M1 — Strategic mitigations for ground risk

Criterion #1 (Definition of the ground risk buffer)

A ground risk buffer with at least a 1:1 rule¹ or for rotary wing UA defined using a ballistic methodology approach acceptable to the competent authority.

The ground risk buffer takes into consideration:

(a) improbable² single malfunctions or failures (including the projection of high energy parts such as rotors and propellers) which would lead to an operation outside the operational volume;

(b) meteorological conditions (e.g. wind);

(c) UAS latencies (e.g. latencies that affect the timely manoeuvrability of the UA);

(d) UA behaviour when activating a technical containment measure; and

(e) UA performance.

Same as medium³

Comments

¹ If the UA is planned to operate at an altitude of 150 m, the ground risk buffer should be a minimum of 150 m.

² For the purpose of this assessment, the term ‘improbable’ should be interpreted in a qualitative way as ‘Unlikely to occur in each UAS during its total life, but which may occur several times when considering the total operational life of a number of UAS of this type’.

³ The distinction between a medium and a high level of robustness for this criterion is achieved through the level of assurance (Table 3 below).

Criterion #2 (Evaluation of people at risk)

The applicant evaluates the area of operations by means of on-site inspections or appropriate appraisals to justify lowering the density of the people at risk (e.g. a residential area during daytime when some people may not be present or an industrial area at night time for the same reason).

The applicant evaluates the area of operations by use of authoritative density data (e.g. data from the U‑space data service provider) relevant for the proposed area and time of operation to substantiate a lower density of people at risk.

If the applicant claims a reduction, due to a sheltered operational environment, the applicant:

(a) uses a UA of less than 25 kg and not flying above 174 knots⁴, and

(b) demonstrates that although the operation is conducted in a populated environment, it is reasonable to consider that most of the non-involved persons will be located within a building⁵.

Same as medium.

Comments

N/A

⁴ as per MITRE presentation given during the UAS Technical Analysis and Applications Center (TAAC) conference in 2016 titled ‘UAS EXCOM Science and Research Panel (SARP) 2016 TAAC Update’ - PR 16‑3979

⁵ The consideration of this mitigation may vary based on the local conditions.

N/A

M1 — Strategic mitigations for ground risk

Criterion #1

(Definition of the ground risk buffer)

The applicant declares that the required level of integrity is achieved¹.

The applicant has supporting evidence to claim that the required level of integrity has been achieved. This is typically done by means of testing, analysis, simulation², inspection, design review or through operational experience.

The claimed level of integrity is validated by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

¹ Supporting evidence may or may not be available.

² When simulation is used, the validity of the targeted environment used in the simulation needs to be justified.

N/A

Criterion #2 (Evaluation of people at risk)

The applicant declares that the required level of integrity has been achieved³.

The density data used for the claim of risk reduction is an average density map for the date/time of the operation from a static sourcing (e.g. census data for night time ops).

In addition, for localised operations (e.g. intra-city delivery or infrastructure inspection), the applicant submits the proposed route/area of operation to the applicable authority (e.g. city police, office of civil protection, infrastructure owner etc.) to verify the claim of a reduced number of people at risk.

Same as medium; however, the density data used for the claim of risk reduction is a near-real time density map from a dynamic sourcing (e.g. cellular user data) and applicable for the date/time of the operation.

Comments

³ Supporting evidence may or may not be available

N/A

N/A

M1 — Tethered operation

Criterion #1

(Technical design)

Does not meet the ‘medium’ level criteria

(a) The length of the line is adequate to contain the UA in the operational volume and reduce the number of people at risk.

(b) The strength of the line is compatible with the ultimate loads¹ expected during the operation.

(c) The strength of the attachment points is compatible with the ultimate loads¹ expected during the operation.

(d) The tether cannot be cut by the rotating propellers.

Same as medium²

Comments

N/A

¹ Ultimate loads are identified as the maximum loads to be expected in service, including all the possible nominal and failure scenarios multiplied by a 1.5 safety factor.

