100
Insert your security classification of this document TSP – [Aircraft operator trading name] [optional: insert company logo] TRANSPORT SECURITY PROGRAM (TSP) FOR [INSERT AIRCRAFT OPERATOR LEGAL NAME] Trading or operating as: [Insert trading/operating names] Country of registration [Insert country of business registration] ACN/ARBN: [Insert Australian Company Number or Australian Registered Body Number if applicable] Company Registration Number in Country of Incorporation (for international applicants only): Insert your security classification of this document Under regulation 2.06 of the Aviation Transport Security Regulations 2005 it is an offence to disclose any information about the content of an aviation industry participant’s TSP without the consent of the participant.

Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

[optional: insert company logo]

TRANSPORT SECURITY PROGRAM (TSP) FOR

[INSERT AIRCRAFT OPERATOR LEGAL NAME]

Trading or operating as: [Insert trading/operating names]

Country of registration

[Insert country of business registration]

ACN/ARBN: [Insert Australian Company Number or Australian Registered Body Number if applicable]

Company Registration Number in Country of Incorporation (for international applicants only):

Your TSP must accurately reflect the specific security measures and procedures employed by your organisation. Before starting your TSP, please read the accompanying guidance for aircraft operators.

Department of Home Affairs – December 2019

Insert your security classification of this documentUnder regulation 2.06 of the Aviation Transport Security Regulations 2005 it is an offence to disclose any information about the content of an aviation industry participant’s TSP without the consent of the participant.

Page 2: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Contents

Document revision record........................................................................................................................1

Key references.........................................................................................................................................3

Definitions [s9; r1.03 and others]...................................................................................................................................Glossary of acronyms and terms.....................................................................................................................................

1 GENERAL OBLIGATIONS.............................................................................................................

1.1 Program scope and objectives [r2.27; r2.28]....................................................................................4

1.2 Local security risk context statement [r2.28]...................................................................................5

1.3 Quality control [r2.30].....................................................................................................................5

1.3.1 Audits [r2.30(1)(a)–(b) r2.30(2)]..........................................................................................................................1.3.2 TSP reviews [r2.30(1)(c)–(d)]...............................................................................................................................

1.4 Information security [r2.29(3)]........................................................................................................6

1.4.1 Protection of information about passenger and crew movements [r2.36]..........................................................1.4.2 Security of operational documents [r2.42]..........................................................................................................

1.5 Security of passwords, keys and key lists, electronic access cards and other security privileges [r2.32(1)(h)]....................................................................................................................................8

2 OPERATIONAL DETAILS............................................................................................................

2.1 Details of aircraft operator [r2.31].................................................................................................10

2.2 Contact details [r2.31(3)]...............................................................................................................10

2.3 Security management [r2.29]........................................................................................................10

2.3.1 Organisational structure and security management arrangements [r2.29(1)(a); r2.45]....................................2.3.2 Security contact officer (SCO) [r2.01; r2.02; r2.29(1)(b); r2.45].........................................................................2.3.3 Other staff with security-related roles [r2.29(1)(b); r2.29(1)(c)]........................................................................2.3.4 Contractors [r2.29(1)(b); r2.45].........................................................................................................................

2.4 Consultation and communication [s16(2)(g); r2.29(2)]...................................................................12

i

Page 3: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

2.4.1 Consultation to develop this TSP [s16(2)(g)]......................................................................................................2.4.2 Communication and consultation with third parties [r2.29(2)].........................................................................

3 PHYSICAL SECURITY MEASURES AND ACCESS CONTROLS [R2.31(1)(B); R2.32]....................................

3.1 Controlling access to facilities [r2.31(1)(c); r2.32(1)(a)]..................................................................14

3.2 Airside access controls [r2.32(1)(b)]...............................................................................................15

3.2.1 Access controls for airside security zones [r2.32(1)(c)]......................................................................................3.2.2 Access controls for the security restricted area at a designated airport [r2.32(1)(c); r2.35A(1 and 4); r3.16B and D]................................................................................................................................................................

3.3 Detecting and deterring unauthorised access to landside security zones [r2.32(1)(d)]....................18

3.4 Responding to unknown substances [r2.32(1)(f)]...........................................................................18

3.5 Unattended or suspect items [r2.32(1)(g)].....................................................................................19

3.5.1 Unattended or suspect vehicles, aircraft, baggage, cargo and things [r2.32(1)(g)]...........................................

3.6 Issuing of TACs and VICs for access control [r2.32(5)–(10)].............................................................19

3.6.1 Issuing of TACs [r2.32(5)]...................................................................................................................................3.6.2 Issuing of VICs [r2.32(6)]....................................................................................................................................3.6.3 Form of VICs [r2.32(7)–(9)]................................................................................................................................3.6.4 Return of VICs [r2.32(10)]..................................................................................................................................

4 PASSENGER CHECK-IN, BOARDING AND BAGGAGE RECONCILIATION PROCEDURES [R2.34; R2.38]............

4.1 Check-in and boarding procedures [r2.34].....................................................................................23

4.2 Passenger and checked baggage reconciliation [r2.38]...................................................................23

4.2.1 Procedures to unload checked baggage [r2.38(b); r4.21(6)]..............................................................................

5 SCREENING AND CLEARING [R2.35; R2.37; R2.35A]....................................................................

5.1 Screening of passengers and crew [r2.35]......................................................................................25

5.1.1 Controlled movement of passengers [r2.35(f)]..................................................................................................5.1.2 Mixing of screened and non-screened passengers from arriving / departing aircraft [r2.35(b)].......................

ii

Page 4: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

5.1.3 Screening and clearing of carry-on baggage [r2.35(c)]......................................................................................5.1.4 Screening and clearing of transit passengers [r2.35(d); r2.35(g)(v)]..................................................................5.1.5 Suspect passengers or carry-on baggage [r2.35(e)]...........................................................................................5.1.6 Diplomats and VIPs [r2.35(g)(i)]........................................................................................................................5.1.7 Government couriers and diplomatic bags [r2.35(g)(ii)]....................................................................................5.1.8 Passengers with reduced mobility or a medical condition [r2.35(g)(iii)]............................................................5.1.9 Persons in custody [r2.35(g)(iv)]........................................................................................................................

5.2 Sterile area breaches [r2.35(i)]......................................................................................................28

5.3 Checked baggage screening [r2.37]................................................................................................28

5.3.1 Protection of checked baggage against tampering [r2.37(c)]............................................................................5.3.2 Unattended and suspect baggage [r2.37(d)].....................................................................................................5.3.3 Response to the detection of explosives [r2.37(e)]...........................................................................................

5.4 Screening for the security restricted area at a designated airport [r2.35A(3); r3.16E].....................30

5.4.1 Measures and procedures for carrying out screening for the security restricted area [r2.35A(3)(a); r3.16E]..........................................................................................................................................................................5.4.2 Measures and procedures for responding to the detection of weapons [r2.35A(1)(c)].....................................

6 CONTROL OF FIREARMS, OTHER WEAPONS AND PROHIBITED ITEMS [R2.33].......................................

6.1 Measures to deter unauthorised possession of firearms, other weapons and prohibited items [r2.33(1)(a)]...................................................................................................................................31

6.2 Dealing with surrendered firearms, other weapons and prohibited items [r2.33(1)(b)]..................31

6.3 Procedures for the handling and movement of firearms and other weapons [r2.33(1)(c)]..............32

7 SECURITY OF AIRCRAFT [R2.39]................................................................................................

7.1 Unlawful carriage of a firearm, other weapon or a prohibited item [r2.39(1)(a)]............................33

7.2 Controlling access to aircraft [r2.32(1)(a); r2.32(1)(e); r2.32(1)(g); r2.39(1)(b)]...............................33

7.3 Flight deck access [r2.39(1)(c)].......................................................................................................34

7.4 Responding to unknown substances [2.39(1)(d)]...........................................................................35

iii

Page 5: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

7.5 Response to unattended and/or suspect items [r2.39(1)(e)]..........................................................35

7.6 Security of aircraft stores and cleaning operations [r2.39(1)(f); r2.40]............................................36

7.6.1 Cleaning operations and materials [r2.40].........................................................................................................

7.7 Handling suspect behaviour by a passenger [r2.39(1)(g)]...............................................................37

7.8 Carriage of persons in custody [r2.39(2)].......................................................................................37

7.9 Security of cargo [r2.41]................................................................................................................38

7.9.1 Diplomatic mail [r2.41(4)]..................................................................................................................................7.9.2 Suspect cargo [r2.39(e)].....................................................................................................................................7.9.3 High risk cargo [r2.41(5)]...................................................................................................................................

8 MEASURES AND PROCEDURES IN THE EVENT OF A HEIGHTENED SECURITY ALERT OR TO RESPOND TO AVIATION SECURITY INCIDENTS [S16(2)(D); R2.43]..............................................................

9 ANNEXES AND ACCOMPANYING DOCUMENTS...............................................................................

9.1 Annexes........................................................................................................................................42

9.2 Attachments..................................................................................................................................42

ANNEX A: SIGNED STATEMENT [S16(1); R2.05]...................................................................................

ANNEX B: LOCAL SECURITY RISK CONTEXT STATEMENT [R2.28]................................................................

ANNEX C: ORGANISATIONAL STRUCTURE AND SECURITY MANAGEMENT ARRANGEMENTS [R2.29(1)(A)]..........

ANNEX D: CONSULTATION UNDERTAKEN AS PART OF THE DEVELOPMENT OF THIS TSP [S16(2)(G)]..................

ANNEX E: OPERATIONAL FACILITIES LOCATED WITHIN SECURITY CONTROLLED AIRPORTS [R2.31(1)(B)]..............

ANNEX F: LOCATION AND ACCESS CONTROL MEASURES FOR AIRSIDE ACCESS POINTS [R2.32]..........................

ANNEX G: ACCESS CONTROL POINTS – LOCATIONS AND WHERE CHECKS ARE PERFORMED [R2.35A(1)(C)].........

ANNEX H: CLASSES OF PERSONS PERMITTED TO RE-ENTER THE SECURITY RESTRICTED AREA IN ACCORDANCE WITH R3.16B(5)(D,E)...................................................................................................

ANNEX I: SCREENING LOCATIONS [R2.35; R2.35A(3)(E); 2.37]..............................................................

ATTACHMENT 1: DESCRIPTION OF AIRCRAFT OPERATOR [R2.31(1A)].......................................................

ATTACHMENT 2: CONTACT DETAILS [R2.31(3)]....................................................................................

iv

Page 6: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

ATTACHMENT 3: TIMETABLE FOR IMPLEMENTATION OF SECURITY MEASURES AND/OR PROCEDURES [R2.32(2)]..................................................................................................................

ATTACHMENT 4: MEASURES AND PROCEDURES IN THE EVENT OF A HEIGHTENED SECURITY ALERT [R2.43]..........

ATTACHMENT 5: THE PERSON(S) RESPONSIBLE FOR MAINTAINING SECURITY OF THE SECURITY RESTRICTED AREA AND MANAGING SECURITY AT EACH ACCESS CONTROL POINT [R2.35A (2)]........................

FINAL CHECKS PRIOR TO SUBMISSION..................................................................................................

Disclaimer

The Australian Government has prepared this document with due care. However, it is made available on the understanding that the Australian Government is not providing legal advice and that users of this guidance exercise their own skill and care with respect to its use and seek independent advice if necessary. The Australian Government takes no responsibility for any errors, omissions or changes to the information that may occur and disclaims any responsibility and liability to any person, organisation or the environment in respect of anything done, or omitted to be done, in reliance upon information contained in this guidance.

The information contained is guidance material only. The information in no way overrides Commonwealth or State legislation. Aviation industry participants should refer to the Aviation Transport Security Act 2004 and the Aviation Transport Security Regulations 2005 before submitting transport security programs for approval.

v

Page 7: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Document revision record

Updates, revisions and alterations to this TSP are recorded below in the TSP Revision Record. Authority to make updates and alterations to this record is restricted to the Security Contact Officer (SCO) and [Insert title of any other authorised person if relevant] who is/are authorised by [Organisation’s name] to effect such changes.

Note: ‘Nature of revision’ will consist of a new, revised or alteration to the TSP. If the type of change are proposed alterations to the TSP, you must describe the proposed alterations and specifying the pages and section that have been affected. Changes to any information contained in an ‘Attachment’ (an accompanying document) does not need to be recorded on the TSP Revision Record.

Version number Nature of change Revision date Page(s)

affectedSections affected Actioned by (name, title) Action date

1.0 New submission/revised submission dd/mm/yy All All Name, title Approved dd/mm/yy

1

Page 8: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

2

Page 9: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Key references

All section (s) references in this TSP are to sections of the Aviation Transport Security Act 2004 (the Act) and all references to regulations (r) are to the Aviation Transport Security Regulations 2005 (the Regulations).

Definitions [s9; r1.03 and others]Definitions are provided in the Act and the Regulations. Key definitions are in s9 of the Act and r1.03 of the Regulations.

The Act and Regulations are available at https://www.legislation.gov.au/.

Glossary of acronyms and terms The following list includes definitive acronyms such as ASIC, AMS and AIP as well as other terms used within this TSP.

