ADR.OR.D.005 Management system

Regulation (EU) No 139/2014

(a) The aerodrome operator shall implement and maintain a management system integrating a safety management system.

(b) The management system shall include:

(1) clearly defined lines of responsibility and accountability throughout the aerodrome operator, including a direct accountability for safety on the part of senior management;

(2) a description of the overall philosophies and principles of the aerodrome operator with regard to safety, referred to as the safety policy, signed by the accountable manager;

(3) a formal process that ensures that hazards in operations are identified;

(4) a formal process that ensures analysis, assessment and mitigation of the safety risks in aerodrome operations;

(5) the means to verify the safety performance of the aerodrome operator’s organisation in reference to the safety performance indicators and safety performance targets of the safety management system, and to validate the effectiveness of safety risk controls;

(6) a formal process to:

(i) identify changes within the aerodrome operator’s organisation, management system, the aerodrome or its operation which may affect established processes, procedures and services;

(ii) describe the arrangements to ensure safety performance before implementing changes; and

(iii) eliminate or modify safety risk controls that are no longer needed or effective due to changes in the operational environment;

(7) a formal processes to review the management system referred to in paragraph (a), identify the causes of substandard performance of the safety management system, determine the implications of such substandard performance in operations, and eliminate or mitigate such causes;

(8) a safety training programme that ensures that personnel involved in the operation, rescue and firefighting, maintenance and management of the aerodrome are trained and competent to perform the safety management system duties;

(9) formal means for safety communication that ensures that personnel are fully aware of the safety management system, conveys safety critical information, and explains why particular safety actions are taken and why safety procedures are introduced or changed;

(10) coordination of the safety management system with the aerodrome emergency response plan; and coordination of the aerodrome emergency response plan with the emergency response plans of those organisations it must interface with during the provision of aerodrome services; and

(11) a formal process to monitor compliance of the organisation with the relevant requirements.

(c) The aerodrome operator shall document all management system key processes.

(d) The management system shall be proportionate to the size of the organisation and its activities, taking into account the hazards and associated risks inherent in these activities.

(e) In the case that the aerodrome operator holds also a certificate to provide air navigation services, it shall ensure that the management system covers all activities in the scope of its certificates.

SAFETY MANAGEMENT SYSTEM

The safety management system of an aerodrome operator should encompass safety by establishing an organisational structure for the management of safety proportionate and appropriate to the size of the aerodrome operator, and the nature and type of operations. The organisational structure should include a Safety Review Board, and depending on its organisational complexity and structure, a Safety Services Office to assist the work of the safety manager, in accordance with paragraph (a) and (b) below:

(a) Safety Services Office

(1) The safety manager (see ADR.OR.D.015 and AMC1 ADR.OR.D.015(c)) should be responsible for the operation of the Safety Services Office which should be independent and neutral in terms of the processes and decisions made regarding the delivery of services by the line managers of operational units.

(2) The function of the Safety Services Office should be to:

(i) manage and oversee the hazard identification system;

(ii) monitor safety performance of operational units directly involved in aerodrome operations;

(iii) advise senior management on safety management matters; and

(iv) assist line managers with safety management matters.

(3) Operators of multiple aerodromes should either establish a central Safety Services Office and appropriate safety departments/functions at all aerodromes or separate Safety Services Office at each aerodrome. Arrangements should be made to ensure continuous flow of information and adequate coordination.

(b) Safety Review Board

(1) The Safety Review Board should be a high level committee that considers matters of strategic safety in support of the accountable manager’s safety accountability.

(2) The Safety Review Board should be chaired by the accountable manager, and be composed of heads of functional areas.

(3) The Safety Review Board should monitor:

(i) safety performance against the safety policy and objectives;

(ii) that any safety action is taken in a timely manner; and

(iii) the effectiveness of the organisation’s safety management processes.

(4) The Safety Review Board should ensure that appropriate resources are allocated to achieve the established safety performance.

(5) The safety manager or any other relevant person may attend, as appropriate, Safety Review Board meetings. He/she may communicate to the accountable manager all information, as necessary, to allow decision making based on safety data.

(6) Operators of multiple aerodromes should either establish a central Safety Review Board, or separate Safety Review Boards for each aerodrome or group of aerodromes. In the case of central or group Safety Review Groups, they should ensure that all aerodromes are represented in the Safety Review Board, at the appropriate management level. Arrangements should be made to ensure continuous flow of information and adequate coordination.

In less complex aerodrome organisations/operations, the aerodrome operator should nominate a person who fulfils the role of safety manager, and who is responsible for coordinating the safety management system (see ADR.OR.D.015 and AMC1 ADR.OR.D.015(c)).

SAFETY REVIEW BOARD — SAFETY ACTION GROUP

(a) Safety Review Board

Depending on the size of the organisation, the type and complexity of operations, the responsibilities of the Safety Review Board may be included in other high level committees of the organisation.

(b) Safety Action Group

(1) A Safety Action Group may be established as a standing group, or as an ad hoc group to assist or act on behalf of the Safety Review Board.

(2) More than one safety action group may be established depending on the scope of the task and specific expertise required.

(3) A Safety Action Group should report to, and take strategic direction from the Safety Review Board, and should be comprised of managers, supervisors, and personnel from operational areas.

(4) The Safety Action Group should:

(i) monitor operational safety;

(ii) resolve identified risks;

(iii) assess the impact on safety of operational services;

(iv) ensure that safety actions are implemented within agreed timescales.

(5) The Safety Action Group should review the effectiveness of previous safety recommendations and safety promotion.

SAFETY SERVICES OFFICE — SAFETY REVIEW BOARD — SAFETY ACTION GROUP

Different titles may also be used for the Safety Services Office, the Safety Review Board, and the Safety Actions Group.

