(a) The oversight agency shall require the rail transit agency to develop and document a process for the performance of on-going internal safety and security reviews in its system safety program plan.

(b) The internal safety and security review process must, at a minimum:

(1) Describe the process used by the rail transit agency to determine if all identified elements of its system safety program plan and system security plan are performing as intended; and

(2) Ensure that all elements of the system safety program plan and system security plan are reviewed in an on-going manner and completed over a three-year cycle.

(c) The rail transit agency must notify the oversight agency at least thirty (30) days before the conduct of scheduled internal safety and security reviews.

(d) The rail transit agency shall submit to the oversight agency any checklists or procedures it will use during the safety portion of its review.

(e) The rail transit agency shall make available to the oversight agency any checklists or procedures subject to the security portion of its review, consistent with §659.23(e).

(f) The oversight agency shall require the rail transit agency to annually submit a report documenting internal safety and security review activities and the status of subsequent findings and corrective actions. The security part of this report must be made available for oversight agency review, consistent with §659.23(e).

(g) The annual report must be accompanied by a formal letter of certification signed by the rail transit agency's chief executive, indicating that the rail transit agency is in compliance with its system safety program plan and system security plan.

(h) If the rail transit agency determines that findings from its internal safety and security reviews indicate that the rail transit agency is not in compliance with its system safety program plan or system security plan, the chief executive must identify the activities the rail transit agency will take to achieve compliance.

(i) The oversight agency must formally review and approve the annual report.