AMC2 ATM/ANS.OR.C.005(a)(2) Safety support assessment and assurance
of changes to the functional system
ED Decision 2017/001/R
The argument should be considered complete when it shows that:
(a) the safety support assessment of ATM/ANS.OR.C.005(b) has produced a service specification and context specification where:
(1) the service has been defined in terms of functionality, performance and the form of the interfaces;
(2) the specification of context correctly and completely records the conditions under which the specification of the service is true;
(3) the interaction of components, under failure conditions or failures in services delivered to the components, have been assessed for their impact on the service and, where necessary, degraded modes of service have been defined; and
(4) the specification encompasses the interaction with the environment;
(b) safety support requirements have been placed on the elements changed and on those elements affected by the change;
(c) the behaviour necessitated by the safety support requirements is the complete behaviour expressed by the service specification;
(d) all safety support requirements have been traced from the service specification to the level of the architecture at which they have been satisfied;
(e) each component satisfies its safety support requirements; and
(f) the evidence is derived from known versions of the components and the architecture and known sets of products, data and descriptions that have been used in the production or verification of those versions.
Loading collections...