Regulation (EU) 2020/2193
(a) The organisation shall establish, implement and maintain a management system that includes:
(1) clearly defined lines of responsibility and accountability throughout the organisation, including a direct safety accountability of the accountable manager;
(2) a description of the overall philosophies and principles of the organisation with regard to safety, referred to as the safety policy;
(3) the identification of aviation safety hazards entailed by the activities of the organisation, their evaluation and the management of associated risks, including taking actions to mitigate the risk and verify their effectiveness;
(4) maintaining personnel trained and competent to perform their tasks;
(5) documentation of all management system key processes, including a process for making personnel aware of their responsibilities and the procedure for amending this documentation;
(6) a function to monitor compliance of the organisation with the relevant requirements. Compliance monitoring shall include a feedback system of findings to the accountable manager to ensure effective implementation of corrective actions as necessary; and
(7) any additional relevant requirements prescribed in Regulation (EU) 2018/1139 and in Regulation (EU) No 376/2014 as well as in the delegated and implementing acts adopted on the basis thereof.
(b) The management system shall correspond to the size of the organisation and the nature and complexity of its activities,taking into account the hazards and associated risks inherent in these activities.
(c) Notwithstanding point (a), in an organisation providing training only for the LAPL, PPL, SPL or BPL and the associated ratings or certificates, safety risk management and compliance monitoring defined in points (a)(3) and (a)(6) may be accomplished by an organisational review, to be performed at least once every calendar year. The competent authority shall be notified about the results of this review by the organisation without undue delay.