# Commission Regulation (EU) No 139/2014 of 12 February 2014 laying down requirements and administrative procedures related to aerodromes pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council (Text with EEA relevance), Division (c): The security management system of the aerodrome operator shall define the following elements:


(1)the procedures relating to data security risk assessment and mitigation, security monitoring and improvement, security reviews and lesson dissemination;
(2)the means designed to detect security breaches and to alert personnel with appropriate security warnings;
(3)the means of controlling the effects of security breaches and of identifying recovery action and mitigation procedures to prevent reoccurrence.

---
Source: https://www.legislation.gov.uk/eur/2014/139/annex/III/division/4/division/2/division/c (the official version)
Page: https://openlegislation.uk/eu-regulation-2014-139/annex-III/division-4/division-2/division-c
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.