Term Meaning

Organisation’s name Your business’ legal name

Act, the Aviation Transport Security Act 2004

AIP Aviation industry participant (as defined in the Act)

AMS Aviation and Maritime Security Division

ASIC Aviation security identification card

ASN Aviation Screening Notice

CCD Compliance control direction

CCTV Closed-circuit television

Department, the Department of Home Affairs

Designated airport Listed airports (as defined in the Regulations)

PIC Pilot in Command

PICC Person in Custody/Person in corrective custody

Regulation(s), the Aviation Transport Security Regulations 2005

RPT Regular public transport operation (as defined in the Regulations)

Secretary, the The Secretary of the Department

SCO Security Contact Officer (as defined in the Regulations)

SRA Security restricted area (as referred to in the Regulations)

SSD Special security direction (as defined in the Act)

TAC Temporary aircrew card

TSP Transport security program (as defined in the Act and Regulations)

VIC Visitor identification card

3

Page 10: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

1 General obligations

This TSP has been made in accordance with the obligations of an operator of a prescribed air service as set out in s12(1)(b).

A signed statement, to the effect that [Organisation’s name] believes this TSP gives effect to its obligations set out in s 16(1) of the Act, is attached at Annex A.

1.1 Program scope and objectives [r2.27; r2.28]

This TSP covers all aviation security-related activities that are relevant to the operation of prescribed air services by [Organisation’s name], including significant facilities on security controlled airports in Australia. It sets out the measures employed to protect and safeguard against unlawful interference to people, aircraft, aircraft infrastructure, cargo, stores and equipment. This includes measures and procedures to:

a) manage security across [Organisation’s name]’s operations, including significant facilities on security controlled airports in Australia, where relevant to the operation of prescribed air services under the Act and Regulations; and

b) safeguard against acts of unlawful interference with aviation occurring in relation to prescribed air services operated by [Organisation’s name].

1.2 Local security risk context statement [r2.28]

A statement outlining the local security risk context covering your flight operations in Australia is provided at Annex B. The statement has been developed in the context of:

Australia’s current national terrorism threat level;

the location of operations;

seasonal and operational factors;

general threats and generic security risk events to people, assets, infrastructure and operations; and

an outline of the people, assets, infrastructure and operations that need to be protected.

1.3 Quality control [r2.30]

The following quality control procedures are employed by [Organisation’s name] in relation to aviation security in Australia:

1.3.1 Audits [r2.30(1)(a)–(b) r2.30(2)][Organisation’s name] will conduct audits to determine if the security measures and procedures set out in this TSP as required under the Act and Regulations, have been implemented and complied with.

Audits will be scheduled as follows:

[insert details of how audits will be scheduled].

4

Page 11: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Audits will be conducted as follows:Set out details of the procedures for conducting an audit at your organisation. For example:

Audits will be systematic and will assess the implementation of this TSP and all security measures detailed within it. They will include consideration of, where required, consultation on the following results from any previous audits and TSP reviews.

Particular consideration will also be given to whether the security measures and procedures applied are appropriate and proportionate in relation to the local security risk context statement.

Consideration may also be given to:

[please specify as appropriate for your organisation – for example, options for continuous improvement in regard to security measures and procedures].

Findings and recommendations will be presented to [full title of the vetting authority within your organisation, such as the CEO, or the Operations Manager] and to [full title of any security committee or other body which will view the reports] for consideration, and implemented as appropriate.

1.3.2 TSP reviews [r2.30(1)(c)–(d)][Organisation’s name] will conduct a TSP review to determine if the security measures and procedures set out in this TSP as required under the Act and Regulations, are effective and adequate.

A review of the TSP will be conducted if:

there is a change in the security threat level for [Organisation’s name], or that might affect [Organisation’s name]’s operations;

an aviation security incident occurs;

there is a change in ownership or organisational structure;

there are any changes to the local security risk context;

changes are identified from the results of drills and/or exercises conducted;

any aviation security incidents are reported by [Organisation’s name];

there are any changes in the regulatory requirements; and

[any other – please specify]

The TSP must set out the procedures for reviewing the TSP, including a process for consultation during the review. For example:

All reviews will assess the security measures and procedures to consider if they are effective and adequate to meet the requirements of the local security risk context statement set out in Annex B and the requirements of the Regulations. They will include consideration of and, where required, consultation on the following:

results from any previous audits and reviews;

5

Page 12: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

any change to Security Updates issued by the Department;

any changes to the local security risk context;

any changes in TSP coverage;

6

Page 13: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

any results from drills and/or exercises conducted;

any aviation security incidents reported by [Organisation’s name];

any changes in the regulatory requirements; and

[any other – please specify]

Reviews will involve input from a variety of sources, including consultation with all parties affected by this TSP. The process for consultation during the review will consist as follows:

[insert process (email communication, meetings, updates) for consultation with relevant stakeholders]

Findings and recommendations will be presented to [full title of the vetting authority within your organisation, such as the CEO, the Board or the Security Manager] and to [full title of any security committee or other body which will view the reports] for consideration, and implemented as appropriate. This may require an amendment to, or revision of, this TSP.

Records from audits will be held for seven years. Records from reviews will be held for three years.

1.4 Information security [r2.29(3)]

The following security information requires protection against unauthorised access, amendment and disclosure:

this TSP;

any attachments or annexes to this TSP;

security compliance information;

results, records and reports of any audit or review carried out in accordance with the TSP, the Act or Regulations; and

[any other – please specify]

Access to these documents is restricted to persons who have a ‘need to know’ and permission from [specify position/role].

[The SCO] is responsible for:

the protection of the TSP;

determining who has access to the TSP;

7

Page 14: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

the approval of electronic access to the TSP;

the distribution, return and destruction of all TSP copies;

the recording of the movement of all TSP copies;

determining who is authorised to amend the TSP; and

managing access, amendment and disclosure of other security information within [Organisation’s name].

Security information will be protected against unauthorised access, amendment and disclosure through the following measures and procedures:

Insert your measures and procedures below. For example:

physical copies of security information are securely stored in [type of container/location] at [insert location]. Only [specify] is authorised to remove them from the container, and a register of all requests and approvals is maintained;

electronic copies are stored on a secure computer system with password-protected access restricted to authorised personnel only; and

access to security information is controlled and managed in accordance with the procedures below for ensuring the security of passwords and access devices.

1.4.1 Protection of information about passenger and crew movements [r2.36]The following measures are used to protect information about passenger and crew movements:

Insert your measures and procedures. For example:

all passenger information is confidential and is not provided to the general public;

all crew information is confidential and is only available to authorised personnel from our operational/HR area;

electronic passenger and air crew information is secured by [specify method e.g. internal firewalls, profile access control, password protection on the computer system];

any hard copy information is kept secure by [specify method];

crew and passenger information will only be disclosed to personnel within our organisation who have an operational need to know; or to authorised external parties with an operational need to access the information.

1.4.2 Security of operational documents [r2.42][Organisation’s name] has measures and procedures in place to control access to the following operational documents:

baggage tags;

8

Page 15: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

boarding passes;

tickets;

airway bills;

load manifests;

commercial invoices; and

[specify as relevant to your organisation]

[Organisation’s name] is not responsible for controlling access to electronic or physical operational documents once they have been issued to a passenger or their representative.

The following measures and procedures are applied to control access to physical operational documents:

Insert your measures and procedures. For example:

Physical documents, including boarding cards, coded bag tags or other documents used by [Organisation’s name] or their agents to gain access to an aircraft, are kept in a secure container at all times when not in use. They are not to be left unattended at any time while in the custody and control of [Organisation’s name]’s staff, contractors or agent/s.

The following measures and procedures are used to control access to electronic operational documents:

Insert your measures and procedures. For example:

Electronic operational documents are stored on a secure computer system accessible by authorised personnel only.

1.5 Security of passwords, keys and key lists, electronic access cards and other security privileges [r2.32(1)(h)]

[Organisation’s name] does not have any operational facilities located within a security-controlled airport.

OR

Set out how and where passwords, security codes or access devices are used as a security measure within each of your facilities.

The management and control of all passwords, access codes and access devices [specify] is the responsibility of [specify].

A register of all security passwords / access codes and devices issued is kept by the [specify]. This record is secured [specify the receptacle, location, and the method to secure the record].

Security passwords / access codes are changed:

Insert your measures and procedures. For example:

every [specify timeframe];

when any staff with security access leave [Organisation’s name]; and

when a security incident involving unauthorised access to security areas and security zones has been determined to have compromised access control security.

Audits of all access devices are conducted [specify how often and by whom] to ensure that:

9

Page 16: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Insert your measures and procedures. For example:

nominated staff have their correct passwords and access devices;

staff with access to security information or zones and areas still require it;

any loss of an access device is reported, recorded and investigated; and

access devices that are held in storage have been issued and returned correctly.

10

Page 17: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

2 Operational details

2.1 Details of aircraft operator [r2.31]

[Organisation’s name] operates as [aircraft operator trading name].

Further details regarding [Organisation’s name]’s operations are set out below and at Attachment 1.

2.2 Contact details [r2.31(3)]

The contact details for [Organisation’s name] are set out at Attachment 2.

2.3 Security management [r2.29]

2.3.1 Organisational structure and security management arrangements [r2.29(1)(a); r2.45]

[Organisation’s name]’s organisational structure, and the arrangements for managing security at facilities in Australia covered by this TSP, are detailed in Annex C.

[Organisation’s name] will provide security awareness training for the relevant staff to enable them to properly perform the security-related aspects of their positions. The security awareness training contains:

Specify as relevant to your organisation the details of security awareness training that satisfies the requirements.

2.3.2 Security contact officer (SCO) [r2.01; r2.02; r2.29(1)(b); r2.45]The SCO is responsible for facilitating the development, implementation, review and maintenance of this TSP. The SCO is also responsible for the maintenance of the administration of security measures and procedures contained in this TSP.

The SCO is an employee of the airport operator.

The SCO is authorised to liaise with other aviation industry participants in relation to aviation security matters as required.

Set out any additional responsibilities for the SCO in your organisation. For example:

Other responsibilities include:

liaising with the Department in relation to compliance with all aviation security regulatory requirements, changes in the Department’s threat assessment, and any SSDs or CCDs;

ensuring employees, contractors or other persons with aviation security related roles have sufficient knowledge, skills and training to perform their duties;

ensuring staff are briefed on all security-related matters in relation to [Organisation’s name]’s facilities;

ensuring the appropriate protection of all security information against unauthorised access, amendment and disclosure; ensuring the integrity of all preventive security measures and arranging maintenance as required;

overseeing the serviceability of all security equipment;11

Page 18: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

advising other aircraft operators or the relevant airport authorities if unattended aircraft are observed without the required security measures in place;

reporting and monitoring aviation security incidents, including threats and breaches; and

attending relevant airport security committee meetings.

The knowledge, skills, training, qualifications or other requirements required to fulfil the security-related aspects of this position are:

:

Specify as relevant to your organisation, the details of the knowledge, skills, training and qualifications required of the position.

2.3.3 Other staff with security-related roles [r2.29(1)(b); r2.29(1)(c)]The roles and responsibilities of security officers and other persons assigned particular security duties and responsibilities are as follows:

Insert as relevant to your organisation. For example:

Flight crew members

Flight crew members’ duties and responsibilities require them to:

comply with the procedures set out in this TSP;

cooperate with relevant authorities during operations within the scope of this TSP;

familiarise themselves with the emergency procedures set out in this TSP;

identify and respond to suspicious behaviour or suspicious items on board an aircraft in accordance with the procedures set out in this TSP; and

report any aviation security incident or security breach to [specify].

The knowledge, skills, training, qualifications or other requirements for the security-related aspects of these positions are:

Specify as relevant to your organisation, including details of training / qualifications that satisfy the requirements.

[Security Manager / other position with security responsibilities]

The Security Manager’s duties and responsibilities require them to:

perform and report on daily inspections of the aircraft; and

[report/investigate etc.] security breaches, threats or aviation incident reports for [specify].

They also assist [specify] in:

the development, implementation, review and maintenance of [Organisation’s name] TSP;

liaison with other aviation industry participants in relation to aviation security matters;

12

Page 19: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

coordination with other aviation industry participants and stakeholders to ensure all aspects of aircraft operations are covered by the TSP; and

coordination with the Department to ensure regulatory compliance.

The knowledge, skills, training, qualifications or other requirements for the security-related aspects of this position are:

Specify as relevant to your organisation, including details of training / qualifications that satisfy the requirements.

Station Manager (for foreign aircraft operators providing international RPT into Australia)

The Station Manager’s duties and responsibilities require them to:

[report/investigate etc.] security breaches, threats or aviation incident reports for [specify].

[specify as relevant to your organisation]

They also assist [specify] in:

the development, implementation, review and maintenance of [Organisation’s name] TSP;

liaison with the airport operator in relation to aviation security matters;

coordination with other aviation industry participants and stakeholders to ensure all aspects of aircraft operations are covered by the TSP; and

coordination with the Department to ensure regulatory compliance.

The knowledge, skills, training, qualifications or other requirements for the security-related aspects of these positions are:

Specify as relevant to your organisation, including details of training / qualifications that satisfy the requirements.