² The distinction between a medium and a high level of robustness for this criterion is achieved through the level of assurance (Table B.5 below).

Criterion #2

(Procedures)

Does not meet the ‘medium’ level criteria

The applicant has procedures to install and periodically inspect the condition of the tether.

Same as medium³

Comments

N/A

³ The distinction between a medium and a high level of robustness for this criterion is achieved through the level of assurance (Table B.5 below).

Level of assurance

Low

Medium

High

M1 — Tethered operation

Criterion #1

(Technical design)

Does not meet the ‘medium’ level criteria

The applicant has supporting evidence (including the specifications of the tether material) to claim that the required level of integrity is achieved.

(a) This is typically achieved through testing or operational experience.

(b) Tests can be based on simulations; however, the validity of the target environment used in the simulation needs to be justified.

The claimed level of integrity is validated by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

N/A

N/A

N/A

Criterion #2

(Procedures)

(a) Procedures do not require validation against either a standard or a means of compliance considered adequate by the competent authority of the MS.

(b) The adequacy of the procedures and checklists is declared.

(a) Procedures are validated against standards considered adequate by the competent authority of the MS and/or in accordance with the means of compliance acceptable to that authority¹.

(b) The adequacy of the procedures is proven through:

(1) dedicated flight tests; or

(2) simulation, provided that the representativeness of the simulation means is proven to be valid for the intended purpose with positive results; or

(3) any other means acceptable to the competent authority of the MS.

Same as medium. In addition:

(a) Flight tests performed to validate the procedures cover the complete flight envelope or are proven to be conservative.

(b) The procedures, flight tests and simulations are validated by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

N/A

¹ AMC2 UAS.SPEC.030(3)(e) (Operational procedures for medium and high levels of robustness) is considered an acceptable means of compliance.

N/A

Level of integrity

Low/None

Medium

High

M2 — Effects of UA impact dynamics are reduced (e.g. parachute)

Criterion #1

(Technical design)

Does not meet the ‘medium’ level criterion

(a) Effects of impact dynamics and post impact hazards¹ are significantly reduced although it can be assumed that a fatality may still occur.

(b) When applicable, in case of malfunctions, failures or any combinations thereof that may lead to a crash, the UAS contains all the elements required for the activation of the mitigation.

(c) When applicable, any failure or malfunction of the proposed mitigation itself (e.g. inadvertent activation) does not adversely affect the safety of the operation.

Same as medium. In addition:

(a) When applicable, the activation of the mitigation is automated².

(b) The effects of impact dynamics and post impact hazards are reduced to a level where it can be reasonably assumed that a fatality will not occur³.

Comments

N/A

¹ Examples of post impact hazards include fires and the release of high-energy parts.

² The applicant retains the discretion to implement an additional manual activation function.

³ Emerging research and upcoming industry standards will help applicants to substantiate compliance with this integrity criterion.

Criterion #2

(Procedures, if applicable)

Any equipment used to reduce the effect of the UA impact dynamics is installed and maintained in accordance with the manufacturer’s instructions.⁴

Comments / Notes

⁴ The distinction between a low, a medium and a high level of robustness for this criterion is achieved through the level of assurance (Table B.7 below).

Criterion #3

(Training, if applicable)

Personnel responsible for the installation and maintenance of the measures proposed to reduce the effect of the UA impact dynamics are identified and trained by the applicant.⁵

Comments / Notes

⁵ The distinction between a low, a medium and a high level of robustness for this criterion is achieved through the level of assurance (Table B.7 below).

M2 — Effects of UA impact dynamics are reduced (e.g. parachute)

Level of assurance

Low/None

Medium

High

Criterion #1

(Technical design)

The applicant declares that the required level of integrity has been achieved¹.

The applicant has supporting evidence to claim that the required level of integrity is achieved. This is typically² done by means of testing, analysis, simulation³, inspection, design review or through operational experience.

