Canadian Aviation Security Regulations, 2012 — 347
Requirement to establish and implement 347 (1) The operator of an aerodrome must establish and implement an airport security program. Program requirements (2) As part of its airport security program, the operator of an aerodrome must (a) define and document the aerodrome-related security roles and responsibilities assigned to each of the operator’s employee groups and contractor groups; (b) communicate the information referred to in paragraph (a) to the employees and contractors in those groups; (c) have a security policy statement that establishes an overall commitment and direction for aerodrome security and sets out the operator’s security objectives; (d) communicate the security policy statement in an accessible manner to all persons who are employed at the aerodrome or who require access to the aerodrome in the course of their employment; (e) establish and implement a process for responding to aerodrome-related security incidents and breaches in a coordinated manner that is intended to minimize their impact; (f) establish and implement a security awareness program that promotes a culture of security vigilance and awareness among the following persons: (i) persons who are employed at the aerodrome, (ii) crew members who are based at the aerodrome, and (iii) persons, other than crew members, who require access to the aerodrome in the course of their employment; (g) assess risk information and disseminate it within the operator’s organization for the purpose of informed decision-making about aviation security; (h) establish and implement a process for receiving, retaining, disclosing and disposing of sensitive information respecting aviation security in order to protect the information from unauthorized access; (i) identify sensitive information respecting aviation security and receive, retain, disclose and dispose of sensitive information respecting aviation security in a manner that protects the information from unauthorized access; (j) disclose sensitive information respecting aviation security to the following persons if they have been assigned aerodrome-related security roles and responsibilities and require the information to carry out those roles and responsibilities: (i) persons who are employed at the aerodrome, and (ii) persons who require access to the aerodrome in the course of their employment; (k) have a current scale map of the aerodrome that identifies all restricted areas, security barriers and restricted area access points; and (l) document how the operator achieves compliance with the aviation security provisions of the Act and the regulatory requirements that apply to the operator. Other program requirements (3) The following also form part of the airport security program: (a) the security official referred to in section 270; (b) the aerodrome security personnel training referred to in sections 271 and 272; (c) the security committee or other working group or forum referred to in section 350; (d) if applicable, the multi-agency advisory committee referred to in section 353; (e) if applicable, the airport security risk assessment referred to in section 354; (f) if applicable, the strategic airport security plan referred to in section 359; (g) the menu of additional safeguards referred to in section 365; (h) the emergency plan referred to in section 367; and (i) the security exercises referred to in sections 368 and 369. SOR/2012-48, ss. 22, 65(F); SOR/2014-153, s. 27