carried by persons other than passengers, vehicles, aircraft, in-flight supplies and airport supplies, and security restricted areas of an airport shall meet detection standard 1.12.9.2.3An EDD team used for the screening of hold baggage, air carrier mail, air carrier materials, cargo and mail shall meet detection standard 2.12.9.2.4An EDD team approved to detect explosive materials using the remote explosive scent tracing method may only be used in screening of cargo, but no other areas included in standard 2.12.9.2.5An EDD used for the detection of explosive materials shall be fitted with appropriate means to allow for the unique identification of the EDD.12.9.2.6When performing explosive detection duties, an EDD shall always be accompanied by the handler who is approved to work with the EDD.12.9.2.7An EDD approved for free running method shall only have one handler. One handler may be approved for leading a maximum of two EDDs.12.9.2.8An EDD approved for remote explosive scent tracing method shall be led by a maximum of two handlers per EDD.12.9.3Training requirementsGeneral training obligations12.9.3.1The training of an EDD team shall include theoretical, practical and on-the-job training elements.12.9.3.2The content of training courses shall be specified or approved by the appropriate authority. The theoretical training of the handler shall include the provisions laid down in Chapter 11.2 for the screening of the specific area or areas where the EDD team is approved.12.9.3.3The training shall be conducted by or on behalf of the appropriate authority using instructors qualified according to point 11.5.12.9.3.4Dogs to be trained for explosive detection shall be single purpose dogs.12.9.3.5During training, training aids representing explosive materials shall be used.12.9.3.6Training shall be provided to any persons handling the training aids so as to prevent contamination.Initial training for EDD Teams12.9.3.7An EDD team shall be subject to initial training in accordance with the requirements laid down in point 12.9.3 of Commission Implementing Decision C(2015) 8005.12.9.3.8Initial training for EDD team shall include practical training in the intended work environment.Recurrent training for EDD Teams12.9.3.9An EDD and the handler shall be subject to recurrent training requirements, both individually and in combination as a team.12.9.3.10Recurrent training shall maintain the existing competencies as required by the initial training and those acquired in line with security developments.12.9.3.11Recurrent training for an EDD team shall be performed at intervals of at least every 6 weeks. The minimum duration of the re-current training shall be no less than 4 hours in any 6 week period.12.9.3.12Point 11 shall not apply in the case where an EDD is subject to recognition training of all materials listed in Attachment 12-D of Commission Implementing Decision C(2015) 8005 on at least a weekly basis.Training records for EDD Teams12.9.3.13The records of both initial and recurrent training shall be kept for both the EDD and its handler for at least the duration of their contract of employment and they shall be made available to the appropriate authority upon request.Operational Training for EDD Teams12.9.3.14When EDD is deployed in the screening duties, the EDD shall be subject to operational training to ensure that it meets the performance set in Attachment 12-D of Commission Implementing Decision C(2015) 8005.12.9.3.15Operational training shall be done on a continuous random basis during the deployment period, and shall measure EDD's detection performance by means of approved training aids.12.9.4Approval Procedures12.9.4.1The approval procedure shall ensure that all of the following competencies are measured:(a)ability of the EDD to meet the detection performance laid down in the Attachment 12-D of Commission Implementing Decision C(2015) 8005;(b)ability of the EDD to give a passive indication on the presence of explosive materials;(c)ability of the EDD and its handler(s) to work effectively as a team;(d)ability of the handler to correctly lead the EDD, interpret and respond appropriately to the EDD's reaction to the presence of an explosive material.12.9.4.2The approval procedure shall simulate each of the work areas in which the EDD team shall work.12.9.4.3The EDD team shall have successfully completed training in each area for which the approval is sought.12.9.4.4The approval procedures shall be carried out in accordance with the Attachments 12-E and 12-F of Commission Implementing Decision C(2015) 8005.12.9.4.5The validity of each approval period shall not be longer than 12 months.12.9.5Quality Control12.9.5.1The EDD team shall be subject to quality control measures set out in the Attachment 12-G of Commission Implementing Decision C(2015) 8005.12.9.6Methodology of ScreeningFurther, detailed requirements are contained in Commission Implementing Decision C(2015) 8005.12.10METAL DETECTION EQUIPMENT (MDE)Detailed provisions on the use of MDE are laid down in Commission Implementing Decision