CAMO.B.305 Oversight programme

ANNUAL REVIEW

(a)The oversight planning cycle and the related oversight programme for each organisation should be reviewed annually to ensure that they remain adequate regarding any changes in the nature, complexity or the safety performance of the organisation.

(b)When reviewing the oversight planning cycle and the related oversight programme, the competent authority should also consider any relevant information collected in accordance with points CAMO.A.160 and CAMO.B.300(f).

SPECIFIC NATURE AND COMPLEXITY OF THE ORGANISATION — RESULTS OF PAST OVERSIGHT When determining the oversight programme, including the product audits, the competent authority should consider in particular the following elements, as applicable:

(1)the effectiveness of the organisation’s management system in identifying and addressing non-compliances and safety hazards;

(2)the implementation by the organisation of any industry standards that are directly relevant to the organisation’s activity subject to this Regulation;

(3)the procedure applied for and the scope of changes not requiring prior approval;

(4)any specific procedures implemented by the organisation that are related to any alternative means of compliance used;

(5)the number of approved locations and the activities performed at each location;

(6)the number and type of any subcontractors who perform continuing airworthiness management tasks; and

(7)the volume of activity for each aircraft type / series / group, as applicable.

SUBCONTRACTED ACTIVITIES When a CAMO subcontracts continuing airworthiness management tasks, all subcontracted organisations should also be audited by the competent authority at periods not exceeding the applicable oversight planning cycle (credits per AMC2 CAMO.B.305(c) point (d) are permitted) to ensure that the subcontracted continuing airworthiness management tasks are carried out in compliance with Part-CAMO, Part-M and Part-ML, as applicable. For these audits, the competent authority inspector should ensure that he or she is accompanied throughout the audit by a senior technical member of the CAMO. NOTE: When a CAMO subcontracts continuing airworthiness management tasks, the competent authority should also ensure that the CAMO has sufficient control over the subcontracted organisation (see AMC1 CAMO.A.125(d)(3)).

AUDIT

(a)The oversight programme should indicate which aspects of the approval will be covered by each audit.

(b)Part of each audit should concentrate on the audit reports produced by the organisation’s compliance monitoring function, to determine whether the organisation has been identifying and correcting its problems.

(c)At the conclusion of the audit, the auditing inspector should complete an audit report that identifies the areas and processes that were audited, and includes all findings that were raised.

(d)At the completion of each oversight planning cycle, a new EASA Form 13-CAMO should be issued.

OVERSIGHT PLANNING CYCLE — AUDIT AND INSPECTION

(a)When determining the oversight planning cycle and defining the oversight programme, the competent authority should assess the risks related to the activity of each organisation, and adapt the oversight to the level of risk identified and to the effectiveness of the organisation’s management system, in particular its ability to effectively manage safety risks.

(b)The competent authority should establish a schedule of audits and inspections that is appropriate to each organisation. The planning of audits and inspections should take into account the results of the hazard identification and the risk assessment conducted and maintained by the organisation as part of the organisation’s management system. Inspectors should work in accordance with the schedule provided to them.

(c)When the competent authority, having regard to the level of risk identified and the effectiveness of the organisation’s management system, varies the frequency of an audit or inspection, it should ensure that all aspects of the organisation’s activity are audited and inspected within the applicable oversight planning cycle.

OVERSIGHT PLANNING CYCLE — AUDIT

(a)For each organisation certified by the competent authority, all processes should be completely audited at periods that do not exceed the applicable oversight planning cycle. The beginning of the first oversight planning cycle is normally determined by the date of issue of the first certificate. If the competent authority wishes to align the oversight planning cycle with the calendar year, it should shorten the first oversight planning cycle accordingly.

(b)The interval between two audits for a particular process should not exceed the interval of the applicable oversight planning cycle.

(c)Audits should include at least one on-site audit within each oversight planning cycle. For organisations who carry out their regular activity at more than one site, the determination of the sites to be audited should consider the results of past oversight activities and the volume of activities at each site, as well as main risk areas identified.

(d)For organisations holding more than one certificate, the competent authority may define an integrated oversight schedule to include all the applicable audit items. In order to avoid any duplication of audits, credit may be granted for specific audit items that have already been completed during the current oversight planning cycle, provided that:

(1)the specific audit item is the same for all the certificates under consideration;

(2)there is satisfactory evidence on record that those specific audit items were carried out, and that all the related corrective actions have been implemented to the satisfaction of the competent authority;

(3)the competent authority is satisfied that there is no evidence that standards have deteriorated regarding those specific audit items for which credit is granted;

(4)the interval between two audits for the specific item for which credit is granted does not exceed the applicable oversight planning cycle.

EXTENSION OF THE OVERSIGHT PLANNING CYCLE BEYOND 24 MONTHS

(a)If the competent authority applies an oversight planning cycle that exceeds 24 months, it should, at a minimum, perform one focused inspection of the organisation (inspection of a specific area, element or aspect of the organisation) within each 12-month segment of the cycle to support the extended oversight programme. NOTE: Where another inspection can be linked to the oversight of the organisation (e.g. when an aircraft managed by the organisation is inspected through ACAM survey), then the competent authority may take credit of such inspection to maintain the extension beyond 24 months.

(b)If the results of this inspection indicate a decrease in the safety performance or regulatory compliance of the organisation, the competent authority should revert to a 24-month (or less) oversight planning cycle and review the oversight programme accordingly.

(c)In order to be able to approve an oversight planning cycle of beyond 36 months, the competent authority should agree on the format and contents of the continuous reporting to be made by the organisation on its safety performance and regulatory compliance.