ANNEX IISupplementary provisions
ANNEX II In Annex VI to Regulation (EU) No 1178/2011, point ARA.GEN.300(g) is replaced by the following: ‘(g) With regard to the certification and oversight of the organisation’s compliance with point ORA.GEN.200A of this Annex, in addition to complying with points (a) to (f) of this point, the competent authority shall review any approval granted under point IS.I.OR.200(e) of Annex II to Commission Implementing Regulation (EU) 2023/203 ( *1 ) following the applicable oversight audit cycle and whenever changes are implemented in the scope of work of the organisation. ( *1 ) Commission Implementing Regulation (EU) 2023/203 of 27 October 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664, and for competent authorities covered by Commission Regulations (EU) No 748/2012, (EU) No 1321/2014, (EU) No 965/2012, (EU) No 1178/2011, (EU) 2015/340 and (EU) No 139/2014, Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 and amending Commission Regulations (EU) No 1178/2011, (EU) No 748/2012, (EU) No 965/2012, (EU) No 139/2014, (EU) No 1321/2014, (EU) 2015/340, and Commission Implementing Regulations (EU) 2017/373 and (EU) 2021/664 ( OJ L 31, 2.2.2023, p. 1 , ELI: http://data.europa.eu/eli/reg_impl/2023/203/oj) .’.’