Security program for persons designated as RACAs
(1) If the Secretary designates a person as a RACA under regulation 4.43A, the Secretary must:
(a) provide the person with a RACA security program that:
(i) is appropriate for the kind of business that is carried on by the RACA; and
(ii) addresses the requirements set out in subregulation (2); and
(b) do so at the same time as the notice of the designation is given under subregulation 4.43A(3).
(2) The RACA security program must set out the following requirements:
(a) measures and procedures to ensure security of the RACA's facilities;
(b) measures and procedures to ensure security of the RACA's personnel;
(c) training requirements and procedures for the RACA's personnel;
(d) measures and procedures for clearing cargo;
(e) measures and procedures to ensure the chain of custody for cargo;
(f) measures and procedures for handling high risk cargo;
(fa) if the RACA controls an access control point into a security restricted area at a designated airport--the requirements mentioned in subregulation (2A);
(g) in any case--measures and procedures for oversight of the operation of the measures, procedures and requirements for paragraphs (a) to (f), including quality assurance and incident response.
Note: The points of entry into a security restricted area at a designated airport that are access control points are set out in the airport operator's TSP: see the definition of access control point in regulation 1.03.
(2A) For the purposes of paragraph (2)(fa), the requirements are as follows:
(a) the location of each access control point, controlled by the RACA, into the security restricted area;
(b) procedures to confirm the following:
(i) the identity of persons entering the security restricted area through access control points controlled by the RACA;
(ii) that persons, vehicles and things entering the security restricted area through access control points controlled by the RACA are authorised to do so;
(c) procedures to confirm that each person who enters the security restricted area through an access control point controlled by the RACA and who is required by Subdivision 3.2.1 to properly display an ASIC in the security restricted area:
(i) holds a valid red ASIC; or
(ii) holds a valid VIC, a valid TAC or a valid grey ASIC and is supervised by someone who is authorised to enter the security restricted area and holds a valid red ASIC;
(d) if checks are to be performed to confirm the matters mentioned in paragraphs (b) and (c) at a place in the vicinity of an access control point controlled by the RACA--the location of that place.
Security programs for RACAs whose designation is renewed
(3) The Secretary may provide a RACA whose designation as a RACA is renewed under regulation 4.43E with a RACA security program that:
(a) is appropriate for the kind of business that is carried on by the RACA; and
(b) addresses the requirements set out in subregulation (2).
(4) However, if:
(a) a RACA's designation is renewed under regulation 4.43E; and
(b) immediately before the RACA's designation was renewed there was a RACA security program in force for the RACA (the original security program ); and
(c) the Secretary does not provide the RACA with a RACA security program under subregulation (3);
the original security program continues in force for the RACA.