C(2015) 8005.12.11SECURITY SCANNERS12.11.1General principlesA security scanner is a system for the screening of persons that is capable of detecting metallic and non-metallic objects, distinct from the human skin, carried on the body or within clothes.A security scanner with human reviewer may consist of a detection system that creates an image of a person's body for a human reviewer to analyse and establish that no metallic and non-metallic object, distinct from the human skin, is carried on the body of the person screened. When the human reviewer identifies such an object, its location shall be communicated to the screener for further search. In this case, the human reviewer is to be considered as an integral part of the detection system.A security scanner with automatic threat detection may consist of a detection system that automatically recognises metallic and non- metallic objects, distinct from the human skin, carried on the body of the person screened. When the system identifies such an object, its location shall be indicated on a stick figure to the screener.For the purpose of screening passengers, a security scanner shall meet all of the following standards:(a)security scanners shall detect and indicate by means of an alarm at least specified metallic and non-metallic items including explosives both individually and in combination;(b)detection shall be independent of the position and orientation of the item;(c)the system shall have a visual indicator to show that the equipment is in operation;(d)security scanners shall be positioned so as to ensure that their performance is not affected by sources of interference;(e)the correct functioning of security scanners shall be tested on a daily basis;(f)the security scanner shall be used in accordance with the concept of operations provided by the manufacturer.Security scanners for the screening of passengers shall be deployed and used in compliance with Council Recommendation 1999/519/ECCouncil Recommendation 1999/519/EC of 12 July 1999 on the limitation of exposure of the general public to electromagnetic fields (0 Hz to 300 GHz) (OJ L 199, 30.7.1999, p. 59). and Directive 2013/35/EU of the European Parliament and of the CouncilDirective 2013/35/EU of the European Parliament and of the Council of 26 June 2013 on the minimum health and safety requirements regarding the exposure of workers to the risks arising from physical agents (electromagnetic fields) (20th individual Directive within the meaning of Article 16(1) of Directive 89/391/EEC) and repealing Directive 2004/40/EC (OJ L 179, 29.6.2013, p. 1)..12.11.2Standards for security scannersThe performance requirements for security scanners are laid down in Attachment 12-K, which shall be classified as "CONFIDENTIEL UE/EU CONFIDENTIAL" and be handled in accordance with Decision (EU, Euratom) 2015/444.Security scanners shall meet the standard defined in Attachment 12-K from the entry into force of this Regulation.12.11.2.1All security scanners shall meet standard 1.Standard 1 shall expire on 1 January 2022.12.11.2.2Standard 2 shall apply to security scanners installed as of 1 January 2019.12.11.2.3Standard 2.1 shall apply to security scanners installed from 1 January 2021.12.12SHOE SCANNER EQUIPMENT12.12.1General principles12.12.1.1Shoe metal detection (SMD) equipment shall be able to detect and to indicate by means of an alarm at least specified metallic items, both individually and in combination.12.12.1.2Shoe explosive detection (SED) equipment shall be able to detect and indicate by means of an alarm at least specified explosives items.12.12.1.3The detection by SMD and SED shall be independent of the position and orientation of the metallic or explosive items.12.12.1.4SMD and SED shall be placed on a solid base.12.12.1.5SMD and SED shall have a visual indicator to show that the equipment is in operation.12.12.1.6The means for adjusting the detection settings of SMD and SED shall be protected and accessible only to authorised persons.12.12.1.7SMD shall give at least a visual alarm and an audible alarm when it detects metallic items as refers to in point 12.12.1.1. Both types of alarm shall be noticeable at a range of 1 m.12.12.1.8SED shall give at least a visual alarm and an audible alarm when it detects explosive items as refers to in point 12.12.1.2. Both types of alarm shall be noticeable at a range of 1 m.12.12.2Standards for SMD12.12.2.1There shall be two standards for SMD. Detailed requirements on these standards are laid down in Commission Implementing Decision C(2015) 8005.12.12.2.2All SMD exclusively used for screening persons other than passengers shall meet at least standard 1.12.12.2.3All SMD used for screening of passengers shall meet standard 2.12.12.2.4All SMD shall be able to resolve alarms generated on a WTMD, in the area between the surface supporting the shoe and at least 35 cm above.12.12.3Standard for SED12.12.3.1Detailed requirements on this standard are laid down in Commission Implementing Decision C(2015) 8005.12.13AUTOMATED PROHIBITED ITEMS DETECTION (APID) SOFTWARE12.13.1General principles12.13.1.1Automated Prohibited Items Detection (APID) software shall be able to detect and to indicate by means of an alarm prohibited items contained in baggage or other consignments.12.13.2Standards for APID software12.13.2.1There shall be three standards for APID software. Detailed requirements on these standards are laid down in Commission Implementing Decision C(2015) 8005.12.14EXPLOSIVE VAPOUR DETECTION (EVD) EQUIPMENT12.14.1General principles12.14.1.1Explosives Vapour Detection (EVD) equipment shall be able to collect samples of air and analyse the collected sample for vapour, aerosols and/or airborne particles indicating the presence of explosives and explosive related materials.If trace levels of explosives or explosive related materials are found in the sample, the EVD equipment shall indicate an alarm.12.14.1.2For the purpose of screening with EVD equipment, the following requirements shall apply:(a)EVD equipment shall only be used in an environment and for the purpose for which it has been approved, i.e. screening of:Passengers and persons other than passengers (EVD-PX);Cabin baggage (EVD-CB);Hold baggage (EVD-HB);Air cargo and mail, air carrier mail and air carrier materials, in-flight supplies and airport supplies (EVD-CS);(b)consumables shall not be used beyond the recommendations of their manufacturer or if the performance of the consumable appears to have deteriorated through use.12.14.2Standards for EVD12.14.2.1All EVD equipment used for the screening of hold baggage, air cargo and mail, air carrier mail and air carrier materials loaded in the aircraft hold, in-flight supplies as well as airport supplies shall meet at least standard 1.12.14.2.2All EVD equipment used for the screening of passengers and persons other than passengers as well as cabin baggage shall meet at least standard 3.12.14.2.3Detailed requirements on these standards are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-ADetailed provisions for performance requirements for WTMD and SMD are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-BDetailed provisions for performance requirements for EDS are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-CDetailed provisions for performance requirements for equipment for the screening of liquids, aerosols and gels (LAGS) are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-DDetailed provisions for performance requirements for an EDD are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-EDetailed provisions for approval procedures of an EDD are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-FDetailed provisions for approval test areas and test conditions for an EDD are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-GDetailed provisions for quality control requirements for an EDD are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-HDetailed provisions for "Free Running EDD — Standards for deployment methodology" are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-IDetailed provisions for "Remote Explosive Scent Tracing EDD — Standards for deployment methodology" are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-JDetailed provisions for performance requirements for MDE are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-KDetailed provisions for performance requirements for security scanners are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-LDetailed provisions for performance requirements for Explosive Trace Detection (ETD) are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-MDetailed provisions for performance requirements for APID are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-NDetailed provisions for performance requirements for SED are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-ODetailed provisions for performance requirements for EVD are laid down in Commission Implementing Decision C(2015) 8005.ATTACHMENT 12-PLETTER OF UNDERSTANDING BETWEEN APPROPRIATE AUTHORITIES SUPPORTING THE DEPLOYMENT OF EDD TEAMSThis letter of understanding is established between the following parties:The appropriate authority receiving support for the deployment of EDD teams:…The appropriate authority or authorities providing support for the deployment of EDD teams:…For the identification of the following rolesShould there be a need, this letter of understanding may be supplemented with additional details and amended as needed in order to specify the roles of the appropriate authorities, and to determine its scope of application. to ensure that the deployment of EDD teams meets EU requirements:Appropriate authority in charge of specifying or approving the content of training courses:…Appropriate authority in charge of approving EDD teams:…Appropriate authority in charge of the external quality control:…For the following period of validity:Date:Signatures:

Commission Implementing Regulation (EU) 2015/1998 of 5 November 2015 laying down detailed measures for the implementation of the common basic standards on aviation security (Text with EEA relevance)

Corrected by