ORGH.MGM.205 Contracted services or products

RESPONSIBILITIES WHEN CONTRACTING SERVICES

(a)The GH organisation may contract certain activities included in the scope of its declaration to thirdparty service providers, including other GH organisations.

(b)A written agreement should exist between the GH organisation and the contracted service provider that clearly defines at least the contracted services and the responsibilities of both parties.

(c)The GH organisation should include the contracted safetyrelated activities relevant to the agreement in its safety management and compliance monitoring programmes.

(d)The GH organisation should ensure that the contracted service provider has the necessary authorisation or approval to provide the services, as required, that the services are appropriate for the purpose, and the contracted service provider has the resources and expertise to undertake the task.

(e)The GH organisation should notify the aircraft operator and/or aerodrome operator concerned, where relevant, of any services carried out by third parties on its behalf.

AUDITS PERFORMED BY THIRDPARTY AUDITORS

(a)The GH organisation may contract a thirdparty service provider to perform its internal audits and inspections as part of its compliance monitoring responsibilities, in accordance with point ORGH.MGM.200(b)(6). In such a case, the GH organisation should ensure the following:

(1)a documented arrangement has been established with the thirdparty auditor;

(2)the audit applies an evaluation method designed to assess the operational, management and control systems of the GH organisation;

(3)the thirdparty auditor and its evaluation method are independent and the auditors are impartial;

(4)the auditors are appropriately qualified and have sufficient knowledge, experience and training, including onthejob training, to perform their allocated tasks;

(5)audits or at least the parts of them verifying the GH operations are performed onsite;

(6)access of the thirdparty auditor to the relevant data and facilities is granted at the level necessary to verify compliance with the applicable requirements;

(7)the GH organisation is granted access to the full audit report;

(8)procedures have been established for monitoring continued compliance of the organisation with the applicable requirements; and

(9)procedures have been established to notify the GH organisation of any noncompliance with the applicable requirements and findings raised, the corrective actions to be taken, the followup of these corrective actions and the closure of findings.

(b)The full audit report of the thirdparty auditor should be made available to the competent authority upon request.

THIRDPARTY SERVICE PROVIDERS

(a)It is recommended that the GH organisation consider, when selecting the providers of contracted services, relevant references and criteria such as safety and security aspects, or whether the safety culture in the contracted organisation is commensurate with the one in its own organisation, to ensure the safety of its own operation.

(b)If the contracted service is a GH service listed in Article 2(2) of Commission Delegated Regulation (EU) 2025/20, the provider of those services is bound to comply with that Regulation.