1. (a) Each licensee shall:

   1. (1) Be responsible for the continuing effectiveness of the security program;
   2. (2) Ensure that the security program is reviewed to confirm compliance with the requirements of He-P 4038.14 through He-P 4038.22 and that comprehensive actions are taken to correct any noncompliance that is identified;
   3. (3) Review the radioactive material security program content and implementation; and
   4. (4) Periodically, meaning at least annually, review the security program content and implementation.

2. (b) The results of the review, along with any recommendations, shall be documented. Each review report shall:

   1. (1) Identify conditions that are adverse to the proper performance of the security program, the cause of the condition(s), and, when appropriate, recommend corrective actions, and corrective actions taken; and
   2. (2) Review the findings and take any additional corrective actions necessary to preclude repetition of the condition, including reassessment of the deficient areas where indicated.
3. (c) The licensee shall maintain the review documentation for 3 years.

Source. #11105, eff 5-25-16; amd by #12744, eff 3-20-19