SAFETY POLICY

(a) The safety policy should:

(1) be endorsed by the accountable manager;

(2) clearly identify safety as the highest organisational priority over commercial, operational, environmental, or social pressures;

(3) reflect organisational commitments regarding safety and its proactive and systematic management;

(4) be communicated, with visible endorsement, throughout the organisation;

(5) include safety reporting principles; and

(6) be periodically reviewed to ensure it remains relevant and appropriate to the organisation.

(b) The safety policy should:

(1) include a commitment:

(i) to improve towards the highest safety standards;

(ii) to comply with all applicable legal requirements, meet all applicable standards, and consider best practices;

(iii) to provide appropriate resources;

(iv) to enforce safety as one primary responsibility of all managers and staff;

(2) include the safety reporting procedures;

(3) with reference to a just culture, clearly indicate which types of operational behaviours are unacceptable, and include the conditions under which disciplinary action would not apply; and

(4) be periodically reviewed to ensure it remains relevant and appropriate.

(c) Senior management should:

(1) continually promote the safety policy to all personnel, and demonstrate their commitment to it;

(2) provide necessary human and financial resources for its implementation; and

(3) establish safety objectives and performance standards.

SAFETY POLICY

(a) Safety policy — General

The safety policy is the means whereby the aerodrome operator states its intention to maintain and, where practicable, improve safety levels in all its activities, and to minimise its contribution to the risk of an aircraft accident as far as reasonably practicable.

The safety policy should state that the purpose of safety reporting, and internal investigations is to improve safety, not to apportion blame to individuals.

(b) Safety policy — Just culture

The safety policy should actively encourage effective safety reporting and, by defining the line between acceptable performance (often unintended errors) and unacceptable performance (such as negligence, recklessness, violations, or sabotage), provide fair protection to reporters. A safety or just culture may not, however, preclude the ‘criminalisation of error’, which is legally, ethically, and morally within the sovereign rights of any Member State, provided European Union law and established international agreements are observed. A judicial investigation, and consequences of some form, may be expected following an accident or serious incident especially if a failure resulted in lives lost or property damaged, even if no negligence or ill intent existed. A potential issue could, therefore, exist if voluntary hazard reports, which relate to latent deficiencies of a system or its performance, are treated in the same way as those concerning accident, and serious incident investigations. The intent of protecting hazard reports should not challenge the legitimacy of a judicial investigation, or demand undue immunity. However, legal argument does usually take precedence over any technical or safety-related argument.

HAZARD IDENTIFICATION PROCESS

(a) Hazard identification should be based on a combination of reactive, proactive, and predictive methods of safety data collection. Reactive, proactive, and predictive schemes for hazard identification should be the formal means of collecting, recording, analysing, acting on, and generating feedback about hazards and the associated risks that affect safety.

(b) All reporting systems, including confidential reporting schemes, should include an effective feedback process.

HAZARD IDENTIFICATION

(a) Hazard identification — General

(1) Hazard identification may include the following factors and processes:

(i) design factors, including equipment and task design;

(ii) procedures and operating practices, including their documentation and checklists, and their validation under actual operating conditions;

(iii) communications, including means, terminology, and language;

(iv) personnel factors, such as company policies for recruitment, training, remuneration, and allocation of resources;

(v) organisational factors, such as the compatibility of production and safety goals, the allocation of resources, operating pressures, and the corporate safety culture;

(vi) work environment factors, such as ambient noise and vibration, temperature, lighting, and the availability of protective equipment and clothing;

(vii) regulatory oversight factors, including the applicability and enforceability of regulations, the certification of equipment, personnel, and procedures, and the adequacy of oversight;

(viii) defences, including such factors as the provision of adequate detection and warning systems, the error tolerance of equipment, and the resilience of equipment to errors and failures; and

(ix)  human performance, restricted to medical conditions and physical limitations.

(2) Hazard identification may use internal and external sources.

(i) Internal sources:

(A) voluntary occurrence reporting schemes;

(B) safety surveys;

(C) safety audits;

(D) normal operations monitoring schemes;

(E) trend analysis;

(F) feedback from training; and

(G) investigation and follow-up of incidents

(ii) External sources:

(A) accident reports;

(B) state mandatory occurrence reporting system; and

(C) state voluntary reporting system.

(3) The methods used for hazard identification depends on the resources and constraints of each particular aerodrome operator, and on the size and the complexity of the operations. Nevertheless, hazard identification, regardless of implementation, complexity and size, is part of the aerodrome operator’s safety documentation. Under mature safety management practices, hazard identification is a continuous, on-going daily activity. It is an integral part of the aerodrome operator’s processes. There are three specific conditions under which special attention to hazard identification should be paid. These three conditions should trigger more in depth and far reaching hazard identification activities and include:

(i) any time that the aerodrome operator experiences an unexplained increase in safety related events or regulatory infractions;

(ii) any time major operational changes are foreseen, including changes to key personnel or other major equipment or systems; and

(iii) before and during periods of significant organisational change, including rapid growth or contraction, corporate mergers, acquisitions, or downsizing.

(4) Hazard identification may use the following tools and techniques:

(i) brainstorming which is an unbounded but facilitated discussion with a group of experts;

(ii) Hazard and Operability (HAZOP) Study which is a systematic and structured approach using parameter and deviation guidewords. This technique relies on a very detailed system description being available for study, and usually involves breaking down the system into well-defined subsystems and functional or process flows between subsystems. Each element of the system is then subject to discussion within a multidisciplinary group of experts, against the various combinations of the guidewords and deviations;

(iii) checklists, which are lists of known hazards or hazard causes that have been derived from past experience. The past experience could be previous risk assessments, or similar systems, or operations, or from actual incidents that have occurred in the past. The technique involves the systematic use of an appropriate checklist, and the consideration of each item on the checklist for possible applicability to a particular system. Checklists should always be validated for applicability prior to use;

(iv) Failure Modes and Effects Analysis (FMEA), which is a ‘bottom up’ technique, used to consider ways in which the basic components of a system can fail to perform their design intent. The technique relies on a detailed system description, and considers the ways in which each sub-component of the system could fail to meet its design intent, and what the consequences could be for the overall system. For each sub-component of a system the FMEA should consider:

(A) all the potential ways that the component could fail;

(B) the effects that each of these failures would have on the system behaviour;

(C) the possible causes of the various failure modes; and

(D) how the failures might be mitigated within the system or its environment.

