(a) An implementation plan filed under this part must be based on the organizational system description as defined in § 5.17 and describe the means of compliance (including, but not limited to, new or existing policies, processes, or procedures) used to meet the requirements of this part.

(b) A person required to submit an implementation plan under this part must make available to the Administrator, upon request, all necessary information and data that demonstrates that the SMS has been or will be implemented in accordance with the implementation plan.