Navigate / EASA

ATM/ANS.AR.C.010 Oversight

Regulation (EU) 2023/203

(a)     The competent authority, or qualified entities acting on its behalf, shall conduct audits, in accordance with Article 5.

(b)     The audits referred to in point (a) shall:

(1)     provide the competent authority with evidence of compliance with the applicable requirements and with the implementing arrangements;

(2)     be independent of any internal auditing activities undertaken by the service provider;

(3)     cover complete implementing arrangements or elements thereof, and processes or services;

(4)     determine whether:

(i)      the implementing arrangements comply with the applicable requirements;

(ii)     the actions taken comply with the implementing arrangements and the applicable requirements;

(iii)     the results of actions taken match the results expected from the implementing arrangements.

(c)      The competent authority shall, on the basis of the evidence at its disposal, monitor the continuous compliance with the applicable requirements of this Regulation of the service providers under its oversight.

(d)     With regard to the certification and oversight of the organisation’s compliance with point ATM/ANS.OR.B.005A, in addition to complying with points (a) to (c), the competent authority shall review any approval granted under point IS.I.OR.200(e) of this Regulation or point IS.D.OR.200(e) of Delegated Regulation (EU) 2022/1645 following the applicable oversight audit cycle and whenever changes are implemented in the scope of work of the organisation.

[applicable from 22 February 2026 - Regulation (EU) 2023/203]