The system level at which the analysis is applied can vary, and is determined by the level of detail of the system description used to support the analysis. Depending on the nature and complexity of the system, the analysis could be undertaken by an individual system expert, or by a team of system experts acting in group sessions.

(v) the Structured What-If Technique (SWIFT) is a simple and effective alternative technique to HAZOP and involves a multidisciplinary team of experts. It is a facilitated brainstorming group activity, but is typically carried out on a higher level system description, having fewer sub-elements, than for HAZOP and with a reduced set of prompts.

(5) Identified hazards should be registered in a hazard log (hazard register). The nature and format of such a hazard log may vary from a simple list of hazards to a more sophisticated relational database linking hazards to mitigations, responsibilities, and actions. The following information should be included in the hazard log:

(i) unique hazard reference number against each hazard;

(ii) hazard description;

(iii) indication of the potential causes of the hazard;

(iv) qualitative assessment of the possible outcomes and severities of consequences arising from the hazard;

(v) qualitative assessment of the risk associated with the possible consequences of the hazard;

(vi) description of the existing risk controls for the hazard; description of additional actions that are required to reduce safety risks, as well as target date of completion; and

(vii) indication of responsibilities in relation to the management of risk controls.

(6) Additionally, the following information may also be included in the hazard log:

(i) a quantitative assessment of the risk associated with the possible consequences of the hazard;

(ii) record of actual incidents or events related to the hazard, or its causes;

(iii) risks tolerability statement;

(iv) statement of formal system monitoring requirements;

(v) indication of how the hazard was identified;

(vi) hazard owner;

(vii) assumptions; and

(viii) third party stakeholders.

(b) Hazard identification — Indicators

(1) Reactive (lagging) indicators:

Metrics that measure events that have already occurred and that impact on safety performance.

As reactive indicators only reflect system failures, their use can only result in determining a reactive response. Although they do measure failure to control hazards, they do not normally reveal why the system failed, or if there are any latent hazards.

(2) Proactive (leading) indicators:

Metrics that measure inputs to the safety system (either within an organisation, a sector, or across the total aviation system) to manage and improve safety performance.

Proactive indicators indicate good safety practices being introduced, developed, and adapted which by their inclusion seek to establish a proactive safety environment that engenders continuous improvement. They provide useful information when accident and incident rates are low to identify latent hazards and potential threats, and consequent opportunities for improvement.

There should always be a connection between a proactive indicator and the unwanted outcomes (or reactive indicators) that their monitoring is intended to warn against.

(3) Predictive indicators (precursor events):

These metrics can be considered as indicators that do not manifest themselves in accidents or serious incidents. They indicate less severe system failures or ‘near misses’ which when combined with other events may lead to an accident or serious incident.

In a large organisation, a mature safety management system should include all of these measures. Risk management effort, however, should be targeted at leading indicators and precursor events.

SAFETY RISK ASSESSMENT AND MITIGATION

(a) A formal safety (risk) assessment and mitigation process should be developed and maintained that ensures analysis (in terms of probability and severity of occurrence), assessment (in terms of tolerability), and control (in terms of mitigation) of risks.

(b) The levels of management who have the authority to make decisions regarding the tolerability of safety risks, in accordance with (a) above, should be specified in the aerodrome manual.

SAFETY RISK ASSESSMENT AND MITIGATION

Safety (risk) assessment is the analysis of the safety risks of the consequences of the hazards that have been determined. Safety risk analysis breaks down the risks into two components — the probability of occurrence of a damaging event or condition, and the severity of the event or condition, should it occur. Safety risk decision making and acceptance should be specified through a risk tolerability matrix. The definition and final construction of the matrix should be left to the operator to design, be documented in the aerodrome manual, and be subject to an approval by the Competent Authority.

SAFETY PERFORMANCE MONITORING AND MEASUREMENT

(a) Safety performance monitoring and measurement should be the process by which the safety performance of the aerodrome operator is verified in comparison to the safety policy and objectives, identified safety risks and the mitigation measures.

(b) This process should include the setting of safety performance indicators and safety performance targets, and measuring the aerodrome operator’s safety performance against them.

SAFETY PERFORMANCE MONITORING AND MEASUREMENT

(a) The performance monitoring and measurement process should include:

(1) safety reporting, addressing also the status of compliance with the applicable requirements;

(2) safety studies which are rather large analyses encompassing broad safety concerns;

(3) safety reviews including trends reviews which are conducted during introduction and deployment of new technologies, change or implementation of procedures, or in situations of structural change in operations, or to explore increase in incidents or safety reports;

(4) safety audits which focus in the integrity of the aerodrome operator’s management system, and periodically assess the status of safety risk controls;

(5) safety surveys, which examine particular elements or procedures of a specific operation, such as problem areas or bottlenecks in daily operations, perceptions and opinions of operational personnel, and areas of dissent or confusion; and

(6) internal safety investigations whose scope should extend the scope of occurrences required to be reported to the Competent Authority;

(b) The following generic aspects/areas could be considered:

(1) accountability for management of the operational activities and its ultimate accomplishment;

(2) authority to direct, control, or change the procedures, as well as to make key decisions such as safety risk acceptance decisions;

(3) procedures for operational activities;

(4) controls, including hardware, software, special procedures or procedural steps, and supervisory practices designed to keep operational activities on track;

(5) interfaces, including lines of authority between departments, lines of communication between employees, consistency of procedures, and clear delineation of responsibility between organisations, work units, and employees; and

(6) process measures to provide feedback to responsible parties that required actions are taking place, required outputs are being produced, and expected outcomes are being achieved.

