21L.B.144 Oversight programme

ANNUAL REVIEW The oversight planning cycle and the related oversight programme for each organisation should be reviewed annually to ensure they remain adequate regarding any changes in the nature, complexity or performance of the organisation. When reviewing the oversight programme, the competent authority should also consider any relevant information collected in accordance with points 21L.A.3 and 21L.B.12.

SPECIFIC NATURE AND COMPLEXITY OF THE ORGANISATION — RESULTS OF PAST OVERSIGHT ACTIVITIES When determining the oversight programme, including for product audits, the relevant sample of products and parts that are within the scope of the organisation, the competent authority should consider in particular the following elements, as applicable:

(a)the effectiveness of the organisation’s management system in identifying and addressing non-compliances;

(b)the implementation by the organisation of any industry standards that are directly relevant to the organisation’s activities subject to Part 21 Light;

(c)any specific procedures implemented by the organisation that are related to any alternative means of compliance used (see point 21L.B.24(b));

(d)the number of locations and the activities performed at each location;

(e)the number and type of any subcontractors which perform production or design tasks as appropriate;

(f)the volume of activity for each product or part; and

(g)the number and nature of significant changes notified under points 21L.A.128 or 21L.A.178, as relevant.

SUBCONTRACTED ACTIVITIES If a declared production or design organisation subcontracts some of its tasks, the competent authority should determine whether the subcontracted organisations need to be audited and included in the oversight programme, taking into account the specific nature and complexity of the subcontracted activities, the results of previous oversight activities of the declared production or design organisation, and based on the assessment of the associated risks. For such an audit, the competent authority inspector should ensure that they are accompanied throughout the audit by a representative of the declared production or design organisation.

CONTENTS An oversight programme typically consists of the elements detailed in this GM.

(a)Planned continued surveillance In the planned continued surveillance, the total surveillance actions are split into several audits that are carried out at planned intervals during the oversight cycle. One aspect may be audited once or several times, depending on its importance. All relevant aspects are audited at least once within an oversight cycle.

(b)Planned inspections of produced aircraft, engines, propellers and parts For the first-article inspection (of a new product or part produced for the first time), refer to AMC1 21L.B.143(b). For serial production, in order to perform the inspections effectively and efficiently, the competent authority should integrate a sampling plan, as part of the planning of the continued surveillance activities, which is appropriate to the scope and size of the declared production organisation. A flexible sampling plan allows to accommodate changes in the production rate and consider the results obtained from other samples or investigation activities.

(c)Unplanned reviews Unplanned reviews are specific additional investigations of a declared production organisation related to surveillance findings or external needs. The competent authority is responsible for deciding when a review is necessary, taking into account any changes in the scope of work, changes in personnel, reports on the organisation’s performance submitted by other EASA or competent authorities’ teams, and reports on the in-service products.

EXTENSION OF THE OVERSIGHT PLANNING CYCLE BEYOND 24 MONTHS

(a)Part 21 Light Subparts G and J do not require the implementation of a safety management system by the respective declared organisations. However, a declared production organisation or a declared design organisation may decide to introduce certain elements of a safety management system as defined in Part 21 points 21.A.139 and 21.A.239 (e.g. safety risk management, safety performance monitoring and measurement). When such elements are voluntarily introduced, the competent authority may consider them to substantiate an extension of the oversight planning cycle beyond 24 months, as specified in points 21L.B.144(d) and (e) and in points 21L.B.184(d) and (e).

(b)If the competent authority applies an extended oversight planning cycle (i.e. that exceeds 24 months), it should perform, at a minimum, one annual review (see AMC1 21L.B.144 and point 21L.B.184 ‘Oversight programme’) to validate the oversight programme.

(c)If the results of the annual review indicate a decrease in the safety performance of the organisation, the competent authority should revert to a 24-month (or shorter) oversight planning cycle and review the oversight programme accordingly.

ANNUAL REVIEW The oversight planning cycle and the related oversight programme for each organisation should be reviewed annually to ensure they remain adequate regarding any changes in the nature, complexity or performance of each organisation. When reviewing the oversight programme and the oversight planning cycle, the competent authority should also consider any relevant information collected in accordance with points 21L.A.3 and 21L.B.12.

SPECIFIC NATURE AND COMPLEXITY OF THE ORGANISATION — RESULTS OF PAST OVERSIGHT ACTIVITIES When determining the oversight programme, including for product audits, the relevant sample of products and parts within the scope of the organisation the competent authority should consider in particular the following elements, as applicable:

(a)the effectiveness of the organisation’s management system in identifying and addressing non-compliances;

(b)the implementation by the organisation of any industry standards that are directly relevant to the organisation’s activities subject to Part 21 Light;

(c)any specific procedures implemented by the organisation that are related to any alternative means of compliance used (see point 21L.B.24(b));

(d)the number of locations and the activities performed at each location;

(e)the number and type of any subcontractors which perform production or design tasks as appropriate; and

(f)the volume of activity for each product or part.

(g)the number and nature of significant changes notified under point 21L.A.128 or 21L.A.178, as relevant.

SUBCONTRACTED ACTIVITIES If a declared production or design organisation subcontracts some of tasks, the competent authority should determine whether the subcontracted organisations need to be audited and included in the oversight programme, taking into account the specific nature and complexity of the subcontracted activities, the results of previous oversight activities of the declared organisation, and based on the assessment of the associated risks. For such an audit, the competent authority inspector should ensure that they are accompanied throughout the audit by a representative of the declared production or design organisation.

EXTENSION OF THE OVERSIGHT PLANNING CYCLE BEYOND 24 MONTHS

(a)Part 21 Light Subparts G and J do not include requirements for the implementation of a safety management system. However, a declared production organisation or a declared design organisation may decide to introduce certain elements of a safety management system as defined in Part 21 points 21.A.139 and 21.A.239 (e.g. safety risk management, safety performance monitoring and measurement). When such elements are voluntarily introduced, the competent authority may consider them to substantiate an extension of the oversight planning cycle beyond 24 months, as specified in points 21L.B.144(d) and (e) and in points 21L.B.184(d) and (e).

(b)If the competent authority applies an extended oversight planning cycle (i.e. that exceeds 24 months), it should perform, at a minimum, one annual review (see AMC1 21L.B.144 and point 21L.B.184 ‘Oversight programme’) to validate the oversight programme.

(c)If the results of the annual review indicate a decrease in the safety performance of the organisation, the competent authority should revert to a 24-month (or shorter) oversight planning cycle and review the oversight programme accordingly.