2.3.4 Contractors [r2.29(1)(b); r2.45]Select from the options below as appropriate for your operations.

[Organisation’s name] does not have any arrangements or contracts with any individuals or businesses to undertake security roles at [Organisation’s name]’s facilities or in relation to [Organisation’s name]’s prescribed air services in Australia.

OR

[Organisation’s name] has a contract with [specify] to undertake the following security relevant duties and responsibilities:

Insert as relevant to your organisation. For example:

open and inspect the facility at [specify] before daily commencement of operations;

13

Page 20: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

secure the facility at [specify] daily after the conclusion of operations to ensure that all persons have vacated and there are no unattended items;

lock and alarm the facility building(s) at [specify];

monitor the alarms and respond to any activation of the alarm system;

perform regular/irregular patrols within and around the facilities at [specify];

perform regular/irregular patrols and checks on aircraft security;

liaise with airport operators’ representatives;

ensure crew members receive pertinent information in relation to this TSP; and

ensure security of cargo and travel documents and passenger and crew information.

The knowledge, skills, training, qualifications or other requirements for the security-related aspects of these positions are:

Specify as relevant to your organisation, including details of training / qualifications that satisfy the requirements.

2.4 Consultation and communication [s16(2)(g); r2.29(2)]

2.4.1 Consultation to develop this TSP [s16(2)(g)]An outline of the consultation undertaken, in preparing this TSP, with other AIPs operating under or covered by this TSP is set out in Annex D.

2.4.2 Communication and consultation with third parties [r2.29(2)]The [specify position/role] is responsible for ensuring ongoing and effective communication between [Organisation’s name] and the operator of any security controlled airport at which [Organisation’s name] has a facility. The mechanisms used for this are:

Insert as relevant to your organisation. For example:

attendance at [Airport trading name]’s Airport Security Committee meetings;

monthly meetings with [Airport trading name]’s SCO; and

meetings with ground handlers, catering and other contracted parties.

If there are different arrangements for different facilities/at different security controlled airports, then they should be set out separately.

[Specify position/role] is responsible for ensuring ongoing and effective communication between [Organisation’s name] and relevant third parties, such as police, service providers (for example ground handlers and catering contractors), tenants or lessees. The mechanisms used for this are:

Insert as relevant to your organisation. For example:

Monthly security meetings are held with all relevant service providers.

14

Page 21: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Engagement with the relevant law enforcement and other emergency service providers at the security controlled airports where [Organisation’s name] has facilities is done via the relevant Airport Security Committee meetings.

Again, if there are different arrangements for different facilities/at different security controlled airports, then they should be set out separately.

[Specify position/role] will ensure up to date contact details for all relevant third parties are maintained and that service providers/contractors and other relevant third parties are aware of and can take reasonable steps to comply with this TSP.

15

Page 22: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

3 Physical security measures and access controls [r2.31(1)(b); r2.32]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not operate any facilities in Australia. [Organisation’s name] operates out of [specify]’s facilities while operating in Australia/at [Airport trading name/s].

Access to airside areas at Australian security controlled airports is controlled by the relevant airport operator. When operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at the relevant airport at all times.

Where [specify]’s facilities have direct access to the airside area at a security controlled airport/[Airport trading name/s], [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at that facility.

Ensure the above reflects your operational arrangements. If you do not have any facilities in Australia, delete sections 3.2 and 3.3 below and Annexes E and F. OR

[Organisation’s name] does not have any operational facilities located within a security-controlled airport.

Access to airside and landside areas and security zones at Australian security controlled airports is controlled by the relevant airport operator. While operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at the relevant airport and set out in their approved TSP at all times. If this applies to your organisation, delete sections 3.2 and 3.3 below and Annexes E and F.

OR

The location of each of [Organisation’s name]’s operational facilities located within a security controlled airport in Australia is set out at Annex E.

3.1 Controlling access to facilities [r2.31(1)(c); r2.32(1)(a)]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not operate any facilities in Australia. [Organisation’s name] operates out of [specify]’s facilities while operating in Australia/at [Airport trading name/s]. [Organisation’s name]’s staff, agents and contractors comply with the access controls set out in [specify]’s TSP.

While operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at the relevant airport and set out in their approved TSP at all times. ORDetail how access to facilities relevant to the operation of prescribed air services is controlled, including outside operating hours, and how those access controls are managed for each of your facilities. For example:

[Organisation’s name] applies the following measures and procedures to control access to its facilities at [specify location]. A timetable for implementation of any measures and procedures which have not yet been implemented is at Attachment 4. Delete this last sentence if all measures and procedures have been implemented.

Access to the facilities beyond the public reception area is by electronic access card only. Access cards are issued to staff members only. Visitors must sign in at the reception desk and be escorted by a staff member at all times.

16

Page 23: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Outside normal operating hours, the external access door to the reception area is locked and alarmed. Out-of-hours access is granted to staff members on a case-by-case basis, and must be supported by an operational need.

Please ensure the above accurately reflects the circumstances at your facilities. If the access controls differ at each facility, then you will need to set out the controls for each facility separately

3.2 Airside access controls [r2.32(1)(b)]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not have any facilities at a security controlled airport with airside access.

Access to airside areas at Australian security controlled airports is controlled by the relevant airport operator. Any staff, agents or contractors working at [Organisation’s name]’s facilities at a security controlled airport will comply with the measures and procedures in place at the relevant airport at all times.

OR

[Organisation’s name] has a facility with direct access to the airside area at [specify]. Access to the airside area is limited to:

a passenger who is supervised by an employee / agent of [Organisation’s name];

a person who holds and displays a current ASIC and has a lawful reason to be airside;

a person who holds and displays a current VIC or TAC and is supervised by a person who holds a current ASIC and is authorised to enter airside;

an exempt person such as a law enforcement officer or a member of the Australian Defence Force who is responding to an event or threat of unlawful interference with aviation;

an employee, contractor or volunteer of an ambulance, rescue or fire service who is responding to an emergency in Australia or overseas; and

a vehicle driven by a person who is authorised to enter the area and who:

holds a valid ASIC or holds a valid VIC or TAC and is supervised by someone authorised to enter the area who holds a valid ASIC; or

is an exempt person under the Act and Regulations.

Insert description of how your organisation controls access and deters and detects unauthorised access. For example:

Pedestrian and vehicle access to airside areas is only through manned/security controlled [specify] gates and access points.

The [specify] authorises access through these gates and maintains a register of persons and vehicles authorised to access airside areas through these gates.

Ensure the above reflects your facilities. If this applies to more than one facility and/or more than one airport, and different measures and procedures are applied in each instance, please set them out separately. Annex F can be used for this purpose(see sentence below). If you choose to set this information out in Annex F, then insert the below into your TSP.

The locations and the corresponding access control measure in place for each airside access point from [Organisation’s name]’s facilities at [Airport trading name/s] are located at Annex F.

17

Page 24: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

3.2.1 Access controls for airside security zones [r2.32(1)(c)]Select from the options below as appropriate for your operations.

[Organisation’s name] does not have any facilities on a security controlled airport with access to an airside security zone.

Access to airside security zones at Australian security controlled airports is controlled by the relevant airport operator. Any staff, agents or contractors working at [Organisation’s name]’s facilities at a security controlled airport will comply with the measures and procedures in place at the relevant airport at all times. If this applies to your organisation, please remove section 3.2.2.

OR

[Organisation’s name] operates out of [specify]’s facilities while operating in Australia/at [Airport trading name/s].

Access to airside security zones at Australian security controlled airports is controlled by the relevant airport operator. When operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at the relevant airport at all times.

Where [specify]’s facilities have direct access to an airside security zone at an Australian security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at that facility. If this applies to your organisation, please remove section 3.2.2.

OR

[Organisation’s name] has a facility with direct access to the [specify airside security zone] at [Airport trading name/s]. Access to this zone/these zones from [Organisation’s name]’s facility is limited to:

a person who holds and displays a current red ASIC and has a lawful reason to be enter and remain in an airside security zone;

a person who holds and displays a current VIC or TAC and is supervised by a person who holds a current red ASIC and is authorised to enter the airside security zone;

an exempt person such as a law enforcement officer or a member of the Australian Defence Force who is responding to an event or threat of unlawful interference with aviation;

an employee, contractor or volunteer of an ambulance, rescue or fire service who is responding to an emergency in Australia or overseas; or

a vehicle driven by a person who is authorised to enter the area and who:

holds a valid red ASIC or holds a valid VIC or TAC and is supervised by someone authorised to enter the area who holds a valid red ASIC; or

is an exempt person under the Act and Regulations.

Insert description of how your organisation controls access and deters and detects unauthorised access. For example:

Access doors are equipped with an alarm device that will indicate both audibly and visually when the door is being forced, held open, left open, damaged or is otherwise insecure.

Immediate response to door alarms will be by [specify] who will determine why the alarm activated and will then resolve immediate issues such as securing the entryway and dealing with unauthorised access.

18

Page 25: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Ensure the above reflects your facilities. If this applies to more than one facility and/or more than one airport, and different measures and procedures are applied in each instance, please set them out separately. Annex F can be used for this purpose (see sentence below). If you choose to set this information out in Annex F, then include the sentence below in your TSP, otherwise delete it and Annex F.

The locations and the corresponding access control measure/s in place for each access point from [Organisation’s name]’s facilities into an airside security zone at [Airport trading name/s], including those that provide access into a security restricted areaarea, are located at Annex F.

3.2.2 Access controls for the security restricted area at a designated airport [r2.32(1)(c); r2.35A(1 and 4); r3.16B and D]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not control an access control point to a security restricted area at a designated airport.

OR

[Organisation’s name] controls anaccess point to an security restricted area area at [Airport trading name/s]. Locations of access control points controlled by [Organisation’s name] or into parts of the SRA controlled by [Organisation’s name] are set out at Annex G.

Unless exempt, all persons entering the security restricted area through an access control point controlled by [Organisation’s name] will be subjected to the following measures to confirm their identity and that they are authorised to enter (including holding a valid ASIC, VIC, TAC and are escorted if required):

Insert your measures and procedures. For example:

A face-to-ASIC check conducted by a licensed security contractor, check of VICs or TACs and check of government issued photo identification (e.g. drivers license) for persons on a VIC or TAC that does not incorporate a photograph.; or

An electronic access control system that uses biometrics [please specify] to confirm the identity of persons entering the security restricted area; and

[any other; please specify].

Persons holding a VIC, TAC or valid grey ASIC will be escorted by a person holding a valid red ASIC at all times while in the security restricted area.

Unless exempt, all vehicles accessing the security restricted area must be subject to the following checks to confirm they are authorised to enter :

Insert your measures and procedures. For example:

checking they are displaying a valid Authority for Use Airside; and/or

confirming the vehicle is on a list of scheduled arrivals; and/or

[any other; please specify].

19

Page 26: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Where access controls are performed at a place other than an access control point (on the boundary of the SRA) the location of those places are specified at Annex G. [Organisation’s name] has the following controls in place to ensure that persons passing through the access control point must also pass through the point where checks are conducted.

Insert your measures and procedures. For example:

The area between the access check point and the access control point are physically separated by barriers; or

The area between the access check point is continually monitored by guards operating the access checkpoint; or

[any other, please specify].

The classes of persons permitted to re-enter the security restricted area other than through an access control point, in accordance with sub-regulation 3.16B(5) are specified at Annex H.

[Organisation’s name] has the following procedures in place to ensure that these persons and any other persons authorised to enter the SRA other than through an access control point do not bring any unauthorised weapons into the part of the security restricted area that they control:

Insert your measures and procedures. For example:

CCTV monitoring of persons while outside the security restricted area; and/or

monitoring of persons by airport security guards located at [insert location]; and/or

specified persons are limited to a certain area outside of the SRA that is subject to auditable electronic access control systems; and/or

[any other, please specify].

3.3 Detecting and deterring unauthorised access to landside security zones [r2.32(1)(d)]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not have any facilities at a security controlled airport in Australia.

Access to landside security zones at Australian security controlled airports is controlled by the relevant airport operator. When operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures in place at the relevant airport at all times.

OR

[Organisation’s name] does not have any facilities with access to a landside security zone at a security controlled airport.

20

Page 27: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Access to landside security zones at Australian security controlled airports is controlled by the relevant airport operator. Any staff, agents or contractors working at [Organisation’s name]’s facilities at a security controlled airport will comply with the measures and procedures in place at the relevant airport at all times.

OR

[Organisation’s name] has a facility with direct access to [specify the landside security zone] at [Airport trading name], and is responsible for detecting and deterring unauthorised access from its facility to that zone. The measures and procedures applied to do this are as follows:

Insert your measures and procedures below. For example:

all entrances to [specify zone] are kept locked;

only [specify] hold access keys to the facilities;

CCTV has been installed to monitor activity at or around the zone;

the airport operator conducts daily patrols of the landside area [specify frequency], including inspections of the landside security zone; and

signs consistent with the Regulations have been placed along the boundary to ensure the public and [Organisation’s name] staff are informed of the conditions of entry into the landside zone.

Ensure the above reflects your facilities. If this applies to more than one facility and/or more than one airport, and different measures and procedures are applied in each instance, please set them out separately.

3.4 Responding to unknown substances [r2.32(1)(f)]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not operate any facilities in Australia. [Organisation’s name] operates out of [specify]’s facilities while operating in Australia/at [Airport trading name/s]. [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures set out in [specify]’s TSP.

When operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures set out in the airport operator’s TSP at all times.

OR

The following measures and procedures apply if an unidentified substance is detected within [Organisation’s name] facilities:

Insert your measures and procedures. For example:

any suspicious unidentified substances will be left untouched and the area will be cordoned off as soon as possible;

the incident must be reported to [specify] immediately; and

the [position identified above] will then contact [specify] to seek further information and assistance.

If the substance is detected at a facility within a security controlled airport, the incident must also be reported to the security contact officer at the airport.

21

Page 28: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Ensure the above reflects your facilities. If different measures and procedures are applied at different facilities, or in different circumstances, please set them out separately.

3.5 Unattended or suspect items [r2.32(1)(g)]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not operate any facilities in Australia. [Organisation’s name] operates out of [specify]’s facilities while operating in Australia/at [Airport trading name/s]. [Organisation’s name]’s staff, agents and contractors comply with the measures and procedures set out in [specify]’s TSP.

When operating at a security controlled airport, [Organisation’s name]’s staff, agents and contractors will comply with the measures and procedures set out in the airport operator’s TSP at all times. If this applies to your organisation, please remove section 3.5.1.

OR

3.5.1 Unattended or suspect vehicles, aircraft, baggage, cargo and things [r2.32(1)(g)]If any unattended or suspect vehicles, aircraft, baggage, cargo and things are detected within [Organisation’s name] facilities, the following measures and procedures will be employed:

Insert your measures and procedures. For example:

If staff determine [specify thing] is unattended or suspect, the SCO and the relevant law enforcement agency will be immediately informed.

Others, please specify.

3.6 Issuing of TACs and VICs for access control [r2.32(5)–(10)]

3.6.1 Issuing of TACs [r2.32(5)]Select from the options below as appropriate for your operations.

[Organisation’s name] does not issue, or intend to issue, TACs.

OR

Set out the process you use to issue TACs in accordance with subdivision 6.5.2A of the Regulations, and to maintain a TAC register in accordance with r6.25B.

3.6.2 Issuing of VICs [r2.32(6)]Select from the options below as appropriate for your operations.

[Organisation’s name] has not been approved by the Secretary to issue VICs. If this applies to your organisation, delete the rest of this section and sections 3.6.3 and below.

OR

[Organisation’s name] is approved by the Secretary to issue VICs. If this applies to your organisation, and you do not authorises agents to issue VICs on your behalf, delete the rest of this section.

OR

[Organisation’s name] is approved by the Secretary to issue VICs, and authorises agents to issue VICs on [Organisation’s name]’s behalf. If this applies to you, you must set out your procedures for authorising and auditing authorised agents to act on your behalf. For example:

Authorised agents must demonstrate the resources and intent to:

maintain facilities at [specify];

22

Page 29: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

secure the VIC register and records;

secure unissued and returned VICs;

maintain the necessary records regarding VICs and provide [Organisation’s name] and the Department access to those records for any operational need or for audits;

ensure their staff regularly receive training in the issue and use of VICs; and

ensure compliance with [Organisation’s name]’s access control requirements.

[Organisation’s name] conducts audits of authorised agents to monitor the procedures to issue VICs on behalf of [Organisation’s name]. The audits will be conducted at least [specify frequency] to ensure that issuing practices for VICs are in accordance with the requirements of the Regulations, and conform to [Organisation’s name]’s requirements. They include a full audit of all VIC records required under the Regulations, and an audit of staff training.

23

Page 30: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

3.6.3 Form of VICs [r2.32(7)–(9)]Select from the options below as appropriate for your operations.

The form of VIC issued by [Organisation’s name] and/or [Organisation’s name]’s authorised agent/s is the same as the form set out in regulation 6.39 of the Regulations.

OR

An image of the form of VIC issued by [Organisation’s name] and/or [Organisation’s name]’s authorised agent/s is as follows:

Note: The image below is copied from r6.39. You need to insert an image of the VIC issued by your organisation. If you have authorised an agent who issues a different form of VIC to the one you issue (and it is not in the same form as the one set out in r6.39), then you must also include an image of the VIC they issue (see below).

24

Page 31: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Include the below if an authorised agent issues VICs in a form that differs to that used by your organisation, and is not the same as the one set out in r6.39 (delete if not relevant):

An image of the form of VIC used by [Organisation’s name]’s authorised agent/s is as follows: Note: The image below is copied from r6.39. You need to insert the image used by your authorised agent/s.

3.6.4 Return of VICs [r2.32(10)]All VICs issued by or on behalf of [Organisation’s name] need not be returned to the issuer within seven (7) days after the VIC has expired, under the following circumstances:

the card has been cancelled, damaged, altered or defaced; or

the holder no longer needs to enter the relevant secure area.

A VIC does not need to be returned to the issuer if the card has expired and has been created using [insert the technology used to create the card (e.g. bleed-through) and how it renders the card unusable after a period of time].

25

Page 32: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

4 Passenger check-in, boarding and baggage reconciliation procedures [r2.34; r2.38]

[Organisation’s name] does not carry passengers.If this applies to your organisation, do not include the rest of section 4 in your TSP. If your organisation carries passengers you will need to examine section 4 in detail. You need to delete those parts below that are not relevant to your organisation and detail those measures and procedures specific to your operation.

OR

[Organisation’s name] carries passengers.

4.1 Check-in and boarding procedures [r2.34]

[Organisation’s name]’s procedures for passenger check-in for international and domestic air services are as follows: Insert your measures and procedures. For example:

passengers must check in individually; there is no third party or group check-in;

[Organisation’s name] or their authorised agent will ensure all passengers possess valid documentation for carriage at the time of check-in before a boarding pass will be issued;

baggage will only be accepted at check-in counters;

baggage will only be accepted from ticketed passengers with valid travel documentation;

Baggage will only be accepted for carriage to the same destination as the passenger; and

once baggage is accepted for carriage, it will remain inaccessible from the passenger until the completion of the flight.

If different measures and procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services) then set them out separately.

[Organisation’s name]’s procedures for passenger boarding for international and domestic air services are as follows:

Insert as relevant to your organisation. If different procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services) then set them out separately.

Any anomalies in passenger reconciliation that may arise during check-in or boarding are dealt with in accordance with the following measures and procedures:

Insert your measures and procedures. For example:

[Organisation’s name] will ensure that all tickets and other travel documents produced by a passenger or group representative are genuine and valid. Where there is any doubt as to the validity of the documents, the check-in process will cease until approval is given by [specify].

A manual reconciliation will be conducted if the computer and/or card reader is out of service.

26

Page 33: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Boarding passes will be counted and if there is any anomaly, boarding passes will be matched to the passenger manifest.

If different measures and procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services) then set them out separately.

4.2 Passenger and checked baggage reconciliation [r2.38]

[Organisation’s name] uses the following measures and procedures to reconcile passengers and checked baggage:

Insert your measures and procedures. For example:

A record will be created for each item of checked baggage at the point at which it is checked-in by a ticked passenger with valid travel documentation.

The record will:

Identify the passenger that checked the item in;

record the number of the flight for which the passenger checked in; and

record the destination the passenger is travelling to.

If the item does not travel with the passenger, the following information will also be included in the record:

The number of the flight which the passenger travels on; and

the number of the flight the item travels on.

The record will be retained for 48 hours after the arrival of the baggage at the destination airport.

If different measures and procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services, or to address the circumstances set out in r4.21(6)) then set them out separately.

4.2.1 Procedures to unload checked baggage [r2.38(b); r4.21(6)]

[Organisation’s name] applies the following procedures to ensure that the baggage of any passenger who fails to board a flight – in circumstances other than those set out in regulation 4.21(6) – is unloaded before the aircraft departs:

Insert your measures and procedures. If different measures and procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services, or in the various circumstances set out in r4.21(6)) then set them out separately.

27

Page 34: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

5 Screening and clearing [r2.35; r2.37; r2.35A]

Select from the options below as appropriate for your operations.

[Organisation’s name] is not a screening authority or screening provider. [Organisation’s name] is not responsible for conducting any passenger, crew, checked baggage or security restricted area screening.

If this applies to your organisation, do not include the rest of section 5 or Annex I in your TSP. If your organisation carries out any particular type of screening you will need to examine section 5 in detail. You need to delete those parts below that are not relevant to your organisation and detail those measures and procedures specific to your operation.

OR

All screening and clearing carried out by [Organisation’s name] is conducted in accordance with the Act and Regulations, the ASN and any other notices issued by the Department from time to time.

All screening and clearing of persons and baggage by [Organisation’s name]’s staff, contractors or agents is carried out in accordance with the following:

all screening officers on duty must be trained and qualified in accordance with the requirements set out under the Act and Regulations;

all screening officers on duty must hold and properly display a valid ASIC; and

all screening officers on duty must wear a distinctive and recognisable uniform.

Insert any additional measures and procedures as relevant.

[Specify] is responsible for ensuring that all screening officers on duty meet the training and certification requirements for their relevant aviation security role, and comply with the approved Departmental and organisational procedures.

Annex I provides details of the locations where screening is undertaken.

5.1 Screening of passengers and crew [r2.35]

[Organisation’s name] does not carry out any passenger or crew screening. If this applies to you, delete sections 5.1.1–5.1.9.

5.1.1 Controlled movement of passengers [r2.35(f)] The movement of passengers through screening points is controlled by using the following measures:

Insert your measures and procedures. For example:

use of retractable belt barriers to define screening lanes;

cordoned walkways to direct people through the screening points;

red and green (stop and go) lights at each screening lane;

staff responsible for ensuring that there is an even dispersion of people across all open screening lanes;

28

Page 35: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

signs;

painted lines (colour-coded);

one-way doors; and

pass-back detectors.

Insert any additional measures and procedures as relevant.

5.1.2 Mixing of screened and non-screened passengers from arriving / departing aircraft [r2.35(b)]

Select from the options below as appropriate for your operations.

The measures and procedures applied to ensure that non-screened passengers on arriving aircraft do not mix or interfere with screened passengers are the responsibility of the relevant airport operator. [Organisation’s name]’s staff, agents and contractors will follow the reasonable directions of the relevant airport operator and comply with their measures and procedures.

ORInsert your measures and procedures. For example:

Non-screened passengers from general aviation aircraft are directed to the landside area of the airport and kept separate from screened passengers until they arrive at the landside area.

Non-screened passengers from RPT aircraft are escorted directly to the landside area of the airport and kept separate from screened passengers until they arrive at the landside area.

5.1.3 Screening and clearing of carry-on baggage [r2.35(c)]All screening and clearing of carry-on baggage carried out by [Organisation’s name] is conducted in accordance with the procedures set out in the ASN, the Act and the Regulations, and any other notices issued by the Department from time to time. In particular, the following measures and procedures are applied:

Set out the specific measures and procedures employed by your organisation/relevant agents to screen and clear carry-on baggage.

5.1.4 Screening and clearing of transit passengers [r2.35(d); r2.35(g)(v)]The following measures and procedures apply to the handling and screening of transit passengers from inbound international flights at their first Australian destination:

Insert your measures and procedures. For example:

passengers are escorted at all times until they reach the landside area of the airport;

passengers transiting to a domestic connecting flight will then collect their checked baggage and travel to the domestic terminal where they will re-check their baggage and pass through a screening point before proceeding to their connecting flight; and

passengers transiting to an international connecting flight will pass through a screening point before proceeding to their international connecting flight.

29

Page 36: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

The following measures and procedures apply to the screening and clearing of transit passengers from domestic flights:

Insert your measures and procedures. For example:

Non-screened passengers that are transiting to a domestic RPT flight are escorted from the aircraft to the landside area of the airport and kept separate from screened passengers until they arrive at the landside area. They are then required to re-enter the sterile area via a screening point.

Passengers that are transiting to an international flight are escorted from the aircraft to the landside area of the airport and kept separate from screened passengers until they arrive at the landside area. They are then required to collect their checked baggage and transfer to the international terminal. At the international terminal they must re-check their baggage and re-enter the sterile area via a screening point.

Select from the options below as appropriate for your operations.

All transit passengers are required to leave the aircraft during transit.

OR

The following measures are applied to the carrying out of screening and clearing of transit passengers who cannot leave the aircraft during transit:

Set out the specific measures and procedures employed by your organisation/relevant agents to screen and clear passengers who cannot leave the aircraft during transit.

5.1.5 Suspect passengers or carry-on baggage [r2.35(e)]The following measures and procedures are applied to treat suspect passengers or carry-on baggage:

Insert your measures and procedures. For example:

it must be immediately reported to [specify];

[Specify] is responsible for deciding whether the passenger’s behaviour or the item of baggage warrants further investigation or not;

any decision to require additional security procedures must be recorded in writing by [specify], including the reason for the decision, the additional procedures applied, and any subsequent action taken (including where a decision is made not to take any further action); and

additional security procedures that may be applied in instances of suspect behaviour or carry-on baggage include secondary screening procedures as set out in the ASN, questioning of the passenger in the presence of an airport security guard, and requesting ongoing monitoring of the passenger by an airport security guard.

