(a) Each indirect air carrier shall adopt and carry out a security program that --
(1) Is designed to prevent or deter the unauthorized introduction of any explosive or incendiary device into any package cargo intended for carriage by air;
(2) Is in writing and signed by the carrier or any person delegated authority in this matter;
(3) Includes a system of security safeguards acceptable to the Administrator; and
(4) Has been approved by the Administrator.
(b) Each indirect air carrier shall maintain at least one complete copy of its security program at its principal business office, and a complete copy or the pertinent portions of its security program or appropriate implementing instructions at each office where package cargo is accepted, and shall make those documents available for inspection upon request of any Civil Aviation Security Special Agent.
(c) Each indirect air carrier shall --
(1) Restrict the distribution, disclosure, and vailability of sensitive security information, as defined in
part 191 of this chapter, to persons with a need-to-know; and
(2) Refer requests for sensitive security information by other persons to the Assistant Administrator for Civil Aviation Security.
[Doc. No. 19840, 44 FR 72345, Dec. 13, 1979, as amended by Amdt. 109-1, 54 FR 39293, Sept. 25, 1989; Amdt. 109-3, 62 FR 13744, Mar. 21, 1997]