Or. Admin. Code § 741-065-0040
Current through Register Vol. 64, No. 1, January 1, 2025
Section 741-065-0040 - Monitoring Requirements for Plans(1) Monitoring the System Safety Program Plan (a) The SSOA will review, approve, oversee and enforce the implementation of and compliance with the System Safety Program Plan.(b) At least once every three years, either at one time or over a three year period, the SSOA or its contractor shall conduct an audit of the implementation of each RTA's System Safety Program Plan to verify compliance with, and evaluate the effectiveness of, the plan.(c) Following each on-site audit, the SSOA or its contractor shall prepare a written report of its findings and recommendations, and the need, if any, for updating the system safety program plan or revising implementation of the plan. If the report identifies deficiencies for which a corrective action plan (CAP) is required, the RTA shall submit a CAP to the SSOA within 30 days after receiving the report, or within a different time period if specified by the SSOA. The CAP must comply with the requirements in OAR 741-065-0072.(2) Monitoring the System Security Plan (a) The SSOA or its contractor may investigate and review the operation of each RTA to determine whether the RTA's actual security practices comply with its System Security Plan.(b) At least once every three years, the SSOA or its contractor shall conduct an on-site review of the implementation of each RTA's System Security Plan to verify compliance with, and evaluate the effectiveness of, the plan.(c) Following each on-site review, the SSOA or its contractor shall prepare a written report of its findings and recommendations, and the need, if any, for updating the plan or revising implementation of the plan. If the report identifies deficiencies for which a CAP is required, the RTA shall submit a CAP to the SSOA within 30 days after receiving the report, or within a different time period if specified by the SSOA. The CAP must comply with the requirements in OAR 741-065-0072. (d) Sensitive security information, as defined in OAR 741-065-0020(35), may not be disseminated or publicly disclosed unless required by ORS 192.410 to 192.505.(3) Monitoring the Emergency Preparedness and Response Plan (a) The SSOA or its contractor may investigate and review the operation of each RTA to determine whether the RTA's actual emergency management practices comply with its Emergency Preparedness and Response Plan.(b) At least once every three years, the SSOA or its contractor shall conduct an on-site review of the implementation of each RTA's Emergency Preparedness and Response Plan to verify compliance with, and evaluate the effectiveness of, the plan.(c) Following each on-site review, the SSOA or its contractor shall prepare a written report of its findings and recommendations, and the need, if any, for updating or revising the plan. If the report identifies deficiencies for which a CAP is required, the RTA shall submit a CAP to the SSOA within 30 days after receiving the report, or within a different time period if specified by the SSOA. The CAP must comply with the requirements in OAR 741-065-0072.Or. Admin. Code § 741-065-0040
RD 2-2021, adopt filed 07/19/2021, effective 7/19/2021Statutory/Other Authority: ORS 184.619, 192.502, 823.011, 824.045, 824.990, 49 CFR 15 & 49 CFR 1520
Statutes/Other Implemented: ORS 183.745 & 824.045