THE MANAGEMENT OF CHANGE

The aerodrome operator should manage safety risks related to a change. The management of change should be a documented process to identify external and internal change that may have an adverse effect on safety.

It should make use of the aerodrome operator’s existing hazard identification, safety (risk) assessment, and mitigation processes.

THE MANAGEMENT OF CHANGE

(a) Change can introduce new hazards, impact the appropriateness and/or effectiveness of existing safety risk mitigation strategies. Changes may be external to the organisation, or internal.

(b) A formal process for the management of change should take into account the following considerations:

(1) criticality of systems and activities;

(2) stability of systems and operational environments; and

(3) past performance.

(c) System description is one of the fundamental preliminary activities in the planning of the safety management system, to determine a baseline hazard analysis for the baseline system.

As part of the formal process of the management of change, the system description and the baseline hazard analysis should be reviewed periodically, even if circumstances of change are not present, to determine their continued validity.

When changes to the system are made, and periodically thereafter, the aerodrome operator should go over its system and its actual operational environment, in order to make sure it continues to be fully aware of the circumstances under which the provision of services takes place.

With regard to the management of change and safety (risk) assessments related to changes, see also ADR.OR.B.040 and GM1 ADR.OR.B.040(f).

CONTINUOUS IMPROVEMENT OF THE SAFETY MANAGEMENT SYSTEM

The aerodrome operator should continuously seek to improve its safety performance. The aerodrome operator should develop and maintain a relevant formal process. Continuous improvement should be achieved through:

(a) proactive and reactive evaluation of facilities, equipment, documentation, and procedures;

(b) proactive evaluation of an individual’s performance, to verify the fulfilment of that individual’s safety responsibilities; and

(c) reactive evaluations in order to verify the effectiveness of the system for control and mitigation of safety risks.

CONTINUOUS IMPROVEMENT OF THE SAFETY MANAGEMENT SYSTEM

Continuous improvement of the safety management system, as part of the safety assurance, is achieved through the application of:

(a) internal evaluations;

(b) independent audits (both internal and external);

(c) strict document controls; and

(d) continuous monitoring of safety controls and mitigation actions.

SAFETY MANAGEMENT SYSTEM TRAINING

(a) The aerodrome operator should establish a safety management system training programme for all aerodrome operations, rescue and firefighting, and maintenance personnel, including all management personnel of the aerodrome (e.g. supervisors, managers, senior managers, and the accountable manager), regardless of their level in the aerodrome operator’s organisation.

(b) The amount and level of detail of safety training should be proportionate and appropriate to the individual’s responsibility and involvement in the safety management system.

(c) The safety management system training programme should be developed in accordance with AMC1 ADR.OR.D.017(a);(b), and AMC1 ADR.OPS.B.010(b);(c) and be incorporated in the training programme foreseen therein.

STAFF SAFETY MANAGEMENT SYSTEM TRAINING REQUIREMENTS

(a) Operations, rescue and firefighting, and maintenance personnel

(1) Safety training should address safety responsibilities, including adherence to all operating and safety procedures, and recognising and reporting hazards;

(2) The training objectives should include the organisation’s safety policy and safety management system fundamentals, and overview;

(3) The contents should include:

(i) definition of hazards;

(ii) consequences and risks;

(iii) the safety risk management process, including roles and responsibilities; and

(iv) safety reporting and the organisation’s safety reporting system(s) .

(b) Managers and supervisors

(1) Safety training should address safety responsibilities, including promoting the SMS and engaging operational personnel in hazard reporting;

(2) In addition to the training objectives established for operational personnel, training objectives for managers and supervisors should include a detailed knowledge of the safety process, hazard identification and safety risk management and mitigation, and change management;

(3) In addition to the contents specified for operational personnel, the training contents for supervisors and managers should include safety data analysis.

(c) Senior managers

(1) Safety training should include safety responsibilities, including compliance with European Union, national and the organisation’s own safety requirements, allocation of resources, ensuring effective inter-departmental safety communication, and active promotion of the safety management system;

(2) In addition to the objectives of the two previous employee groups, safety training should include safety assurance and safety promotion, safety roles and responsibilities, and establishing acceptable levels of safety.

(d) Accountable manager

The training should provide the accountable manager with a general awareness of the organisation’s safety management system, including safety management system roles and responsibilities, safety policy and objectives, safety risk management, and safety assurance.

SAFETY COMMUNICATION

(a) The aerodrome operator should communicate safety management system objectives and procedures to all operational personnel, and the safety management system and its application should be evident in all aspects of operations.

(b) Communication should flow between the safety manager and operational personnel throughout the organisation. The safety manager should communicate the performance of the organisation’s safety management system through suitable means. The safety manager should, also, ensure that lessons learned from investigations, safety related events, or other safety related experiences, both internally and from other organisations, are distributed widely.

(c) Safety communication should aim to:

(1) ensure that all staff are fully aware of the safety management system;

(2) convey safety-critical information;

(3) explain why particular actions are taken; and

(4) explain why safety procedures are introduced or changed.

SAFETY COMMUNICATION

(a) An aerodrome operator, may use the following tools to communicate safety information:

(1) Safety Management System Manual;

(2) safety processes and procedures;

(3) safety newsletters, notices, and bulletins; and

(4) websites or emails;

(b) Regular meetings with personnel where information, actions, and procedures are discussed may be used to communicate safety matters.

COORDINATION OF THE AERODROME EMERGENCY RESPONSE PLAN

The coordination of the aerodrome emergency response plan, established in accordance with the requirements contained in Part-ADR.OPS, with the safety management system should ensure continuous improvement of the systems and procedures contained within the plan.

