What conditions must a ground handling organisation ensure when contracting a third-party auditor to perform internal audits and inspections as part of its compliance monitoring responsibilities?

The GH organisation should ensure: (1) a documented arrangement with the third-party auditor; (2) the audit applies an evaluation method designed to assess the operational, management and control systems; (3) the third-party auditor and its evaluation method are independent and auditors are impartial; (4) auditors are appropriately qualified with sufficient knowledge, experience and training including on-the-job training; (5) audits or at least parts verifying GH operations are performed on-site; (6) access to relevant data and facilities is granted at the level necessary to verify compliance; (7) the GH organisation is granted access to the full audit report; (8) procedures are established for monitoring continued compliance; and (9) procedures are established to notify the GH organisation of any non-compliance, findings, corrective actions, follow-up and closure of findings.

What specific requirements apply to the independence and qualifications of third-party auditors contracted by a ground handling organisation?

The third-party auditor and its evaluation method must be independent, and the auditors must be impartial. Additionally, the auditors must be appropriately qualified and have sufficient knowledge, experience and training, including on-the-job training, to perform their allocated tasks.

How should a ground handling organisation ensure that a contracted third-party auditor verifies its operations on-site?

The GH organisation should ensure that audits, or at least the parts of them verifying the GH operations, are performed on-site.

What documented arrangement is required when a ground handling organisation contracts a third-party auditor?

A documented arrangement must be established with the third-party auditor.

AMC2 ORGH.MGM.205 Contracted services or products

Q: What access rights must be granted to a third-party auditor and to the GH organisation under a contracted audit arrangement?

The third-party auditor must be granted access to the relevant data and facilities at the level necessary to verify compliance with the applicable requirements. The GH organisation must be granted access to the full audit report.

Q: What must be included in the procedures for monitoring continued compliance when using a third-party auditor?

Procedures must be established for monitoring continued compliance of the organisation with the applicable requirements.

Q: What procedures must be established regarding non-compliance and corrective actions when a third-party auditor is used?

Procedures must be established to notify the GH organisation of any non-compliance with the applicable requirements and findings raised, the corrective actions to be taken, the follow-up of these corrective actions, and the closure of findings.

Q: To whom must the full audit report of a third-party auditor be made available upon request?

The full audit report of the third-party auditor should be made available to the competent authority upon request.

Q: What is the regulatory basis for a ground handling organisation to contract a third-party service provider for internal audits and inspections?

The GH organisation may contract a third-party service provider to perform its internal audits and inspections as part of its compliance monitoring responsibilities, in accordance with point ORGH.MGM.200(b)(6).

Q: What evaluation method must the audit apply when a third-party auditor is contracted?

The audit must apply an evaluation method designed to assess the operational, management and control systems of the GH organisation.

Navigate / EASA

Ask question Discover more Add to collection

AMC2 ORGH.MGM.205 Contracted services or products

ED Decision 2025/007/R

AUDITS PERFORMED BY THIRD‑PARTY AUDITORS

(a) The GH organisation may contract a third‑party service provider to perform its internal audits and inspections as part of its compliance monitoring responsibilities, in accordance with point ORGH.MGM.200(b)(6). In such a case, the GH organisation should ensure the following:

(1) a documented arrangement has been established with the third‑party auditor;

(2) the audit applies an evaluation method designed to assess the operational, management and control systems of the GH organisation;

(3) the third‑party auditor and its evaluation method are independent and the auditors are impartial;

(4) the auditors are appropriately qualified and have sufficient knowledge, experience and training, including on‑the‑job training, to perform their allocated tasks;

(5) audits or at least the parts of them verifying the GH operations are performed on‑site;

(6) access of the third‑party auditor to the relevant data and facilities is granted at the level necessary to verify compliance with the applicable requirements;

(7) the GH organisation is granted access to the full audit report;

(8) procedures have been established for monitoring continued compliance of the organisation with the applicable requirements; and

(9) procedures have been established to notify the GH organisation of any non‑compliance with the applicable requirements and findings raised, the corrective actions to be taken, the follow‑up of these corrective actions and the closure of findings.

(b) The full audit report of the third‑party auditor should be made available to the competent authority upon request.

Details

Source-Title: AMC2 ORGH.MGM.205 Contracted services or products View latest amendments

Erulesid: ERULES-1963177438-23583 Compare versions

Domain: Ground Handling

Amendedby: Issue 1

Applicabilitydate: 27 March, 2028

Entryintoforcedate: 8 July, 2025

Regulatorysource: ED Decision 2025/007/R Navigate

Regulatorysubject: Part-ORGH

Typeofcontent: AMC to DR

Origin: EASA

Category: EAR