GM3 ATM/ANS.OR.C.005(a)(2) Safety support
assessment and assurance of changes to the functional system
ED Decision 2017/001/R
The complete behaviour is limited to the scope of the change. Safety support requirements only apply to the parts of a system affected by the change. In other words, if parts of a system can be isolated from each other and only some parts are affected by the change, then these are the only parts that are of concern and so will have safety support requirements attached to them.
The following list contains examples, not exhaustive, of safety support requirements that specify:
(a) for equipment, the complete behaviour, in terms of functions, accuracy, timing, order, format, capacity, resource usage, robustness to abnormal conditions, overload tolerance, availability, reliability, confidence and integrity;
(b) for people, their performance in terms of tasks (e.g. accuracy, response times, acceptable workload, resilience to distraction, self-awareness, ‘team-playerness’, adaptability, reliability, confidence, skills, and knowledge in relation to their tasks);
(c) for procedures, the circumstances for their enactment, the resources needed to perform the procedure (i.e. people and equipment), the sequence of actions to be performed and the timing and accuracy of the actions; and
(d) interactions between all parts of the system.
Changes to air traffic management systems require safety assessments focused on affected components. These assessments must define performance requirements for equipment, personnel, and procedures, including accuracy, reliability, and resilience. Crucially, the assessment should also address interactions between all system elements to ensure overall safety.
* Summary by Aviation.Bot - Always consult the original document for the most accurate information.
Loading collections...