ATM/ANS.OR.B.010 Change management procedures

GENERAL

(a)The procedures, and the change of the procedures, used by a service provider to manage changes should cover the complete lifecycle of a change.

(b)The service provider should show that the procedures address all the actions and all the evidence needed in order to comply with the requirements laid down in ATM/ANS.OR.A.045, ATS.OR.205, ATS.OR.210, and ATM/ANS.OR.C.005, as appropriate. For that purpose, the service provider should use a compliance matrix, which shows:

(1)which part of a procedure addresses which part of the Regulation (i.e. the requirement of the implementing rule); and

(2)the rationale explaining how the procedures demonstrate compliance with the Regulation.

(c)The service provider should ensure that the roles and responsibilities for the change management processes are identified in the procedures.

(d)Procedures should be submitted in a manner agreed between the service provider and the competent authority. Until an agreement is reached, the competent authority will prescribe the means of submission.

(e)The procedure that defines the notification process for changes includes:

(1)the point of contact in charge of the notification of changes, e.g. person, or part of the organisation and the role;

(2)the means used for notification, e.g. fax, email, mail, use of database or others.

(f)The management of change procedures should include a change identification procedure. This procedure, which is a precursor of the change notification process, should seek out potential changes, confirm that there is a real intent to implement them (propose the change) and, if so, initiate the notification process.

GENERAL

(a)As part of the change management procedures, the service provider should keep a register of the records of all notified changes. The register should include:

(1)the status of the implementation of the change, i.e. planned, under review, under implementation, implemented, or cancelled;

(2)the notification;

(3)(a link to) the location of the actual record, including a reference to all information passed to the competent authority in accordance with ATM/ANS.OR.A.045(a)(2).

(b)In addition, when the changes are selected for review, the register should also include:

(1)the review decision from the competent authority; and

(2)a link to records of the change approval by the competent authority.

GENERAL

(a)The change management procedures for changes to functional systems should include:

(1)the identification and notification of proposed changes;

(2)the identification of the scope of the change, i.e. the identification of what parts of the functional system are to be changed or are affected by the change;

(3)the assessment and assurance of the change;

(4)the approval of the change; and

(5)the establishment of the monitoring criteria to ensure that the change will remain acceptable as long as it is in operation (acceptably safe for air traffic service providers or acceptably trustworthy for other service providers). The monitoring of the changed system is part of the activities related to the management system of the service provider. It is not covered by the change management procedures themselves.

(b)The procedures that manage changes to functional systems do not include the processes to identify the circumstances that will trigger the change. These should be part of the management system(s) as laid down in ATM/ANS.OR.B.005 and/or ATS.OR.200, as applicable.

(c)The change management procedures should address the following:

(1)procedural-oriented content, which details:

(i)the roles and activities with regard to change management, safety assessment and safety support assessment;

(ii)the identification of the parts of the functional system affected by the proposed change;

(iii)the type of safety assessment or safety support assessment that has to be used for the identified type of changes;

(iv)the competence of the persons performing change management, safety assessments and safety support assessments;

(v)the identified triggers for performing a safety assessment and a safety support assessment;

(vi)the means of change notification; ‘means’ includes the form of notification;

(vii)the means of identifying any organisations or aviation undertakings using the service that are potentially affected by the change; and

(viii)the means of informing those identified in (vii).

(2)Method-oriented content, which details description of the safety assessments and safety support assessments methods and mitigation methods used by the service provider.

(d)For each change management procedure or part of a change management procedure approved, the agreement on notification of any change over them should be documented and formalised. In any case, the service provider should keep records of these changes.