If different measures and procedures are applied at different screening points – for example if law enforcement must be notified or another organisation is responsible for handling suspect behaviour at an international screening point – they should be set out separately. Ensure the above reflects your operations. If different measures and procedures are applied at different facilities, or in different circumstances, please set them out separately.

5.1.6 Diplomats and VIPs [r2.35(g)(i)]During normal operations, diplomats or VIPs may travel on [Organisation’s name]’s aircraft. A diplomat, as described in the Act, may:

30

Page 37: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

request clearance at a screening point without being screened; or

request to enter a cleared area, zone or aircraft other than through a screening point.

Approval to process a diplomat or VIP other than by screening them at a screening point can only be granted by [specify].

Before approving such a process [specify] requires:

A written notice from the Secretary under section 41(2)(b) of the Act.

Insert any other specific requirements applied by your organisation.

If the diplomat or VIP can produce a written notice from the Secretary, [specify] may agree to screening in accordance with the request.

Secluded access to the cleared area and onto the aircraft may be provided with the agreement of the airport operator, however the requirement for full screening remains unchanged. Diplomats or VIPs will be screened in a private area, away from public view.

If [specify] agrees to processing any diplomat or VIP under any of the requested conditions, [specify] may require the diplomat or VIP to comply with some or all of the usual security screening procedures.

Ensure the above reflects your operations. If different measures and procedures are applied at different facilities, or in different circumstances, please set them out separately.

5.1.7 Government couriers and diplomatic bags [r2.35(g)(ii)]The screening of government couriers and diplomatic bags is conducted in accordance with the Act and Regulations, ASN and any other notices issued by the Department from time to time. In particular, the following measures and procedures are applied:

Set out the specific measures and procedures employed by your organisation/relevant screening authorities to handle screening of government couriers and diplomatic bags. For example:

[Specify] is responsible for making decisions in relation to the screening of government couriers and diplomatic bags.

The courier must have an official document indicating their status, and photographic ID which also contains a signature.

Diplomatic bags must be closed and sealed with an embassy or consulate seal before arriving at the screening point.

The person accompanying the diplomatic bag is screened in the normal manner.

5.1.8 Passengers with reduced mobility or a medical condition [r2.35(g)(iii)]The screening of passengers with reduced mobility or a medical condition is conducted in accordance with this TSP, the Act and Regulations, ASN and any other notices issued by the Department from time to time. In particular, the following measures and procedures are applied:

Set out the measures and procedures employed by your organisation to handle screening of passengers with reduced mobility or a medical condition.

31

Page 38: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

5.1.9 Persons in custody [r2.35(g)(iv)]The screening of persons in custody is conducted in accordance with this TSP, the Act and Regulations, ASN and any other notices issued by the Department from time to time. In particular, the following measures and procedures are applied:

Set out the measures and procedures employed by your organisation to handle screening of persons in custody.

5.2 Sterile area breaches [r2.35(i)]

Select from the options below as appropriate for your operations.

[Organisation’s name] is not responsible for re-establishing a sterile area following a breach. [Specify] is responsible for this at [Airport trading name/s]. [Organisation’s name]’s staff and contractors within the sterile area when a breach occurs comply with the measures and procedures they have established to ensure the integrity of the area.

OR

Measures and procedures following sterile area breaches to ensure the integrity of the re-established sterile area include:

Insert your measures and procedures. For example:

clearing the area of all passengers and personnel; and

walk-through and visual search by security staff.

5.3 Checked baggage screening [r2.37]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not carry out checked baggage screening. If this applies to you, delete sections 5.3.1–5.3.3.

OR

The screening of checked baggage is conducted in accordance with this TSP, the Act and Regulations, ASN and any other notices issued by the Department from time to time.

The locations at which checked baggage screening is undertaken are set out in Annex I.

5.3.1 Protection of checked baggage against tampering [r2.37(c)]The following measures and procedures are employed at [aircraft operator trading name]s facilities to ensure checked baggage is protected against tampering and the introduction of explosives:

Insert your measures and procedures. For example:

Access to the baggage area is restricted to ASIC / VIC holders with an operational need.

Access to the baggage area is controlled by [specify your control measures].

The baggage area is patrolled by [specify]. The patrols are conducted regularly during the operational period of the aircraft on a daily/twice-daily/three-times daily/hourly schedule [specify].

CCTV cameras cover all aspects of the baggage area. CCTV data is retained for a period of [specify] and may be reviewed if required.

5.3.2 Unattended and suspect baggage [r2.37(d)]

32

Page 39: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Unattended and suspect baggage will be treated in accordance with the following measures and procedures:

Insert your measures and procedures. For example:

Unattended or suspicious baggage will not be loaded on to any aircraft.

[Specify] is to immediately notify the security contact officer/operations manager/terminal manager [specify] of the unattended or suspicious baggage.

[Specify] is to:

Insert your measures and procedures. For example:

Determine all relevant facts regarding the suspicious baggage.

Notify law enforcement agencies.

Notify local authorities.

Direct staff to alter normal operating procedures.

Direct staff to cooperate with relevant authorities until the matter is resolved.

5.3.3 Response to the detection of explosives [r2.37(e)]The following measures and procedures are employed to respond to the detection of explosives:

Insert your measures and procedures. For example:

The person who identifies the explosives must immediately notify [specify].

[Position identified above] must then:

determine all relevant facts regarding the explosives (e.g. where they are located, when that area was last checked and cleared, what they look like);

notify law enforcement agencies;

notify local authorities, including [specify particular positions within the airport and within your organisation]; and

direct staff how, where and when to alter normal operating procedures.

All staff are to cooperate with relevant authorities until the matter is resolved.

5.4 Screening for the security restricted area at a designated airport [r2.35A(3); r3.16E]

Select from the options below as appropriate for your operations.

Regulation 2.35A does not apply to [Organisation’s name]. If this applies to you, delete sections 5.4.1 and 5.4.2.

OR[Organisation’s name] is responsible for screening of persons entering the security restricted area in [specify airports and areas, e.g. the apron surrounding terminal X at airport Y]. [Name of airport operator/s] are responsible for screening in the following areas [specify airports and areas, e.g. the the remainder of the SRA at airport Y]. Further details are provided at Attachment 5.

33

Page 40: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

The locations where screening occurs for the parts of the security restricted area for which [Organisation name] is responsible, including general areas for screening within the security restricted area are set out at Annex I.

Screening conducted by [Organisation’s name] will be conducted on entry to the security restricted area/on entry to and within the security restricted area [delete one] by [name of screening authority].

5.4.1 Measures and procedures for carrying out screening for the security restricted area [r2.35A(3)(a); r3.16E]

Unless exempt, persons, vehicles and goods requiring access to the security restricted area controlled by [Organisation’s name] at [Airport/s name] will be screened in accordance with the Act, the Regulations, an Aviation Screening Notice and any other notices issued by the Department from time to time. In particular, the following measures and procedures are applied:

Set out the measures and procedures employed by your organisation/relevant screening authorities for security restricted area screening.

5.4.2 Measures and procedures for responding to the detection of weapons [r2.35A(1)(c)]

The following measures and procedures are applied to respond to the detection of weapons at a screening point for the security restricted area:

Insert your measures and procedures. For example:

The staff member/screening officer who detects the weapon must immediately notify [specify].

[Position identified above] is then responsible for determining the individual in whose possession the weapon is, and whether they are authorised to have the weapon in their possession.

If the weapon detected is in the possession of a person appropriately authorised to carry the weapon through an SRA screening point, the weapon will be returned to that person.

If the weapon detected is not in the possession of an authorised person it must be surrendered to the [specify appropriate representative of the screening authority] and will then be stored and handled in accordance with the procedures set out below in section 6.2 of this TSP.

34

Page 41: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

6 Control of firearms, other weapons and prohibited items [r2.33]

Operational staff are aware of the restrictions on the possession and use of firearms, other weapons and prohibited items within the airport as required under r2.33(1)(e). For example set out the methods by which you ensure that:

In accordance with r2.33(1)(e) operational staff are made aware of the restrictions on the possession and use of firearms, other weapons and prohibited items within Australian airports as part of their annual training in relation to aviation security and the carriage of firearms, weapons, prohibited items and dangerous goods. Security signs at security controlled airports provide a further reminder of the restrictions.

Staff operating out of a fixed airport location are also regularly briefed on requirements by the airport operator’s security contact officer.

All procedures for handling or transporting firearms, other weapons and prohibited items into or within Australia are consistent with relevant state, territory and Commonwealth laws.

6.1 Measures to deter unauthorised possession of firearms, other weapons and prohibited items [r2.33(1)(a)]

The following measures are used to deter unauthorised possession of firearms, other weapons and prohibited items:

Insert your measures and procedures. For example:

[Organisation’s name]’s booking system advises all persons looking to book a ticket of the restrictions and requirements for carrying firearms, other weapons and prohibited items. Before a ticket can be purchased, a person must confirm that they are aware of these requirements, and of the penalties for not meeting them.

[Organisation’s name]’s website also contains detailed information for travellers regarding the Australian Government’s requirements for the carriage of firearms, other weapons and prohibited items.

Check-in procedures for [Organisation’s name]’s flights, including when the responsibility of an agent or online, includes a specific question in relation to firearms, other weapons and prohibited items, along with a warning of the potential penalties if such items are unauthorised.

Regular patrols of facilities and aircraft by staff members trained to detect and identify prohibited items and weapons.

6.2 Dealing with surrendered firearms, other weapons and prohibited items [r2.33(1)(b)]

The following measures and procedures are used for dealing with surrendered firearms, weapons and prohibited items:

Insert your measures and procedures. For example:

35

Page 42: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

[Organisation’s name] staff are not authorised or trained to deal with surrendered firearms.

if the item is surrendered at a security controlled airport, [specify] will immediately contact [specify – e.g. the airport operator’s SCO, a screening officer, or other authorised person.] who is responsible for dealing with surrendered firearms, weapons and prohibited items/

if the item is surrendered at [specify Airport trading name], then [specify] will immediately contact [specify] who is authorised to handle surrendered firearms and weapons at [Airport trading name];

if the firearm or other weapon or prohibited item is surrendered while an aircraft is in flight, [specify] is authorised to take custody of it. [Specify] must be notified immediately, and the item stored [specify]. The item must be surrendered to the relevant authorities at the airport where the aircraft lands.

other weapons or prohibited items which are surrendered will be stored at [specify] until the law enforcement agency or owner takes custody of them, or they are destroyed.

6.3 Procedures for the handling and movement of firearms and other weapons [r2.33(1)(c)]

Select from the options below as appropriate for your operations.

The staff and aircraft of [Organisation’s name] are not authorised to handle or transport firearms.

OR

The following procedures apply to the handling and movement of firearms and other weapons:

Insert your measures and procedures. For example:

passengers wishing to carry firearms as checked baggage or consigned as air cargo must comply with the relevant legal requirements;

firearms prepared for air transport may only be transported by [specify] in accordance with this TSP; and

checked baggage containing firearms will only be available for collection by the passenger or an authorised representative. Identification must be shown before the baggage will be released.

36

Page 43: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

7 Security of aircraft [r2.39]

7.1 Unlawful carriage of a firearm, other weapon or a prohibited item [r2.39(1)(a)]

[Organisation’s name] employs the following measures and procedures to prevent the unlawful carriage of a firearm, other weapon or prohibited item:

Insert your measures and procedures. For example:

[Organisation’s name]’s booking system advises all persons looking to book a ticket of the restrictions and requirements for carrying firearms, other weapons and prohibited items. Before a ticket can be purchased, a person must confirm that they are aware of these requirements, and of the penalties for not meeting them.

[Organisation’s name]’s website also contains detailed information for travellers regarding the Australian Government’s requirements for the carriage of firearms, other weapons and prohibited items.

Check-in procedures for [Organisation’s name]’s flights, including when the responsibility of an agent or online, includes a specific question in relation to firearms, other weapons and prohibited items, along with a warning of the potential penalties if such items are unauthorised.

All aircraft undergo pre-flight checks by staff, agents and/or contractors trained to detect and identify prohibited items and weapons.

The following measures and procedures are used if a firearm or other weapon, or a prohibited item, is detected on board an aircraft:

Insert your measures and procedures. For example:

If the aircraft is at a security controlled airport, [specify] will immediately contact [specify – e.g. the airport operator’s SCO, or other authorised person.] who is responsible for dealing with firearms, weapons and prohibited items. The measures and procedures set out in the airport operator’s TSP will be followed.

If a firearm is surrendered at [specify Airport trading name], then [specify] will immediately contact [specify] who is authorised to handle firearms at that airport.

If the firearm or other weapon or prohibited item is detected while an aircraft is in flight, [specify] is authorised to take custody of it. [Specify] must be notified immediately, and the item stored [specify]. The item must be surrendered to the relevant authorities at the airport where the aircraft lands.

Other weapons or prohibited items which are detected while an aircraft is in flight will be taken into custody by [specify], and securely stored in such a way that its presence is not apparent to passengers, until the law enforcement agency or owner takes custody of them, or they are destroyed.

37

Page 44: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

If the weapon or item detected poses an immediate threat to the aircraft, the crew will divert to the nearest appropriate airport under the instructions of air traffic control. Upon landing, the crew will follow the relevant procedures in place at the airport, or the directions of the local emergency services.