COORDINATION OF THE AERODROME EMERGENCY RESPONSE PLAN

Continuous improvement of the systems and procedures contained within the aerodrome emergency response plan may, amongst others, be obtained by:

(a) conducting a review of the relevant parts of the emergency response plan after a full or partial exercise;

(b) debriefing and analysing the emergency response operations after an emergency situation; and

(c) developing new emergency procedures or systems as part of the emergency response plan when new hazards are identified by the safety management system,

to ensure, amongst others, the coordination with the emergency response plans of other interfacing organisations.

COMPLIANCE MONITORING

(a) Compliance monitoring

(1) The implementation and use of a compliance monitoring process should enable the aerodrome operator to monitor compliance with the relevant requirements of this Part, Part-ADR.OPS, as well as any other applicable regulatory requirements, or requirements established by the aerodrome operator.

The aerodrome operator should specify the basic structure of the compliance monitoring applicable to the activities conducted.

The compliance monitoring should be properly implemented, maintained and continually reviewed and improved as necessary.

Compliance monitoring should be structured according to the size of organisation and the complexity of the activities to be monitored, including those which have been subcontracted.

Compliance monitoring should include a feedback system of findings to the accountable manager to ensure effective implementation of corrective actions as necessary.

(2) An aerodrome operator should monitor compliance with the procedures it has designed, to ensure safe activities. In doing so, an aerodrome operator should as a minimum, and where appropriate, monitor compliance with:

(i) privileges of the aerodrome operator;

(ii) manuals, logs, and records;

(iii) training standards;

(iv) required resources; and

(v) management system procedures and manuals.

(b) Organisational set-up

(1) A person should be responsible for compliance monitoring.

The accountable manager, with regards to his/her direct accountability for safety, should ensure, in accordance with ADR.D.015(a), that sufficient resources are allocated for compliance monitoring. In the case the person responsible for the compliance monitoring acts also as safety manager, the accountable manager should ensure that sufficient resources are allocated to both functions, taking into account the size of the aerodrome operator, and the nature and complexity of its activities.

(2) The independence of the compliance monitoring should be established by ensuring that audits and inspections are carried out by personnel not responsible for the function, procedure, etc. being audited.

(3) Personnel involved in compliance monitoring should have access to any part of the aerodrome organisation, and any contracted organisation as required.

(c) Compliance monitoring documentation

(1) Relevant documentation should include the relevant part(s) of the aerodrome operator’s management system documentation.

(2) In addition, relevant documentation should also include the following:

(i) terminology;

(ii) specified activity standards;

(iii) a description of the organisation of the aerodrome operator;

(iv) the allocation of duties and responsibilities;

(v) procedures to ensure regulatory compliance;

(vi) the compliance monitoring programme, reflecting:

(A) schedule of the monitoring programme;

(B) audit procedures;

(C) reporting procedures;

(D) follow-up and corrective action procedures; and

(E) recording system;

(vii) the training syllabus referred to in (d)(2); and

(viii) document control.

(d) Training

(1) Correct and thorough training is essential to optimise compliance in every aerodrome operator. In order to achieve significant outcomes of such training, the operator should ensure that all personnel understand the objectives as laid down in the operator’s management system documentation.

(2) Those responsible for managing the compliance monitoring should receive training on this task. Such training should cover the requirements of compliance monitoring, manuals and procedures related to the task, audit techniques, reporting, and recording.

(3) Time should be provided to train the personnel involved in compliance management, and for briefing the remaining of the personnel.

(4) The allocation of time and resources should be based on the volume and complexity of the activities concerned.

(e) Compliance monitoring — audit scheduling

(1) A defined audit schedule to be completed during a specified calendar period and a periodic review cycle for each area should be established. The compliance monitoring itself should also be audited according to a defined audit schedule. The schedule should allow for unscheduled audits when trends are identified. Follow-up audits should be scheduled to verify that corrective action was carried out, and that it was effective and completed, in accordance with the policies and procedures specified in the aerodrome manual.

(2) The aerodrome, its management system key processes, procedures and its operation should be audited within the first 12 months since the date of the issuance of the certificate.

(3) After that, the aerodrome operator should consider the results of its safety (risk) assessments and of its past compliance monitoring activities, in order to adapt the calendar period within which an audit or a series of audits should be conducted, to cover the whole aerodrome, its management system key processes, procedures and its operation in a manner, and at intervals set out in the aerodrome manual. This calendar period, should be consistent with the relevant competent authority’s oversight planning cycle and may be increased, up to 36 months, in coordination with the competent authority, provided that there are no level 1 findings, and subject to the aerodrome operator having a good record of rectifying findings in a timely manner.

COMPLIANCE MONITORING — GENERAL

(a) The organisational set-up of the compliance monitoring should reflect the size of the aerodrome operator, and the nature and complexity of its activities. The person responsible for the compliance monitoring may perform all audits and inspections himself/herself, or appoint one or more auditors by choosing personnel having the related competence as defined in paragraph (b) of AMC2 ADR.OR.D.005(b)(11) either from within, or outside the aerodrome operator.

(b) Regardless of the option chosen, it must be ensured that the independence of the audit function is not affected, in particular, in cases where those performing the audit or inspection are also responsible for other functions for the aerodrome operator.

(c) In case external personnel are used to perform compliance audits or inspections:

(1) any such audits or inspections are performed under the responsibility of the person responsible for the compliance monitoring; and

(2) the aerodrome operator remains responsible to ensure that the external personnel has relevant knowledge, background, and experience as appropriate to the activities being audited or inspected, including knowledge and experience in compliance monitoring.

(d) The aerodrome operator retains the ultimate responsibility for the effectiveness of the compliance monitoring, in particular for the effective implementation and follow-up of all corrective actions.

RESPONSIBILITY FOR COMPLIANCE MONITORING

(a) The responsibility for the compliance monitoring should:

(1) be with a person who has direct access to, and is responsible to the accountable manager;

(2) not be with one of the persons referred to in ADR.OR.D.015(b) or ADR.OR.D.015(c), except that in less complex aerodrome organisations/operations, it may also be with the accountable manager or the person referred to in ADR.OR.D.015(c).

