AMC1 ATS.OR.205(b)(2) Safety assessment and assurance of changes to the functional system

• ED Decision 2017/001/R found in: ATM/ANS Provision of Services (2017/373) (Mar 2025)

AMC1 ATS.OR.205(b)(2) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R DETERMINATION OF THE SAFETY CRITERIA FOR THE CHANGE When determining the safety criteria for the change being assessed, the air traffic services provider should, in accordance with [ATS.OR.210](#_DxCrossRefBm647742092), ensure that: (a) the safety criteria support a risk analysis that is: (1) relative or absolute, i.e. refers to: (i) the difference in safety risk of the system due to the change (relative); or (ii) the difference in safety risk of the system and a similar system (can be absolute or relative); and (iii) the safety risk of the system after the change (absolute); and (2) objective, whether risk is expressed numerically or not; (b) the safety criteria are measurable to an adequate degree of certainty; (c) the set of safety criteria can be represented totally by safety risks, by other measures that relate to safety risk or a mixture of safety risks and these other measures; (d) the set of safety criteria should cover the change; the safety criteria selected are consistent with the overall safety objectives established by the air traffic services provider through its SMS and represented by its annual and business plan and safety key performance indicators; and (e) where a safety risk or a proxy cannot be compared against its related safety criteria with acceptable certainty, the safety risk should be constrained and actions should be taken, in the long term, so as to manage safety and ensure that the air traffic services provider’s overall safety objectives are met. AMC1 ATS.OR.205(b)(2) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R DETERMINATION OF THE SAFETY CRITERIA FOR THE CHANGE When determining the safety criteria for the change being assessed, the air traffic services provider should, in accordance with [ATS.OR.210](#_DxCrossRefBm1726554937), ensure that: (a)       the safety criteria support a risk analysis that is: (1)       relative or absolute, i.e. refers to: (i)        the difference in safety risk of the system due to the change (relative); or (ii)       the difference in safety risk of the system and a similar system (can be absolute or relative); and (iii)      the safety risk of the system after the change (absolute); and (2)       objective, whether risk is expressed numerically or not; (b)       the safety criteria are measurable to an adequate degree of certainty; (c)       the set of safety criteria can be represented totally by safety risks, by other measures that relate to safety risk or a mixture of safety risks and these other measures; (d)       the set of safety criteria should cover the change; the safety criteria selected are consistent with the overall safety objectives established by the air traffic services provider through its SMS and represented by its annual and business plan and safety key performance indicators; and (e)       where a safety risk or a proxy cannot be compared against its related safety criteria with acceptable certainty, the safety risk should be constrained and actions should be taken, in the long term, so as to manage safety and ensure that the air traffic services provider’s overall safety objectives are met.