Navigate / EASA

AMC1 ATS.OR.205(b)(5) Safety assessment and assurance of changes to the functional system

ED Decision 2017/001/R

VERIFICATION

The air traffic services provider should ensure that verification activities of the safety assessment process include verification that:

(a)     the full scope of the change is addressed throughout the whole assessment process, i.e. all the elements of the functional system or environment of operation that are changed and those unchanged elements that depend upon them and on which they depend are identified;

(b)     the way the service behaves complies with and does not contradict any applicable requirements placed on the changed service or the conditions attached to the providers certificate;

(c)      the specification of the way the service behaves is complete and correct;

(d)     the specification of the operational context is complete and correct;

(e)     the risk analysis is complete as per AMC1 ATS.OR.205(b)(3);

(f)      the safety requirements are correct and commensurate with the risk analysis;

(g)     the design is complete and correct with reference to the specification and correctly addresses the safety requirements;

(h)     the design was the one analysed; and

(i)      the implementation, to the intended degree of confidence, corresponds to that design and behaves only as specified in the given operational context.