ATM/ANS.AR.C.010 Oversight

• Regulation (EU) 2023/203 found in: ATM/ANS Provision of Services (2017/373) (Mar 2025)
• Regulation (EU) 2017/373 found in: ATM/ANS Provision of Services (2017/373) (Feb 2023)

ATM/ANS.AR.C.010 Oversight Regulation (EU) 2023/203 (a) The competent authority, or qualified entities acting on its behalf, shall conduct audits, in accordance with Article 5. (b) The audits referred to in point (a) shall: (1) provide the competent authority with evidence of compliance with the applicable requirements and with the implementing arrangements; (2) be independent of any internal auditing activities undertaken by the service provider; (3) cover complete implementing arrangements or elements thereof, and processes or services; (4) determine whether: (i) the implementing arrangements comply with the applicable requirements; (ii) the actions taken comply with the implementing arrangements and the applicable requirements; (iii) the results of actions taken match the results expected from the implementing arrangements. (c) The competent authority shall, on the basis of the evidence at its disposal, monitor the continuous compliance with the applicable requirements of this Regulation of the service providers under its oversight. (d) With regard to the certification and oversight of the organisation’s compliance with point [ATM/ANS.OR.B.005A](#_DxCrossRefBm647742050), in addition to complying with points (a) to (c), the competent authority shall review any approval granted under point IS.I.OR.200(e) of this Regulation or point IS.D.OR.200(e) of Delegated Regulation (EU) 2022/1645 following the applicable oversight audit cycle and whenever changes are implemented in the scope of work of the organisation. *[applicable from 22 February 2026 - Regulation (EU) 2023/203]* ATM/ANS.AR.C.010 Oversight Regulation (EU) 2017/373 (a)       The competent authority, or qualified entities acting on its behalf, shall conduct audits, in accordance with [Article 5](#_DxCrossRefBm1726554818). (b)       The audits referred to in point (a) shall: (1)       provide the competent authority with evidence of compliance with the applicable requirements and with the implementing arrangements; (2)       be independent of any internal auditing activities undertaken by the service provider; (3)       cover complete implementing arrangements or elements thereof, and processes or services; (4)       determine whether: (i)        the implementing arrangements comply with the applicable requirements; (ii)       the actions taken comply with the implementing arrangements and the applicable requirements; (iii)      the results of actions taken match the results expected from the implementing arrangements. (c)       The competent authority shall, on the basis of the evidence at its disposal, monitor the continuous compliance with the applicable requirements of this Regulation of the service providers under its oversight.