Every air carrier shall draw up, apply and maintain an air carrier security programme.
That programme shall describe the methods and procedures which are to be followed by the air carrier in order to comply both with this Regulation and with the national civil aviation security programme of the Member State from which it provides services.
The programme shall include internal quality control provisions describing how compliance with these methods and procedures is to be monitored by the air carrier.