A security plan must—
(a) identify security risks for explosives that may affect an individual, property and information kept by the holder of a prescribed authority about explosives; and
(b) adopt processes that deal with identified security risks for explosives activities, that ensure—(i) the explosives are kept securely; and(ii) records are kept that are sufficient to allow the inspector to assess whether the plan has been complied with; and(iii) methods are used that identify when explosives have been accessed and identify access to explosives by a person who should not have access to explosives; and(iv) the chain of possession of the explosives can be traced from the holder of the authority to the holder of another prescribed authority; and(v) the explosives are delivered to a person authorised in the security plan to have access to the explosives and to receive the explosives; and(vi) records are kept that identify the persons who, in the scope of their employment, are allowed unsupervised access to explosives.