Every airport operator shall draw up, apply and maintain an airport security programme.
That programme shall describe the methods and procedures which are to be followed by the airport operator in order to comply both with this Regulation and with the national civil aviation security programme of the Member State in which the airport is located.
The programme shall include internal quality control provisions describing how compliance with these methods and procedures is to be monitored by the airport operator.