Division (c) The security management system of the aerodrome operator shall define the following elements:F1

the procedures relating to data security risk assessment and mitigation, security monitoring and improvement, security reviews and lesson dissemination;

the means designed to detect security breaches and to alert personnel with appropriate security warnings;

the means of controlling the effects of security breaches and of identifying recovery action and mitigation procedures to prevent reoccurrence.