The verifier shall implement the verification plan and, based on the risk analysis, the verifier shall check the implementation of the monitoring plan as approved by the competent authority or monitoring methodology plan, as appropriate.

To that end, the verifier shall at least carry out substantive testing consisting of analytical procedures, data verification and checking the monitoring methodology and check the following:

(a) the data flow activities and the systems used in the data flow, including information technology systems;

(b) whether the control activities of the operator or aircraft operator are appropriately documented, implemented, maintained and effective to mitigate the inherent risks;

(c) whether the procedures listed in the monitoring plan or monitoring methodology plan, as appropriate, are effective to mitigate the inherent risks and control risks and whether the procedures are implemented, sufficiently documented and properly maintained.

For the purposes of point (a) of the second paragraph, the verifier shall track the data flow following the sequence and interaction of the data flow activities from primary source data to the compilation of the operator's or aircraft operator's report.