AMC2 ATS.OR.205(b)(3) Safety assessment and assurance of changes to the functional system

• ED Decision 2017/001/R found in: ATM/ANS Provision of Services (2017/373) (Feb 2023)

AMC2 ATS.OR.205(b)(3) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R SEVERITY CLASSIFICATION OF ACCIDENTS LEADING TO HARMFUL EFFECTS When performing a risk analysis in terms of risk, the air traffic services provider should ensure that the harmful effects of all hazards are allocated a safety severity category and that, where there is more than one safety severity category of harm, any severity classification scheme satisfies the following criteria: (a)       The scheme is independent of the causes of the accidents that it classifies, i.e. the severity of the worst accident does not depend upon whether it was caused by an equipment malfunction or human error; (b)       The scheme permits unique assignment of every harmful effect to a severity category; (c)       The severity categories are expressed in terms of a single scalar quantity and in terms relevant to the field of their application; (d)       The level of granularity (i.e. the span of the categories) is appropriate to the field of their application; (e)       The scheme is supported by rules for assigning a harmful effect unambiguously to a severity category; and (f)        The scheme is consistent with the air traffic services providers views of the severity of the harmful effects covered and can be shown to incorporate societal views of their severity. AMC2 ATS.OR.205(b)(3) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R SEVERITY CLASSIFICATION OF ACCIDENTS LEADING TO HARMFUL EFFECTS When performing a risk analysis in terms of risk, the air traffic services provider should ensure that the harmful effects of all hazards are allocated a safety severity category and that, where there is more than one safety severity category of harm, any severity classification scheme satisfies the following criteria: (a) The scheme is independent of the causes of the accidents that it classifies, i.e. the severity of the worst accident does not depend upon whether it was caused by an equipment malfunction or human error; (b) The scheme permits unique assignment of every harmful effect to a severity category; (c) The severity categories are expressed in terms of a single scalar quantity and in terms relevant to the field of their application; (d) The level of granularity (i.e. the span of the categories) is appropriate to the field of their application; (e) The scheme is supported by rules for assigning a harmful effect unambiguously to a severity category; and (f) The scheme is consistent with the air traffic services providers views of the severity of the harmful effects covered and can be shown to incorporate societal views of their severity.