(b) Persons allocated the responsibility for the compliance monitoring should have:

(1) adequate experience and expertise in aerodrome operations, or aerodrome maintenance, or similar area;

(2) adequate knowledge of, and experience in safety management and quality assurance;

(3) knowledge of the aerodrome manual; and

(4) comprehensive knowledge of the applicable requirements in the area of aerodromes.

AERODROME OPERATOR MANAGEMENT SYSTEM DOCUMENTATION

The aerodrome operator should ensure that the documented management system key processes include a process for making personnel aware of their responsibilities, as well as its amendment procedure.

The aerodrome operator’s management system documentation should, at least, include the following information:

(a) a statement signed by the accountable manager to confirm that the aerodrome operator will continuously work in accordance with the applicable requirements and the operator’s documentation;

(b) the aerodrome operator’s scope of activities;

(c) the titles and names of persons referred to in ADR.OR.D.015 and AMC2 ADR.OR.D.005(b)(11);

(d) an organisation chart showing the lines of responsibility between the nominated persons;

(e) a general description and location of the facilities;

(f) procedures specifying how the aerodrome operator ensures compliance with the applicable requirements;

(g) the amendment procedure for the operator’s management system documentation; and

(h) safety management system outputs.

AERODROME OPERATOR SAFETY MANAGEMENT MANUAL

(a) In cases where safety management is set out in a Safety Management Manual, it should be the key instrument for communicating the approach to safety for the aerodrome operator. The Safety Management Manual should document all aspects of safety management, including the safety policy, objectives, procedures, and individual safety responsibilities.

(b) The contents of the Safety Management Manual should include:

(1) scope of the safety management system;

(2) safety policy and objectives;

(3) safety responsibilities of key safety personnel;

(4) documentation control procedures;

(5) safety assessment process, including hazard identification and risk management schemes;

(6) monitoring of implementation and effectiveness of safety actions, and risk mitigation measures;

(7) safety performance monitoring;

(8) safety reporting (including hazard reporting) and investigation;

(9) coordination of emergency response planning;

(10) management of change (including organisational changes with regard to safety responsibilities);

(11) safety promotion; and

(12) safety management system outputs.

GM1 ADR.OR.D.005(c) Management system

ED Decision 2014/012/R

AERODROME OPERATOR MANAGEMENT SYSTEM DOCUMENTATION

It is not required to duplicate information in several manuals. The Safety Management Manual is considered to be a part of the aerodrome manual.

ADR.OR.D.005A Information security management system

Delegated Regulation (EU) 2022/1645

The aerodrome operator shall establish, implement and maintain an information security management system in accordance with Delegated Regulation (EU) 2022/1645 (19 Commission Delegated Regulation (EU) 2022/1645 of 14 July 2022 laying down rules for the application of Regulation (EU) 2018/1139 of the European Parliament and of the Council, as regards requirements for the management of information security risks with a potential impact on aviation safety for organisations covered by Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 and amending Commission Regulations (EU) No 748/2012 and (EU) No 139/2014 (OJ L 248, 26.9.2022, p. 18).) in order to ensure the proper management of information security risks which may have an impact on aviation safety.

[applicable from 16 October 2025 — Delegated Regulation (EU) 2022/1645]

ADR.OR.D.007 Management of aeronautical data and aeronautical information

Delegated Regulation (EU) 2022/1645

(a) As part of its management system, the aerodrome operator shall implement and maintain a quality management system covering the following activities:

(1) its aeronautical data activities;

(2) its aeronautical information provision activities.

(b) The aerodrome operator shall, as part of its management system, establish a security management system to ensure the security of operational data it receives, or produces, or otherwise employs, so that access to that operational data is restricted only to those authorised.

(c) The security management system of the aerodrome operator shall define the following elements:

(1) the procedures relating to data security risk assessment and mitigation, security monitoring and improvement, security reviews and lesson dissemination;

(2) the means designed to detect security breaches and to alert personnel with appropriate security warnings;

(3) the means of controlling the effects of security breaches and of identifying recovery action and mitigation procedures to prevent reoccurrence.

(d) The aerodrome operator shall ensure the security clearance of its personnel with respect to aeronautical data security.

(e) The aerodrome operator shall take the necessary measures to protect its aeronautical data against cyber security threats.

[applicable until 15 October 2025 — Delegated Regulation (EU) 2020/2148]

(a) As part of its management system, the aerodrome operator shall implement and maintain a quality management system covering the following activities:

(1) its aeronautical data activities;

(2) its aeronautical information provision activities.

(b) As part of its management system, the aerodrome operator shall establish a security management system to ensure the security of operational data it receives, or produces, or otherwise employs, so that access to that operational data is restricted only to those authorised.

(c) The security management system shall define the following elements:

(1) the procedures relating to data security risk assessment and mitigation, security monitoring and improvement, security reviews and lesson dissemination;

(2) the means designed to detect security breaches and to alert personnel with appropriate security warnings;

(3) the means of controlling the effects of security breaches and of identifying recovery action and mitigation procedures to prevent reoccurrence.

(d) The aerodrome operator shall ensure the security clearance of its personnel with respect to aeronautical data security.

(e) The aspects related to information security shall be managed in accordance with point ADR.OR.D.005A.

[applicable from 16 October 2025 — Delegated Regulation (EU) 2022/1645]

QUALITY MANAGEMENT SYSTEM FOR AERONAUTICAL DATA AND AERONAUTICAL INFORMATION PROVISION ACTIVITIES

An aerodrome operator does not need to duplicate functions and activities in order to discharge the responsibilities related to the management of aeronautical data and aeronautical information provision activities.

In this respect, the compliance monitoring may be used for the purposes of ensuring compliance with the relevant requirements for management of aeronautical data and aeronautical information provision activities.

