ATM/ANS.AR.C.010 Oversight

DEMONSTRATION OF COMPLIANCE — DAT PROVIDERS In addition to the applicable requirements, the competent authority should assess the standards and processes applied by the DAT provider. The following specific areas should be overseen against EUROCAE ED-76A/RTCA DO-200B ‘Standards for Processing Aeronautical Data’, dated June 2015:

(a)plans and procedures, including:

(1)alteration procedures (i.e. informing the supplier or data originator of the data alteration and endeavouring to receive concurrence/agreement);

(2)data verification and validation (including the procedures that define the level of checking of the database prior to release). These procedures should be reviewed to ensure adequacy;

(3)reporting and handling procedures (including occurrence reporting);

(4)data configuration management;

(5)data transmission practices;

(6)tool qualification; and

(7)internal audit checks and response mechanisms;

(b)internal standards; and

(c)definition of ‘Data Quality Requirements’. EUROCAE ED-76/RTCA DO-200A may be also used for the demonstration of compliance.

AUDITS The audits should include oversight of changes to the functional system in order to:

(a)verify that changes made to the functional system:

(1)comply with ATM/ANS.OR.A.045;

(2)have been managed in accordance with the procedures identified in ATM/ANS.OR.B.010(a) that have been approved; and

(3)are being verified against the monitoring criteria that were identified in the assurance argument as a result of complying with ATM/ANS.OR.C.005(b)(2) or ATS.OR.205(b)(6), as appropriate; and

(b)verify that if, as a result of the monitoring referred to in (a)(3), the argument, referred to in ATS.OR.205(a)(2) and ATM/ANS.OR.C.005(a)(2), is found to be incomplete and/or incorrect, then the service provider has initiated a change or has revised the argument such that the inferences or evidence are now sufficient to justify the claim.

IMPLEMENTING ARRANGEMENTS Implementing arrangements should be considered to be the service provider’s (safety) management system(s) documentation, manuals, service provision conditions or the certificate and the content of the declaration, as applicable.