The applicant may declare compliance with MoC to Light-UAS.2512⁴ providing the supporting evidence defined in it.

The competent authority should request the applicant to use a UAS for which EASA has verified the claimed integrity through a DVR.

Comments

¹ Supporting evidence may or may not be available.

² The use of industry standards is encouraged when developing mitigations used to reduce the effect of ground impact.

³ When simulation is used, the validity of the targeted environment used in the simulation needs to be justified.

⁴https://www.easa.europa.eu/en/document-library/product-certification-consultations/means-compliance-mitigation-means-m2-ref-amc

Criterion #2

(Procedures, if applicable)

(a) Procedures do not require validation against either a standard or a means of compliance considered adequate by the competent authority of the MS.

(b) The adequacy of the procedures and checklists is declared.

(a) Procedures are validated against standards considered adequate by the competent authority of the MS and/or in accordance with the means of compliance acceptable to that authority¹.

(b) The adequacy of the procedures is proven through:

(1) dedicated flight tests; or

(2) simulation, provided that the representativeness of the simulation means is proven to be valid for the intended purpose with positive results; or

(3) any other means acceptable to the competent authority of the MS

Same as medium. In addition:

(a) Flight tests performed to validate the procedures cover the complete flight envelope or are proven to be conservative.

(b) The procedures, flight tests and simulations are validated by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

N/A

¹ AMC2 UAS.SPEC.030(3)(e) (Operational procedures for medium and high levels of robustness) is considered an acceptable means of compliance.

N/A

Criterion #3

(Training, if applicable)

Training is self-declared (with evidence available)

(a) Training syllabus is available.

(b) The UAS operator provides competency‑based, theoretical and practical training.

(a) Training syllabus is validated by the competent authority of the MS or by an entity that is designated by the competent authority.

(b) Remote crew competencies are verified by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

N/A

N/A

N/A

M3 — An ERP is in place, UAS operator validated and effective

Criteria

No ERP is available, or the ERP does not cover the elements identified to meet a ‘medium’ or ‘high’ level of integrity

The ERP:

(a) is suitable for the situation;

(b) limits the escalating effects;

(c) defines criteria to identify an emergency situation;

(d) is practical to use;

(e) clearly delineates the duties of remote crew member(s).

Same as medium. In addition, in case of a loss of control of the operation, the ERP is shown to significantly reduce the number of people at risk, although it can be assumed that a fatality may still occur.

Comments

N/A

N/A

N/A

M3 — An ERP is in place, UAS operator validated and effective

Criterion #1 (Procedures)

(a) Procedures do not require validation against either a standard or a means of compliance considered adequate by the competent authority of the MS.

(b) The adequacy of the procedures and checklists is declared.

(a) The ERP is developed to standards considered adequate by the competent authority of the MS and/or in accordance with means of compliance acceptable to that authority¹.

(b) The ERP is validated through a representative tabletop exercise² consistent with the ERP training syllabus.

Same as medium. In addition:

(a) The ERP and the effectiveness of the plan with respect to limiting the number of people at risk are validated by the competent authority of the MS or by an entity that is designated by the competent authority.

(b) The applicant has coordinated and agreed the ERP with all third parties identified in the plan.

(c) The representativeness of the tabletop exercise is validated by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

N/A

¹ AMC3 UAS.SPEC.030(3)(e) (ERP for medium and high level of robustness) is considered an acceptable means of compliance.

² The tabletop exercise may or may not involve all third parties identified in the ERP.

N/A

Criterion #2 (Training)

Does not meet the ‘medium’ level criterion

(a) An ERP training syllabus is available.

(b) A record of the ERP training completed by the relevant staff is established and kept up to date.

Same as medium. In addition, the competencies of the relevant staff are verified by the competent authority of the MS or by an entity that is designated by the competent authority.

Comments

N/A

N/A

N/A