7.2 Controlling access to aircraft [r2.32(1)(a); r2.32(1)(e); r2.32(1)(g); r2.39(1)(b)]

Insert your measures and procedures to control access to aircraft. For example:

While passengers are boarding or disembarking from the aircraft, access is controlled by staff and crew.

[Organisation’s name] requires aircraft to be guarded at all times while at a non-security controlled airport, unless stored in a locked/secured hanger or building.

Access to an aircraft in an airside security zone at a security controlled airport is controlled in accordance with the access controls to that zone.

[Organisation’s name] also requires unattended aircraft to be secured at all times. This means:

all external doors and hatches on the aircraft are closed and locked;

the door from the cabin to the cockpit is closed and locked;

control mechanisms are locked;

the aircraft is chained and/or padlocked to a permanent tie-down point; and

storing the aircraft in a locked/secured hangar or building.

[Specify] is responsible for ensuring that these measures are applied before an aircraft is left unattended for any length of time.

Identification of unauthorised or unsecured unattended aircraft will result in the following procedures being deployed:

Insert your measures and procedures. For example:

the aircraft must be reported to [specify] as soon as possible; and

if [position identified above] is unable to identify the aircraft, they must immediately notify [specify], who will then contact [specify].

[Specify] is responsible for ensuring the aircraft is not left unattended at any time until it is secured.

Please ensure the above accurately reflects your operations.

7.3 Flight deck access [r2.39(1)(c)]

Insert your measures and procedures to ensure access to the flight deck is controlled to prevent unauthorised entry at all times.Note: Regulation 4.67 (Security of flight crew compartment – all aircraft) states if an aircraft used to operate a prescribed air service has a cockpit door, the door must be able to be locked; and there must be a means for the cabin crew to communicate with the flight crew while the door is locked.For example:

38

Page 45: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

All of [Organisation’s name]’s aircraft have lockable cockpit doors. These doors are kept locked at all times while the aircraft is in flight except when necessary to allow a person to enter or leave the cockpit or when otherwise necessary for safety reasons.

All of [Organisation’s name]’s aircraft with a certified maximum seating capacity of thirty (30) or more passengers, operated for the purposes of an RPT or open charter operation (whether a domestic or international air service) are fitted with hardened cockpit doors that meet the requirements set out in regulation 4.68.

In circumstances where it is necessary to allow a person to enter or leave the cockpit, the following measures and procedures are applied to prevent unauthorised access:

Insert your measures and procedures. For example:

while on the ground access to the flight deck is restricted to the flight crew and our contracted ground handling agent who are authorised to be there and have an operational need;

CCTV cameras positioned near the cockpit door to assist the flight crew in monitoring access;

intercom positioned outside the cockpit door for communication between the flight deck crew and cabin crew;

viewing ports fitted on cockpit doors to assist flight crew in monitoring access to the flight deck;

pin-code lock for controlled access by the cabin crew into the flight deck;

all hardened cockpit doors fitted on [Organisation’s name]’s prescribed air services are capable of being secured from inside the flight deck;

during flight, access to flight deck is strictly limited to the cabin crew;

to access the flight deck during flight, a cabin crew member must first receive permission from the pilot-in-command. A second cabin crew member will ensure that there are no passengers in the vicinity while accessing the flight deck; and

before providing access into the flight deck, the pilot-in-command or a member of the flight crew must clearly identify the person requesting entry.

Please ensure the above accurately reflects your operations. Where processes vary for different aircraft-types, please set out all applicable variations.The above procedures cannot condract the requirements for the security of the flight crew compartment set out in Regulations 4.67 (Security of flight crew compartment—all aircraft) and 4.68 (Additional requirements for security of flight crew compartment—aircraft with seating capacity 30 or more).

7.4 Responding to unknown substances [2.39(1)(d)]

The following measures and procedures apply if an unidentified substance is detected on board an aircraft:

Insert your measures and procedures. For example:

any suspicious/unknown substances will be left untouched and the area cordoned off as soon as possible;

39

Page 46: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

the incident must be reported to the pilot-in-commend of the aircraft immediately;

the pilot-in-commend will then contact [specify] to seek further information and assistance;

if the aircraft is on the ground, and advice has been received that it is safe to do so, the threat will be removed from the airport. If there is no confirmation as to the nature of the threat or risk, the crew will follow the relevant procedures in place at the airport, or the directions of the local emergency services; and

if the aircraft is in flight, the crew will divert to the nearest appropriate airport under the instructions of air traffic control. Upon landing, the crew will follow the relevant procedures in place at the airport, or the directions of the local emergency services.

7.5 Response to unattended and/or suspect items [r2.39(1)(e)]

Suspect items will not be loaded on to any aircraft.

Insert your measures and procedures to ensure suspicious baggage is not loaded onto an aircraft here. For example:

checked baggage will only be accepted at check-in points by authorised staff.

where doubt exists about the integrity of baggage, staff will contact [specify] immediately.

if [position identified above] determines there is nothing suspicious about the passenger or the baggage, the baggage follows the normal screening process.

if [position identified above] determines the passenger or the baggage is suspicious, the SCO and the relevant law enforcement agency will be immediately informed.

If any baggage (whether checked baggage or carry-on baggage) is considered to be suspicious, the following measures and procedures will be employed:

Insert your measures and procedures. For example:

[Specify] is to be immediately notified.

[Position identified above] must then:

determine all relevant facts regarding the suspicious baggage;

notify law enforcement agencies;

notify local authorities, including [specify particular positions within the airport and within your organisation]; and

direct staff how, where and when to alter normal operating procedures.

All staff are to cooperate with relevant authorities until the matter is resolved.

7.6 Security of aircraft stores and cleaning operations [r2.39(1)(f); r2.40]

[Organisation’s name] employs the following measures and procedures to ensure the security of stores to be taken on board an aircraft, including catering items:

Insert your measures and procedures appropriate to your operations in your operating envrionment. For example:

40

Page 47: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

only [Organisation’s name]’s staff are authorised to access the aircraft;

only authorised staff have access to stores for use on board an aircraft;

[Organisation’s name] contracts out catering operations to [Specify]. [Organisation’s name] conducts annual security audits of [specify], including an audit of staff criminal history checks;

stores must never be left unattended unless they are secured in a locked container;

all items being transported through an airside security zone or into a security restricted area must undergo screening;

all staff handling or otherwise accessing stores to be placed on board the aircraft must undergo a criminal history check;

a member of [Organisation’s name]’s staff or an agent must be present at the aircraft at all times while stores are being transported to or from the aircraft; and

[Organisation’s name] clears the aircraft prior to stores being loaded, and once loading is complete.

7.6.1 Cleaning operations and materials [r2.40]

[Organisation’s name] employs the following measures and procedures to ensure the security of aircraft cleaning operations and materials to be taken on board an aircraft and at facilities controlled by [Organisation’s name]:

Insert your measures and procedures. For example:

all staff who are to access the aircraft at a security controlled airport must hold a valid ASIC card;

only [Organisation’s name]’s staff are authorised to clean the aircraft;

[Organisation’s name] contracts out cleaning operations to [Specify]. [Organisation’s name] conducts annual security audits of [specify];

all cleaning materials are kept in a locked cupboard at [Organisation’s name]’s facilities. Only authorised cleaning staff have the key to the cupboard;

cleaning materials must never be left unattended unless they are in a locked cupboard;

all cleaning staff must undergo a criminal history check before being authorised to access the aircraft;

all items being transported through an airside security zone or into a security restricted area must undergo screening;

41

Page 48: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

a member of [Organisation’s name]’s staff or an agent must be present at all times during cleaning operations; and

[Organisation’s name] clears the aircraft prior to cleaning commencing, and once it is complete.

7.7 Handling suspect behaviour by a passenger [r2.39(1)(g)]

The following measures and procedures are applied to handling suspect behaviour by a passenger in-flight:Insert your measures and procedures.

any suspicious behaviour by a passenger will be monitorered by the flight crew who will notify the cabin manager (or pilot in command depending on type of prescribed air service);

the pilot in command will be notified if the suspicious behaviour continues; flight crew are to take insructions from the cabin manager (or pilot in command depending on type

of prescribed air service); flight crew will take instructions from the cabin manager (or pilot in command) if the passenger is

to be approached and given verbal warnings or instructions/directives; and [any other – please specify].

The TSP must detail the restraining devices that are carried on board each aircraft and their location; the details of the crew members who are authorised to use restraints; and the procedures for reporting suspect behaviour by passengersFor example:

each aircraft carries a minimum of 2 [specify type of restraining devices];

restraining devices on the aircraft are securely stored in [specify location/type of storage]; and

if the passenger’s behaviour is considered to be a threat the safety or security of a passenger, member of the crew or the aircraft, [specify] is authorised to approve the use of a restraining device on that passenger.

Any incident that required the use of restraints will be immediately notified to [Organisation’s name]. The appropriate law enforcement authorities relevant to the jurisdiction where the aircraft is to land will also be notified.

Any suspect behaviour by a passenger will be reported to [specify].

Ensure the above reflects your operations. If different measures and procedures are applied in different circumstances, please set them out separately.

7.8 Carriage of persons in custody [r2.39(2)]

Select from the options below as appropriate for your operations.

[Organisation’s name]’s aircraft do not carry persons in custody.

OR

[Organisation’s name]’s measures and procedures to ensure on board security when carrying a person in custody as a passenger on an aircraft are as follows:

42

Page 49: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Insert your measures and procedures. If different procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services, or dangerous and non-dangerour persons in custody) then set them out separately. For example:

[Organisation’s name] will only carry persons in custody after undertaking a risk assessment based on the information provided by the relevant enforcement agency in the form approved by the Department;

Persons in custody are always boarded last/first;

[Organisation’s name] will not carry persons in custody unless the relevant enforcement agency provides a minimum of one escort to every two non-dangerous persons;

[Organisation’s name] will not carry persons in custody unless satisfied that there are an adequate number of escorts for the person or group given the particular circumstances;

Persons in custody are not carried on international flights;

An extra set of restraints is carried on any aircraft carrying a person in custody as a passenger.

7.9 Security of cargo [r2.41]

Select from the options below as appropriate for your operations.

[Organisation’s name]’s aircraft do not carry cargo or unaccompanied baggage. If this applies to your organisation, delete sections 7.9.2 and 7.9.3 below.

OR

[Organisation’s name]’s procedures for receipt and handling of cargo and unaccompanied baggage are as follows:

Insert your measures and procedures. If different procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services, or cargo and unaccompanied baggage) then set them out separately.

cargo will only be accepted from [specify circumstances in which cargo will be accepted for uplift onto a prescribed air service];

cargo is to be secured or kept under supervision at all times; and

access to cargo is restricted to [specify, e.g. personnel who hold a valid ASIC or VIC].

[Organisation’s name]’s measures and procedures to ensure the security of cargo and unaccompanied baggage, including supervising and controlling access to cleared cargo, are as follows:

Insert as relevant to your organisation. If different procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services, or cargo and unaccompanied baggage) then set them out separately.

7.9.1 Diplomatic mail [r2.41(4)]Select from the options below as appropriate for your operations.

[Organisation’s name] does not carry diplomatic mail.

OR

[Organisation’s name] employs the following measures and procedures to ensure the security of diplomatic mail:

Insert your measures and procedures. If different procedures are used in different locations or in different circumstances (e.g. international air services and domestic air services) then set them out separately. For example:

43

Page 50: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

diplomatic mail bags are only accepted from embassy or consulate staff with a valid official document indicating their status;

the person accompanying or delivering the diplomatic mail is to present another form of photographic identification to verify their identity; and

diplomatic mail bags are to be closed and sealed with an embassy or consulate seal being accepted.

7.9.2 Suspect cargo [r2.39(e)]The following measures and procedures apply if an item of cargo is considered suspect:

Insert your measures and procedures. For example:

it must be reported to [specify] immediately;

the suspect cargo will be left untouched and the area will be cordoned off as soon as possible;

[Position identified above] will then contact [specify] to seek further information and assistance; and

if the aircraft and/or cargo is still at a security controlled airport, then the measures and procedures set out in the airport operator’s TSP will be followed.

Suspect cargo will not be loaded onto an air service operated by [Organisation’s name].

7.9.3 High risk cargo [r2.41(5)]Cargo presented by an unknown entity or showing signs of tampering shall be considered high risk if, in addition, it meets one of the following criteria:

a) specific intelligence indicates that the cargo poses a threat to aviation;

b) the cargo shows anomalies that give rise to suspicion; or

c) the nature of the cargo is such that usual or baseline security measures alone are unlikely to detect prohibited items that could endanger the aircraft.

In addition, regardless of whether the cargo comes from a known or unknown entity, specific intelligence about a consignment may render it as high risk.

The following measures and procedures apply if an item of cargo is considered high risk:

Insert your measures and procedures. Measures and procedures need to be developed by industry participants to identify, handle and treat high risk cargo. For example:

All staff must comply with [Organisation’s name] policy on identifying, handling and treating high risk cargo.

All staff will be provided with guidance about identifying high risk cargo, such as identifying signs of tampering, identifying anomalies that give rise to suspicion or acting on intelligence received which may render cargo as high risk.