SECURITY MANAGEMENT FOR AERONAUTICAL DATA AND AERONAUTICAL INFORMATION PROVISION ACTIVITIES

(a) The security management objectives should be:

(1) to ensure the security of aeronautical data and aeronautical information received, produced, or otherwise employed so that it is protected from interference, and access to it is restricted only to those authorised; and

(2) to ensure that the security management measures meet appropriate national, EU, or international requirements for critical infrastructure and business continuity, and international standards for security management, including:

(i) ISO/IEC 17799:2005 — Information technology — Security techniques — Code of practice for information security management;

(ii) ISO 28000:2007: — Specification for security management systems for the supply chain.

(b) Regarding the ISO standards, the relevant certificates issued by an appropriately accredited organisation, are considered as an Acceptable Means of Compliance.

INFORMATION SECURITY THREAT

Information security threat may be any circumstance or event with the potential to adversely impact the operation, systems and/or constituents due to human action (accidental, casual or purposeful, intentional or unintentional, mistaken) resulting from unauthorised access, use, disclosure, denial, disruption, modification, or destruction of information and/or information system interfaces. This includes malware and the effects of external systems on dependent systems but does not include physical threats.

ADR.OR.D.010 Contracted activities

Regulation (EU) No 139/2014

(a) Contracted activities include all activities within the aerodrome operator’s scope in accordance with the terms of the certificate that are performed by other organisations either itself certified to carry out such activity or if not certified, working under the aerodrome operator’s approval. The aerodrome operator shall ensure that when contracting or purchasing any part of its activity, the contracted or purchased service or equipment or system conforms to the applicable requirements.

(b) When an aerodrome operator contracts any part of its activity to an organisation that is not itself certified in accordance with this Part to carry out such activity, the contracted organisation shall work under the approval and oversight of the aerodrome operator. The aerodrome operator shall ensure that the Competent Authority is given access to the contracted organisation, to determine continued compliance with the applicable requirements.

RESPONSIBILITY WHEN CONTRACTING ACTIVITIES

(a) An aerodrome operator may contract certain activities to external organisations.

(b) A written agreement should exist between the aerodrome operator and the contracted organisation, clearly defining the contracted activities and the applicable requirements.

(c) The contracted safety related activities relevant to the agreement should be included in the aerodrome operator’s safety management and compliance monitoring programmes.

(d) The aerodrome operator should ensure that the contracted organisation has the necessary authorisation, declaration, or approval when required, and commands the resources and competence to undertake the task; to this end, a prior audit of the contracted party should be conducted to ensure that the contracted organisation meets the applicable requirements, and the requirements specified by the aerodrome operator itself.

CONTRACTING — GENERAL

(a) Contracted activities to external organisations for the provision of services may include areas such as:

(1) maintenance of the aerodrome and equipment;

(2) surveying for aeronautical data;

(3) apron management services;

(4) training;

(5) rescue and firefighting services;

(6) aerodrome design, etc.

(b) In case of contracted activities, the aerodrome operator should define relevant management responsibilities within its own organisation.

(c) The ultimate responsibility for the product or service provided by contracted organisations should always remain with the aerodrome operator.

RESPONSIBILITY WHEN CONTRACTING ACTIVITIES

(a) Regardless of the approval status of the contracted organisation, the contracting aerodrome operator is responsible to ensure that all contracted activities are subject to hazard identification, safety (risk) assessment and mitigation, as well as compliance monitoring.

(b) When the contracted organisation is itself certified to carry out the contracted activities, the aerodrome operator’s compliance monitoring should at least check that the approval effectively covers the contracted activities, and that it is still valid.

ADR.OR.D.015 Personnel requirements

Regulation (EU) No 139/2014

(a) The aerodrome operator shall appoint an accountable manager, who has the authority for ensuring that all activities can be financed and carried out in accordance with the applicable requirements. The accountable manager shall be responsible for establishing and maintaining an effective management system.

(b) The aerodrome operator shall nominate persons responsible for the management and supervision of the following areas:

(1) operational services of the aerodrome; and

(2) maintenance of the aerodrome.

(c) The aerodrome operator shall nominate a person or group of persons responsible for the development, maintenance and day-to-day management of the safety management system.

Those persons shall act independently of other managers within the organisation, shall have direct access to the accountable manager and to appropriate management for safety matters and shall be responsible to the accountable manager.

(d) The aerodrome operator shall have sufficient and qualified personnel for the planned tasks and activities to be performed in accordance with the applicable requirements.

(e) The aerodrome operator shall assign a sufficient number of personnel supervisors to defined duties and responsibilities, taking into account the structure of the organisation and the number of personnel employed.

(f) The aerodrome operator shall ensure that personnel involved in the operation, maintenance and management of the aerodrome are adequately trained in accordance with the training programme.

ACCOUNTABLE MANAGER

(a) Accountable Manager — General

(1) The accountable manager should:

(i) ensure that all necessary resources are available to operate the aerodrome in accordance with the applicable requirements and the aerodrome manual;

(ii) ensure that if there is a reduction in the level of resources or abnormal circumstances which may affect safety, the required reduction in the level of operations at the aerodrome is implemented;

(iii) establish, implement, and promote the safety policy; and

(iv) ensure compliance with relevant applicable requirements, certification basis, and the organisation’s safety management system, as well as its quality management system with regard to aeronautical data and aeronautical information provision activities.

(2) The accountable manager should have:

(i) an appropriate level of authority within the aerodrome operator’s organisation to ensure that activities are financed and carried out to the standard required;

(ii) knowledge and understanding of the documents that prescribe relevant aerodrome safety standards;

(iii) understanding of the requirements for competence of aerodrome management personnel, so as to ensure that competent persons are in place;

(iv) knowledge and understanding of safety, quality, and security management systems related principles and practices, and how these are applied within the organisation;

(v) knowledge of the role of the accountable manager; and

(vi) knowledge and understanding of the key issues of risk management within the aerodrome.

