GM4 to
AMC4 ATS.OR.205(a)(2) Safety assessment and assurance of changes to the
functional system
ED Decision 2019/022/R
ASSURANCE — EXAMPLES OF EXISTING INDUSTRIAL STANDARDS
(a) The service provider is responsible for the definition of the software assurance processes. In this definition of processes, the service provider may consider the guidance material contained in existing industrial standards for the software assurance considerations of software. It should be considered that not all standards address all aspects required and the service provider may need to define additional software assurance processes. The guidance material typically includes:
(1) objectives of the software life cycle processes;
(2) activities for satisfaction of those objectives;
(3) descriptions of the evidence, in the form of software life cycle data, that indicates that the objectives have been satisfied;
(4) variations according to the SWAL, to accommodate the different levels of rigour of the software assurances; and
(5) particular aspects (e.g. previously developed software) that may be applicable to certain applications.
(b) The following table presents some of the existing industrial standards (at the latest available issue) used by the stakeholders:
|
Document
title |
Reference |
Date
|
|
Software Integrity Assurance Considerations for Communication, Navigation, Surveillance and Air Traffic Management (CNS/ATM) Systems. |
EUROCAE ED-109A/ RTCA DO-278A |
January 2012 |
|
Guidelines for ANS Software Safety Assurance |
EUROCAE ED-153 |
August 2009 |
|
Functional safety of electrical/electronic/ programmable electronic safety-related systems – Part 3: Software requirements |
IEC 61508 – Part 3 |
April 2010 |
|
Software Considerations in Airborne Systems and Equipment Certification |
EUROCAE ED-12C/ RTCA DO-178C |
January 2012 |
EUROCAE ED-109A/RTCA DO-278A and EUROCAE ED-12C/RTCA DO-178C make reference to some external documents (supplements), which are integral part of the standard for the use of some particular technologies and development techniques. The supplements are the following:
(1) Formal Methods Supplement to ED-12C and ED-109A (EUROCAE ED-216/RTCA DO-333)
(2) Object-Oriented Technology and related Techniques Supplement to ED-12C and ED-109A (EUROCAE ED-217/RTCA DO-332)
(3) Model-Based Development and Verification Supplement to ED-12C and ED-109A (EUROCAE ED-218/RTCA DO-331)
When tools are used during the software development lifecycle, EUROCAE ED-215/RTCA DO-330 ‘Software Tool Qualification Considerations’ may be considered in addition to EUROCAE ED-12C/RTCA DO-178C and EUROCAE ED-109A/RTCA DO-278A.
(c) The definition of the software assurance processes may be based on one of these industrial standards, without combining provisions from different standards as far as the consistency and validation of each of the industrial standards have only been performed at individual level by each specific standardisation group.
To ensure aviation safety, air navigation service providers must define robust software assurance processes when changing functional systems. Guidance from industrial standards like EUROCAE ED-109A, ED-12C, and IEC 61508-3 can be used, but providers remain responsible for comprehensive safety validation and consistency.
* Summary by Aviation.Bot - Always consult the original document for the most accurate information.
Loading collections...