Every entity required under the national civil aviation security programme referred to in Article 10 to apply aviation security standards shall draw up, apply and maintain a security programme.
That programme shall describe the methods and procedures which are to be followed by the entity in order to comply with the national civil aviation security programme of the Member State in respect of its operations in that Member State.
The programme shall include internal quality control provisions describing how compliance with these methods and procedures is to be monitored by the entity itself.