GM2
ATS.OR.205(a)(1) Safety assessment and assurance of changes to the functional
system
ED
Decision 2017/001/R
(a) The description of the elements being
changed includes the nature, functionality, location, performance, maintenance
tasks, training and responsibilities of these elements, where applicable. The
description of interfaces and interactions, between machines and between
humans and machines, should include communication means, e.g. language,
phraseology, protocol, format, order and timing and transmission means, where
applicable. In addition, it includes the description of the context in which
they operate.
(b) There are two main aspects to consider in
evaluating the scope of a change:
(1) The interactions within the changed
functional system;
(2) The interactions within the changing
functional system, i.e. those that occur during transitions from the current
functional system to the changed functional system. During such transitions,
components are replaced/installed in the functional system. These installation
activities are interactions within the changing functional system and are to
be included within the scope of the change.
As each
transition can be treated as a change to the functional system, the
identification of both the above has a common approach described below.
(c) The scope of the change is defined as the
set of the changed components and affected components. In order to identify
the affected components and the changed components, it is necessary to:
(1) know which components will be changed;
(2) know which component’s (components’)
behaviour might be directly affected by the changed components, although it is
(they are) not changed itself (themselves);
(3) detect indirectly affected components by
identifying:
(i) new interactions introduced by the
changed or directly affected components; and/or
(ii) interactions with changed or directly
affected components via the environment.
(4) Furthermore, directly and indirectly
affected components will be identified as a result of applying the above
iteratively to any directly and indirectly affected components that have been
identified previously.
The scope
of the change is the set of changed, directly impacted and indirectly impacted
components identified when the iteration identifies no new components.
(d) The context in which the
changed service is intended to operate (see ATS.OR.205(a)(1)(iii))
includes the interface through which the service will be delivered to its
users.
EASA aviation regulations require a thorough safety assessment for changes to functional systems. This assessment must define the change's scope, including changed and affected components. Consider interactions within the system and during transitions, identifying direct and indirect impacts through iterative analysis until no new components are found.
* Summary by Aviation.Bot - Always consult the original document for the most accurate information.
Loading collections...