44

Page 51: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

When staff identify cargo that meets the definition of high risk cargo, or intelligence is received indicating the cargo may be high risk, the matter must be reported to [specify] immediately. The high risk cargo will be left untouched and the area cordoned off as soon as possible. [Specify] will be contacted to seek further information and assistance.

When staff identify cargo that meets the definition of high risk cargo, or intelligence is received indicating the cargo may be high risk, the matter must be reported to [specify] immediately. The area must be cleared of people and/or the high risk cargo must be moved to a safe and secure location. The relevant emergency authorities must be contacted to examine and clear the cargo.

High risk cargo will be provided to a regulated air cargo agent (RACA) for examination and clearance in accordance with the RACA’s high risk cargo measures and procedures. If cleared, the cargo may be returned to [Organisation’s name] for loading onto an air service operated by [Organisation’s name].

High risk cargo will not be loaded onto an air service operated by [Organisation’s name].

45

Page 52: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

8 Measures and procedures in the event of a heightened security alert or to respond to aviation security incidents [s16(2)(d); r2.43]

[Organisation’s name] has a number of additional security measures and procedures available for implementation in the event of a heightened security alert. These measures and procedures are detailed at Attachment 5 to this TSP.

Measures for heightened security alerts may be implemented:

when the Australian Government formally raises the Australian National Terrorism Threat Level;

when specific threats are directed towards our operation/s;

in response to an aviation security incident;

in response to the issuance of an SSD; or

as otherwise advised by the Department.

46

Page 53: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

9 Annexes and accompanying documents

Below is the list of annexes and accompanying documents (referred to as ‘Attachments’) for this TSP.

A failure to amend an annex or attachment, or to notify the Department of any changes to the information provided in an annex or attachment, may be an offence.

9.1 Annexes

Annexes form part of the TSP and are subject to approval by the Department when the content is changed.

Annex A: Signed statement [s16(1); r2.05]

Annex B: Local security risk context statement [r2.28]

Annex C: Organisational Structure and Security Management Arrangements [r2.29(1)(a)]

Annex D: Consultation undertaken as part of the development of this TSP [s16(2)(g)]

Annex E: Operational facilities located within security controlled airports [r2.31(1)(b)]

Error: Reference source not found

Annex G: Location of access controls performed in vicinity of access control points [r2.35A(1)(c)]

Annex H: Classes of persons permitted to re-enter the security restricted area at a designated airport and applicable airside facilities [(r2.35A(1(c)(e), r3.16B(5)(d)(e)]

Annex I: Screening Locations [r2.35; r2.35A(3)(e); 2.37]

9.2 Attachments

Attachments must be submitted with and accompany the TSP but do not form part of the TSP.

Attachment 1: Description of Aircraft Operator [r2.31(1A)]

Attachment 2: Contact Details [r2.31(3)]

47

Page 54: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Attachment 3: Timetable for implementation of security measures and/or procedures [r2.32(2)]

Attachment 4: Measures and procedures in the event of a heightened security alert [r2.43]

Attachment 5: The person(s) responsible for maintaining security of the security restricted area and managing security at each access control point [r2.35A(2)]

48

Page 55: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex A: Signed statement [s16(1); r2.05]

[Optional: Insert aircraft operator logo]

[Organisation’s name]:

is aware of its general responsibility to contribute to the maintenance of aviation security;

has developed an integrated, responsible and proactive approach to managing aviation security;

is aware of, and has the capacity to meet, the specific legislative obligations; and

has taken into account relevant features of its operation in developing activities and strategies for managing aviation security.

[Organisation’s name] believes that this TSP gives effect to all of the above obligations.

Signature :

Title :

Date :

(Chief Executive Officer or authorised signatory)

49

Page 56: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex B: Local security risk context statement [r2.28]

Provide a statement outlining the local security risk context for the aircraft operator, including consideration of its location, and seasonal and operational factors. For example:

[Organisation’s name] understands that Australia’s National Terrorism Threat Advisory System (NTTAS) informs the public about the likelihood of an act of terrorism occurring in Australia.

[Organisation’s name] acknowledges that the NTTAS should inform the development of its local security risk context statement and its security measures and procedures. We acknowledge that this threat is likely to continue for the foreseeable future, and that aircraft have been the target of previous attacks.

Set out the location; seasonal and operational factors of your aircraft operations

[Organisation’s name] operates three corporate aircraft configured for VIP operations. The aircraft only operate closed charter services departing from [specify]. The flights are not available to the general public and are therefore not publicised or generally known to the public.

As an operator of corporate aircraft with a base at [Airport trading name], [Organisation’s name]’s operations may represent a viable target due to the nature of our business and the profile of the passengers we carry. Consequently, our internal operating procedures and practices are of a high standard to ensure the total safety of our passengers and our assets.

In preparing this TSP, and in establishing measures and procedures to address aviation security issues, we particularly considered the following threats of relevance (set out below) and the people, assets and infrastructure that we need to protect.

General threats and generic security risk events of relevance to [Organisation’s name] [r2.28(b)]

Source of Risk Risk Event

Person-borne IED(PBIED)

Suicide attack by a person carrying an IED concealed on their person: attacker attempts to pass through a screening point with a concealed

IED to attack an aircraft; attacker is able to board an aircraft with a concealed IED to detonate in

flight; or attacker carries an IED to an area of mass gathering such as screening

points, check-in areas, food areas, taxi stands etc.

Placed IED

IED placed either an aircraft or in proximity to a crowded landside zone or other mass gathering such as check-in areas or screening point: IED device placed in checked baggage to detonate on aircraft; IED device placed in carry-on baggage to detonate in proximity to area

of mass gathering; IED device placed in carry-on baggage to detonate on aircraft; or IED placed in air cargo to detonate on aircraft in flight.May involve trusted insiders, suicide attacks, or unwitting couriers.

Vehicle-borne IED(VBIED)

VBIED driven by attacker into aircraft on the ground or into facility could result in full or partial building collapse.

Armed assault (Firearms)

Firearms used to mount a direct attack against an aircraft and/or its passengers while the aircraft is on the ground. May involve one or more attackers.

50

Page 57: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Source of Risk Risk Event

Mixed-mode attack(IED & Firearms)

Firearms and IEDs used to mount a direct attack against an aircraft and/or its passengers while the aircraft is on the ground or in flight. May involve one or more attackers.

Hostage situation Passenger/s or employee/s taken hostage on an aircraft.

Sabotage

Attacker/s tamper with aircraft to cause accident: vulnerable areas may exist at maintenance facilities; and aircraft left unattended overnight at isolated areas may be vulnerable.Attack could be carried out by employees with access, or individuals gaining unauthorised access.

Computer network attack via telecommunications infrastructure

Deliberate disruption of websites or IT systems to cause loss or compromise of information.

Hoax threats Hoax threats used to deliberately cause disruption to services/distract emergency responders.

Violent or disruptive protestIssue motivated groups causing disruption to air services: could lead to violent activity; and could threaten particular aircraft, infrastructure or persons.

Acts of violence by disaffected individual

This may involve acts of retribution by individuals with grievances against the aircraft, an airline, stakeholders, employees or contractors, or persons travelling. It may also be general disaffection, without a specific, individual target.

Siege or hostage situation by disaffected individual at an airport

This may be linked to an individual with a psychological disorder who becomes destructive during the flight; or during check-in/security processes: the hostage may be targeted or simply opportunistic; and could limit ability of aircraft to depart safely.

General disruptive behaviour

This could involve to intoxicated persons or those with psychological disorders. It could also be linked to disgruntled local residents, disaffected individuals or other members of the public: deliberately causing disruption to services; distracting emergency responders; and may occur in flight or on the ground.

Theft of business assets

This could include theft of aircraft, ground handling equipment, maintenance equipment, cargo etc.; forced entry to terminal building may damage security systems; and damage to or theft of assets may put security of travellers and aircraft at

risk.

Trusted insider May be an employee, contractor or visitor. May hold an ASIC, TAC or VIC. Could involve any of the following: tampering with aircraft to cause an accident; facilitating or overlooking the transfer or movement of contraband

(including IEDs); This could occur via the movement of cargo or food

deliveries/stores to aircraft. causing loss or disruption to computers or networks; accessing secure areas without authorisation, or giving access to a

51

Page 58: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Source of Risk Risk Event

secure area to an unauthorised individual; tampering with security systems; and theft or sale of official uniforms.

Terrorist surveillance

This may include the following techniques: visual surveillance, from a distance; visual surveillance, from a static location (e.g. parked vehicle) close to

aircraft; vehicle drive-by; and scanning websites looking for geospatial data or other security

information.Attackers may also undertake dry runs. This may involve: threat-testing response time and methods by using unattended items;

and/or persons taking dry-runs to test security screening systems, including use

of various concealment methods.

52

Page 59: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

People, assets, infrastructure and operations that need to be protected [r2.28(c)]

People

The following people are to be protected under this TSP: aircraft passengers; aircraft crew; ground handling staff; [Organisation’s name] contractors and their staff; and other people working in close proximity to the aircraft.

Assets

Assets to be protected under this TSP include: aircraft; assets and technology used for screening and clearing; assets which may be required in an emergency; aids to aircraft navigation; electrical supply; communication equipment; and computer systems and the information contained in those systems.

Infrastructure Infrastructure to be protected under this TSP includes the buildings and assets operated by [Organisation’s name] at [Airport trading name].

Operations

The following operations are to be protected under this TSP: all international and domestic air services operated by [Organisation’s

name]; operations to support those air services, including ground-handling and

catering operations, that are based at an Australian airport.

53

Page 60: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex C: Organisational Structure and Security Management Arrangements [r2.29(1)(a)]

Insert text and/or a diagram clearly articulating your organisational structure and your security management arrangements here. Please ensure you provide position details (rather than names).

Consider specifying which organisational position is appointed as the nominated security contact officer

54

Page 61: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex D: Consultation undertaken as part of the development of this TSP [s16(2)(g)]

The following aviation industry participants contributed to the development of this TSP:

ORGANISATION TITLE / RELATIONSHIP CONSULTATION UNDERTAKEN

e.g. ABC Pty LtdGround handler, and authorised agent in Australia

E.g. Emails confirming that they will liaise with Government agencies on organisation’s behalf.E.g. Teleconference to discuss regulatory obligations and measures and procedures to be addressed within this TSP.E.g. Discussion around measures and procedures regarding security of unattended aircraft.

e.g. XYZ Cleaning Services

Contracted aircraft cleaning company

E.g. Discussions around contractual requirements and importance of complying with measures and procedures relating to cleaning operations and stores etc.

Insert details of other AIPs who have been consulted

Please insert additional rows as required.

55

Page 62: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex E: Operational facilities located within security controlled airports [r2.31(1)(b)]

[Organisation’s name] has the following facilities within a security controlled airport [s28(2)]:

Airport Facility (include details of the nature of operations at that facility)

Delete this annex if you have no operational facilities located within a security-controlled airport.

56

Page 63: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex F: Location and access control measures for airside access points [r2.32]

Security controlled airport

Location Access toaccess control measures during operating hours

access control measures outside operating hours

E.g. Terminal 3 Building– Staff Entry

E.g. security restricted area person-only inspection point

E.g. 1 guard, 18 hours per day (0500–2300 hrs), 7 days a week.

E.g. Electronic access control system

E.g. access to security restricted area

E.g. security restricted area person and vehicle inspection point

E.g. 2 guards, 24 hours per day, 7 days a week

E.g. Electronic access control system

E.g. Gate 2 (airside gate to security restricted area)

E.g. security restricted area -only inspection point

E.g. 2 guards, 24 hours per day, 7 days a week

E.g. Electronic access control system

E.g. Gate 4 (airside gate) E.g. Emergency gate E.g. Unmanned 24

hours, 7 days a week E.g. Padlock and key

E.g. Hanger 8 E.g. Airside access E.g. Manned access point

E.g. Padlock and Key/ Electronic Access control system

Please insert additional rows as required.

Delete this annex if your organisation does not have any facilities with direct access to the airside area or an airside security zone at a security controlled airport.

57

Page 64: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex G: Access control points – locations and where checks are performed [r2.35A(1)(c)]

Location of access control point If access controls performed in the vicinity of the access control point, the location of that place

e.g. Terminal 1 baggage access corridore.g. Control performed on entry to [Organisation’s name] building, 100m meters from Gate 4, map at Attachment 3 refers

Please insert additional rows as required.

Delete this annex if your organisation does not control access control points at a designated airport.

58

Page 65: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex H: Classes of persons permitted to re-enter the security restricted area in accordance with r3.16B(5)(d,e)

Class of person permitted to leave the security restricted area to perform work

If required, permission applies only if the work is performed at, or in the vicinity the following airside

facility

e.g. Baggage handlers collecting oversize baggage N/A

Please insert additional rows as required.

Delete this annex if you are not a responsible aviation industry pariticipant controlling part of the security restricted area at a designated airport.

59

Page 66: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Annex I: Screening Locations [r2.35; r2.35A(3)(e); 2.37]

All screening conducted by [Organisation’s name] will be in accordance with the current Aviation Screening Notice issued by the Department.

