Division ATS.OR.205 Safety assessment and assurance of changes to the functional system

For any change notified in accordance with point ATM/ANS.OR.A.045(a)(1), the air traffic services provider shall:

1. (1)

   ensure that a safety assessment is carried out covering the scope of the change, which is:

   1. (i)

      the equipment, procedural and human elements being changed;

   2. (ii)

      interfaces and interactions between the elements being changed and the remainder of the functional system;

   3. (iii)

      interfaces and interactions between the elements being changed and the context in which it is intended to operate;

   4. (iv)

      the life cycle of the change from definition to operations including transition into service;

   5. (v)

      planned degraded modes of operation of the functional system; and

2. (2)

   provide assurance, with sufficient confidence, via a complete, documented and valid argument that the safety criteria identified via the application of point ATS.OR.210 are valid, will be satisfied and will remain satisfied.

An air traffic services provider shall ensure that the safety assessment referred to in point (a) comprises:

1. (1)

   the identification of hazards;

2. (2)

   the determination and justification of the safety criteria applicable to the change in accordance with point ATS.OR.210;

3. (3)

   the risk analysis of the effects related to the change;

4. (4)

   the risk evaluation and, if required, risk mitigation for the change such that it can meet the applicable safety criteria;

5. (5)

   the verification that:

   1. (i)

      the assessment corresponds to the scope of the change as defined in point (a)(1);

   2. (ii)

      the change meets the safety criteria;

6. (6)

   the specification of the monitoring criteria necessary to demonstrate that the service delivered by the changed functional system will continue to meet the safety criteria.