Navigate / EASA

MOC 4 VTOL.2300 Common Mode Failures and Errors in Fly-by Wire Flight Control Functions

n/a

To demonstrate compliance with VTOL.2300, in line with VTOL.2510, specific attention should be paid to common mode failures and errors in flight controls. The considerations on common modes in Section 9 (b) of MOC VTOL.2510 apply, supplemented by the following for fly-by-wire flight controls:

(a)     Full reliance on Development Assurance and Quality Assurance as sole mitigation of a common mode failure or error leading to a total loss of flight controls function shall be avoided as far as practicable. Additional architectural mitigations that provide functional independence and/or item development independence should be provided.

(b)     It is recognized that dissimilarity in the High-level specifications of Flight Control Laws in a Command/Monitoring (COM/MON) architecture may not be easy to implement. Monitoring of the Flight Control Laws may be a possible mitigation means against common mode errors in such case.