GM1 ATS.OR.205(b)(6) Safety assessment and assurance of changes to the functional system

• ED Decision 2017/001/R found in: ATM/ANS Provision of Services (2017/373) (Feb 2023)

GM1 ATS.OR.205(b)(6) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R MONITORING OF INTRODUCED CHANGE (a)       Monitoring is intended to maintain confidence in the safety case during operation of the changed functional system. At entry into service, the safety criteria become performance criteria rather than design criteria. Monitoring is, therefore, only applicable following entry into service of the change. (b)       Monitoring is likely to be of internal parameters of the functional system that provide a good indication of the performance of the service. These parameters may not be directly observable at the service level, i.e. at the interface of the service with the operational context. For example, where a function is provided by multiple redundant resources, the availability of the function will be so high that monitoring it may not be useful. However, monitoring the availability of individual resources, which fail much more often, may be a useful indicator of the performance of the overall function. GM1 ATS.OR.205(b)(6) Safety assessment and assurance of changes to the functional system ED Decision 2017/001/R MONITORING OF INTRODUCED CHANGE (a) Monitoring is intended to maintain confidence in the safety case during operation of the changed functional system. At entry into service, the safety criteria become performance criteria rather than design criteria. Monitoring is, therefore, only applicable following entry into service of the change. (b) Monitoring is likely to be of internal parameters of the functional system that provide a good indication of the performance of the service. These parameters may not be directly observable at the service level, i.e. at the interface of the service with the operational context. For example, where a function is provided by multiple redundant resources, the availability of the function will be so high that monitoring it may not be useful. However, monitoring the availability of individual resources, which fail much more often, may be a useful indicator of the performance of the overall function.