AMC2 ATS.OR.205(a)(2) Safety assessment and assurance of changes to
the functional system
ED Decision 2017/001/R
The argument should be considered complete when it shows, as applicable, that:
(a) the safety assessment in ATS.OR.205(b) has produced a sufficient set of non-contradictory valid safety criteria;
(b) safety requirements have been placed on the elements changed and on those elements affected by the change;
(c) the safety requirements as implemented meet the safety criteria;
(d) all safety requirements have been traced from the safety criteria to the level of the architecture at which they have been satisfied;
(e) each component satisfies its safety requirements;
(f) each component operates as intended, without adversely affecting the safety; and
(g) the evidence is derived from known versions of the components and the architecture and known sets of products, data and descriptions that have been used in the production or verification of those versions.
Loading collections...