Division 3.2 The national quality control programme shall include the following elements:F1

organisational structure, responsibilities and resources;

job descriptions of, and qualifications required for auditors;

compliance monitoring activities, including scope of security audits, inspections, tests and, following an actual or potential breach of security, investigations, frequencies for security audits and inspections and also classification of compliance;

surveys, where there is cause to reassess security needs;

deficiency correction activities providing details concerning deficiency reporting, follow-up and correction in order to ensure compliance with aviation security requirements;

enforcement measures and, where appropriate, penalties, as specified in F2point 2.3 of this Annex;

reporting of compliance monitoring activities carried out including, where appropriate, information exchange between national bodies on compliance levels;

monitoring process of the airport, operator and entity internal quality control measures;

a process to record and analyse the results of the national quality control programme to identify trends and steer future policy development.