Description of operations Location of operations

e.g. passenger screening / LAGS screening / checked baggage screening

e.g. Terminal 1 (International Terminal Building) XXX Airport

e.g. passenger screening / checked baggage screening

e.g. Terminal 2 (Domestic Terminal Building) YYY Airport

e.g. passenger screening e.g. At foot of aircraft prior to departing ABC Airport

e.g. designated airport security restricted area screening e.g. Terminal 1 staff entry

Please insert additional rows as required.

Delete this annex if your organisation is not responsible for screening operations.

60

Page 67: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Attachment 1: Description of Aircraft Operator [r2.31(1A)]

Aircraft Operator Trading Name

AIRCRAFT OPERATIONS [r2.31(1A)(a)]

Domestic RPT Yes No

International RPT Yes No

Air Cargo Yes No

Open Charter Yes No

Closed Charter Yes No

General Aviation Yes No

Other (please specify)

Details of operator’s aircraft (including aircraft types, and how many of each)

e.g. 5 x Airbus A380s operating out of Sydney and Perth for international RPT services

e.g. 5x B737 used to service domestic closed charter operations and domestic RPT

Details of regular routes flown and airports served.

E.g. SIN–PER: RPT flights daily from Monday to Friday.

E.g. SIN–MEL–SYD: RPT flights twice a day, seven days a week.

E.g. ABX–SYD: RPT flight every Tuesday and Thursday.

e.g. MCV–TSV: RPT flight every Tuesday; closed charter flights 3 time a day every Wed/Fri/Sun

E.g. The airline does not conduct RPT operations, and therefore has no regular route. However, the airline only uses Australian airports with a standing authorisation to receive international flights.

E.g. The airline may conduct ad hoc flights to other Australian destinations.

A failure to notify the Secretary in writing within seven (7) working days of any changes to the details in this table is an offence under the Regulations.

61

Page 68: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Aircraft Operator Trading Name

HOURS OF OPERATION FOR OPERATIONAL FACILITIES LOCATED AT AN AUSTRALIAN SECURITY CONTROLLED AIRPORT [r2.31(1A)(b)]

Specify Facility / Facilities

DAYS HOURS

e.g. Mon, Wed, Fri e.g. 0800h – 1200h

e.g. Sun, Tue, Thu e.g. 1600h – 2000h

e.g. Saturday Closed

Specify Facility / Facilities

DAYS HOURS

A failure to notify the Secretary in writing within seven (7) working days of any changes to the details in this table is an offence under the Regulations.

62

Page 69: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Attachment 2: Contact Details [r2.31(3)]

[Aircraft Operator Legal Name]

Trading or operating name

CEO / Manager

Postal address

Contact telephone number

Out of hours contact number

Email address (optional)

ALTERNATIVE CONTACT DETAILS

Position or title

First/last name

Business number

After hours number

Email address

SECURITY CONTACT OFFICER DETAILS *

Position or title

First/last name

Business number

Email address

24-hour contact number

Please ensure you have provided full telephone numbers, including area codes.

*SCO contact details may be used by the Department to urgently contact your organisation in relation to aviation security matters. Should you utilise a 24 hour operations centre, please provide those details as an additional contact to the SCO.

A failure to notify the Secretary in writing within two (2) working days of any changes to the details in this Attachment is an offence under the Regulations.

63

Page 70: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Attachment 3: Timetable for implementation of security measures and/or procedures [r2.32(2)]

Detailed below are security measures and/or procedures yet to be implemented at [Organisation’s name]’s facilities at [Airport trading name].

Measure or Procedures Start date (no later than)

Finish date (no later than)

E.g. swipe card access installed to replace the key lock on the office door on NW side of hangar at [specify] aircraft DD/MM/YYYY DD/MM/YYYY

Delete this attachment if all of the measures and procedures referred to in your TSP have been implemented.

64

Page 71: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Attachment 4: Measures and procedures in the event of a heightened security alert [r2.43]

65

Page 72: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

[Organisation’s name] has a number of additional security measures and procedures available for implementation in the event of a heightened security alert.

Insert your measures and procedures here. Provide detail regarding those that can be implemented immediately or which would require a period of adjustment, and those which can be sustained indefinitely etc. For example:

The following measures could be implemented immediately:

request assistance from the relevant law enforcement agency;

changes to aircraft parking arrangements (noting that this will be subject to the agreement of any affected airports);

increased frequency of aircraft searches prior to departure;

suspension of the online booking system (although this cannot be sustained for long); and

cancellation of some flights (although this is not a measure which can be sustained indefinitely).

The following measures could be implemented within a fortnight:

An increase in the number of security personnel at facilities within security controlled airports.

Increased frequency of patrols around facilities within security controlled airports.

24-hour watches for parked aircraft at non-security controlled airports.

Aviation security incident response and investigation [r2.43(2)(a)]

If your procedures are already set out in a separate document then you may simply reference that document here (in detail, including version/date applicable etc.) and provide a copy of it with your TSP. Alternatively, insert your measures and procedures below. For example:

If an aviation security incident, including a threat or breach of security, is identified by [Organisation’s name] or any member of staff, [specify] is to be informed immediately

If the incident occurs at an airport, or a facility at an airport, [specify] is responsible for ensuring that the airport is immediately informed, and kept up to date with any developments.

As soon as possible, [specify] must inform:

[Specify].

any relevant authorities including the local police and /or the Australian Federal Police; and

any relevant aviation industry participants facing immediate threat.

[Specify] must also ensure that staff are fully aware of circumstances and their responsibilities.

[Specify] is the point of contact for relevant authorities, and, if requested, is authorised to provide company resources to assist relevant authorities.

66

Page 73: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

All staff, contractors and/or agents are to:

67

Page 74: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

assist [specify] in any necessary precautionary/preparatory actions; and

comply with all requests and procedures from relevant emergency authorities.

Following any of the breaches referred to above, a full internal investigation and report will be made for review by [specify] and if required, changes to [Organisation’s name] operating procedures will be implemented and a TSP revision/amendment submitted as required.

Reporting aviation security breaches [r2.43(2)(b)]

[Organisation’s name] has a range of procedures for reporting aviation security breaches, including threats. The nature of the threat and the seriousness of the breach will dictate who will be advised and the appropriate level of escalation. These reporting procedures include:

Insert your measures and procedures below. For example:

if the breach occurs at an airport, it will be immediately reported to that airport by [specify];

if the breach involves an AIP, agent or lessee at the aircraft operator’s facilities, that AIP, agent or lessee will be notified by [specify];

[Specify] is also responsible for recording the details of the breach, and presenting a report to [specify role/committee within organisation]; and

an audit/TSP review will be undertaken within 6 weeks of the breach occurring.

Where appropriate, an aviation security breach will also be reported to:

the Secretary;

the relevant local law enforcement body;

the Australian Federal Police;

any lessee, agent, or other licensed person who may be affected by the incident;

any airport operator that is impacted;

any aircraft operator that is impacted; and

AirServices Australia.

Contact numbers and email addresses for incident reporting are available to all staff via:

our induction training;

68

Page 75: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

our procedures manual; and

prominent displays at all facilities.

Reports made by phone will be followed up in writing within 24 hours.

Evacuation and emergency management [r2.43(2)(c)]

The following procedures apply to an incident, threat or breach which include any threat or breach of security including:

an aircraft hijacking or threatened hijacking;

a bomb threat relating to an aircraft in flight;

a bomb threat other than one relating to an aircraft in flight;

a failure of critical security equipment;

an external attack on an aircraft;

the discovery of an unknown substance on an aircraft in flight;

the discovery of an unauthorised person on board an aircraft in flight;

an unattended or suspect vehicle or thing in a crowded landside zone; and

armed persons in a crowded landside zone.

If your organisation’s procedures are already set out in a separate document then you may simply reference that document here (in detail, including version/date applicable etc.) and provide a copy of it with your TSP. Alternatively, insert your measures and procedures below. For example:

Any of these incidents involving [Organisation’s name]’s facilities or aircraft may result in [Organisation’s name] doing some or all of the following:

securing and evacuating [Organisation’s name]’s facilities;

seeking permission to divert any flights currently in Australian air space to the nearest security controlled airport;

cancelling flights departing some or all Australian or international airports;

requesting support or assistance from local emergency services;

implementing an external communication curfew (with the exception of relevant emergency services); and

69

Page 76: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

notifying AirServices Australia.

We will comply with requests and procedures from relevant emergency authorities at all times.

Set out any specific procedures that may be applied to specific circumstances. For example:

Procedures to respond to an aircraft hijacking or threatened hijacking

In the event of an aircraft hijacking, or threatened hijacking, within Australian airspace [Organisation’s name] will notify [specify] of the following information (to the extent it is available):

flight number, aircraft type and registration;

flight details including port of origin and destination, route, current position;

numbers of pax and crew;

any demands made by the hijacker;

time incident reported to [Organisation’s name]; and

any other information that may be relevant.

[Organisation’s name] will comply with any requests from the relevant emergency authorities, including securing and evacuating facilities.

Crew are to comply with the hijackers to the best of their ability taking into account their own safety and the safety of passengers.

If able, crew will set transponder accordingly to notify air traffic control.

[Organisation’s name] will place a curfew on communication by staff to any party (especially media) other than the relevant emergency authorities.

All incidents will be investigated and reported internally and appropriate changes to operating procedures will be made.

Special Security Directions [r2.43(2)(d)]

[Specify] is responsible for implementing and ensuring compliance with any special security direction (SSD) issued by the Secretary to [Organisation’s name].

Insert your procedures for responding to an SSD given by the Secretary here, including procedures to communicate direction with the aircraft. For example:

Upon receipt of an SSD, [position identified above] will determine the most effective way to implement the SSD.

[Position identified above] will consider which of the various parties who may be affected by the SSD will need to be informed, subject to the confidentiality requirements of the SSD, including:

70

Page 77: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

the pilot-in-command of any affected aircraft;

employees and staff;

passengers and the public;

relevant aviation industry participants;

law enforcement agencies; and

local fire and emergency agencies.

The Airport Security Committee will also communicate the SSD to all relevant stakeholders through meetings, telephone calls, emails or public broadcast systems, subject to the confidentiality requirements of the SSD.

Staff security awareness [r2.43(2)(e)]

In the event of a heightened security alert [Organisation’s name] will employ the following procedures to raise the awareness and alertness of staff to security threats, and their responsibility to report aviation security incidents and breaches:

Insert your measures and procedures. For example:

inform staff of the heightened security alert;

remind staff of reporting responsibilities regarding security incidents and breaches;

provide staff with details of the approved incident report form; and

ensure all staff are made aware of, and have access to, [Organisation’s name] operational procedure manual / security manual [insert the title of the relevant documentation for your organisation].

Contingency Plans [r2.43(2)(f)]

Select from the options below as appropriate for your operations.

[Organisation’s name] does not have additional security contingency plans or plans to respond to heightened security alerts in Australia.

OR

[Organisation’s name] has a number of security contingency procedures and plans related to heightened security alerts. These plans may also be activated upon:

receipt of an SSD;

a threat to aviation security in Australia or at any location around the world;

71

Page 78: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

a breach of security at [Organisation’s name]’s facilities, or an airport at which [Organisation’s name] has a facility;

the occurrence of an aviation security incident; and

any time declared by [specify].

These procedures and plans include, but are not limited to:

If your organisation’s procedures are already set out in a separate document then you may simply reference that document here (in detail, including version/date applicable etc.) and provide a copy of it with your TSP. Alternatively, insert your measures and procedures below. For example:

an increase in security personnel around facilities within a security controlled airport;

a requirement for parked aircraft to be guarded by security personnel at all times;

requests for assistance from the relevant law enforcement agency; and

restriction of aircraft operations.

72

Page 79: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Insert your security classification of this documentTSP – [Aircraft operator trading name]

Attachment 5: The person(s) responsible for maintaining security of the security restricted area and managing security at each access control point [r2.35A (2)]

Person responsible for maintaining security of the security restricted area at a designated airport

Access control points where security is managed

[Organisation name] e.g. Airport X terminal operations manager (only those areas around Terminal Z).

e.g. Baggage make up access corrider

Airport operator Y (all other areas) e.g. All other access poinstPlease insert additional rows as required.

Delete this attachment if your organisation is not responsible for a part of the security restricted area at a designated airport.

73

Page 80: Template (Unscreened Aircraft Operators): Developing a TSP€¦  · Web view[report/investigate etc.] security breaches, threats or aviation incident reports for ... will ensure

Final checks prior to submission

Final Checks Completed

All black text was provided to you as examples for context, however they must have been reviewed and amended by you to reflect your operations

All purple text should have been replaced or overwritten in black text by the information relevant to your operations.

All red text (except the security classification) should be deleted.

There should be no track changes or comments.

The Table of Contents should be updated (at the Home option on the toolbar, go to the Editing tab, choose Select, then press Select All. This will select the entire document. If you now press the F9 button, section headings and paragraph titles will be updated in the Table of Contents).

Check the contact details at Attachment 2 are current.

Ensure the Document Revision Record is completed.

Check that any maps provided include all necessary features as noted in the corresponding explanatory text within this guide.

Remove any passwords or other protection measures.

Ensure that your Statement has been signed and dated by the CEO (or authorised signatory).

Ensure your organisation retains identical electronic and hard copies of the document.

Send the completed TSP by email to [email protected] for consideration by the Department.

DELETE THIS PAGE PRIOR TO SUBMISSION

74