(1) The TSP must set out the security measures and procedures to be used within each of the operator's facilities, including measures and procedures:
(a) to control access to aircraft and facilities and maintain the integrity of access control systems; and
(b) to deter and detect unauthorised access into the airside area by people, aircraft, vehicles or things; and
(c) to deter and detect unauthorised access into the airside security zone by people, aircraft, vehicles or things; and
(d) to deter and detect unauthorised access into a landside security zone by people, vehicles or things; and
(e) to be applied to unattended aircraft; and
(f) to assess, identify and respond to unknown substances; and
(g) to investigate, secure, and remove unattended or suspect vehicles, aircraft or things, including baggage and cargo; and
(h) to ensure the security of passwords, keys and key lists, electronic access cards and other security privileges.
(2) The TSP must:
(a) specify the security measures and procedures that have been implemented within each of the operator's facilities; and
(b) be accompanied by a document that sets out a timetable for implementation of any measures and procedures that have not been implemented.
Issuing TACs for access control
(5) If an aircraft operator intends to issue TACs, the TSP must set out the process for how the aircraft operator will issue TACs.
Issuing VICs for access control
(6) If an aircraft operator intends to authorise agents to issue VICs on behalf of the aircraft operator, the TSP must set out procedures for:
(a) how the aircraft operator will authorise agents; and
(b) auditing an agent's practices.
(7) If an aircraft operator is approved by the Secretary to issue VICs and the aircraft operator intends to issue VICs in a form that is different from that set out in regulation 6.39, the TSP must set out:
(a) the form; and
(b) whether VICs issued by the aircraft operator's agents will be in the different form.
(8) An aircraft operator's TSP may set out:
(a) more than 1 form for a VIC; and
(b) that an aircraft operator's agents may use a different form, set out in the TSP, than that used by the aircraft operator.
(9) An aircraft operator's TSP may state that the aircraft operator (or its agent) must not issue VICs in the form set out in regulation 6.39.
(10) If an aircraft operator is approved by the Secretary to issue VICs, the TSP may set out circumstances in which a VIC need not be returned to the aircraft operator within 7 days after the VIC has expired.