AMC1 ATS.OR.205(b)(5) Safety assessment and assurance of changes to the functional system

• ED Decision 2017/001/R found in: ATM/ANS Provision of Services (2017/373) (Mar 2025)

AMC1 ATS.OR.205(b)(5) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R VERIFICATION The air traffic services provider should ensure that verification activities of the safety assessment process include verification that: (a) the full scope of the change is addressed throughout the whole assessment process, i.e. all the elements of the functional system or environment of operation that are changed and those unchanged elements that depend upon them and on which they depend are identified; (b) the way the service behaves complies with and does not contradict any applicable requirements placed on the changed service or the conditions attached to the providers certificate; (c) the specification of the way the service behaves is complete and correct; (d) the specification of the operational context is complete and correct; (e) the risk analysis is complete as per [AMC1 ATS.OR.205(b)(3)](#_DxCrossRefBm647742419); (f) the safety requirements are correct and commensurate with the risk analysis; (g) the design is complete and correct with reference to the specification and correctly addresses the safety requirements; (h) the design was the one analysed; and (i) the implementation, to the intended degree of confidence, corresponds to that design and behaves only as specified in the given operational context. AMC1 ATS.OR.205(b)(5) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R VERIFICATION The air traffic services provider should ensure that verification activities of the safety assessment process include verification that: (a)       the full scope of the change is addressed throughout the whole assessment process, i.e. all the elements of the functional system or environment of operation that are changed and those unchanged elements that depend upon them and on which they depend are identified; (b)       the way the service behaves complies with and does not contradict any applicable requirements placed on the changed service or the conditions attached to the providers certificate; (c)       the specification of the way the service behaves is complete and correct; (d)       the specification of the operational context is complete and correct; (e)       the risk analysis is complete as per [AMC1 ATS.OR.205(b)(3)](#_DxCrossRefBm1726555244); (f)        the safety requirements are correct and commensurate with the risk analysis; (g)       the design is complete and correct with reference to the specification and correctly addresses the safety requirements; (h)       the design was the one analysed; and (i)        the implementation, to the intended degree of confidence, corresponds to that design and behaves only as specified in the given operational context.