(b) Accountable manager — Delegation of responsibilities

(1) The technical knowledge and understanding expected by an accountable manager is high level, with particular reference to his/her own role in ensuring that standards are maintained.

(2) During periods of absence, the day-to-day responsibilities of the accountable manager may be delegated; however, the accountability ultimately remains with the accountable manager.

(3) Depending on the size and the complexity of operations, the accountable manager may delegate his/her responsibilities in the area of training, by nominating a training manager whose responsibilities should be the establishment, coordination, implementation of training programmes, and relevant record keeping of personnel training, as well as of the proficiency check programmes.

In any case, the accountability, ultimately, remains with the accountable manager.

ACCOUNTABLE MANAGER

Depending on the size, structure and complexity of the organisation, the accountable manager may be:

(a) the chief executive officer (CEO);

(b) the chief operating officer (COO);

(c) the chairperson of the board of directors;

(d) a partner; or

(e) the proprietor.

The appointment of an accountable manager who is given the required authorities and responsibilities, requires that the individual has the necessary attributes to fulfil the role. The accountable manager may have more than one function in the organisation. Nonetheless, the accountable manager’s role is to instil safety as a core organisational value, and to ensure that the safety management system is properly implemented and maintained through the allocation of resources and tasks.

NOMINATED PERSONS

(a) General

(1) A description of the functions of the nominated persons, including their names, as well as clearly defined responsibilities and authorisations, should be contained in the aerodrome manual. Nominated persons should have adequate resources available to perform their duties.

(2) The aerodrome operator should make arrangements to ensure adequate continuity of supervision in the absence of nominated persons.

(3) The person nominated by the aerodrome operator should not be nominated by another aerodrome operator, unless agreed with the Competent Authority.

(4) Persons nominated should be foreseen to work sufficient hours to fulfil the management functions associated with the scale and complexity of the operation.

(5) A nominated person may hold more than one of the nominated posts if such an arrangement is considered suitable and properly matched to the aerodrome operator’s organisation, and the complexity of its operations.

(b) Competence of nominated persons

The manager of Operational Services and the Maintenance manager should have:

(1) adequate practical experience and expertise in aerodrome operations or maintenance (or similar area) respectively;

(2) comprehensive knowledge of the applicable requirements in the area of aerodromes;

(3) appropriate level of knowledge of safety and quality management; and

(4) knowledge of the aerodrome manual.

COMBINATION OF NOMINATED PERSONS RESPONSIBILITIES

(a) The acceptability of a single person holding more than one post, possibly in combination with being the accountable manager, should depend upon the aerodrome operator’s organisation, and the complexity of its operations. The two main areas of concern should be competence, and an individual’s capacity to meet his/her responsibilities.

(b) As regards competence in different areas of responsibility, there should not be any difference from the requirements applicable to persons holding only one post.

(c) The capacity of an individual to meet his/her responsibilities should primarily be dependent upon the complexity of the aerodrome operator’s organisation and its operations. However, the complexity of the aerodrome operator’s organisation, or of its operation may prevent, or limit, combinations of posts.

SAFETY MANAGER

(a) The safety manager should be the focal point and responsible for the development, administration, and maintenance of an effective safety management system (see also AMC1 ADR.OR.D.005(b)(1)).

(b) The role of the safety manager should be to:

(1) facilitate hazard identification, risk analysis, and management;

(2) monitor the implementation and functioning of the safety management system, including the necessary safety actions;

(3) manage the safety reporting system of the aerodrome;

(4) provide periodic reports on safety performance;

(5) ensure maintenance of safety management documentation;

(6) ensure that there is safety management training available, and that it meets acceptable standards;

(7) provide advice on safety matters; and

(8) initiate and participate in internal occurrence/accident investigations.

(c) The safety manager should have:

(1) adequate practical experience and expertise in aerodrome operations, or aerodrome maintenance, or similar area;

(2) adequate knowledge of safety and quality management;

(3) adequate knowledge of the aerodrome manual; and

(4) comprehensive knowledge of the applicable requirements in the area of aerodromes.

(d) The safety manager should not be one of the persons referred to in ADR.OR.D.015(b) or AMC2 ADR.OR.D.005(b)(11). However, in the case of less complex aerodrome organisations/operations, the safety manager may be the accountable manager, or one of the persons referred to in ADR.OR.D.015(b), or AMC2 ADR.OR.D.005(b)(11), or any other person at appropriate management level, provided that he/she can act independently of other managers within the organisation of the aerodrome operator, and has direct access to the accountable manager and to appropriate management for safety matters.

DETERMINATION OF PERSONNEL NEEDS AND QUALIFICATIONS

(a) The aerodrome operator should determine the required personnel for the planned tasks.

(b) The aerodrome operator should determine the required personnel qualifications, in accordance with the applicable requirements (and the national and European Union legislation where applicable), and include them in the aerodrome manual. A documented system with defined responsibilities should be in place, in order to identify any needs for changes with regard to personnel qualifications.

QUALIFICATION OF PERSONNEL

The term ‘qualified’ denotes fitness for the purpose. This may be achieved through fulfilment of the necessary conditions such as completion of required training, or acquisition of a diploma or degree, or through the gaining of suitable experience. It, also, includes the ability, capacity, knowledge, or skill that matches or suits an occasion, or makes someone eligible for a duty, office, position, privilege, or status.

Certain posts may, by nature, be associated with the possession of certain qualifications in a specific field (e.g. rescue and firefighting, civil, mechanical or electrical engineering, wildlife biology, etc.). In such cases, the person occupying such a post is expected to possess the necessary qualifications at a level that is in accordance with the applicable national or European Union legislation.

DISTRIBUTION OF RULES AND PROCEDURES

The aerodrome operator should have a system in place to distribute the rules and procedures to personnel to exercise their duties and responsibilities.

DISTRIBUTION MEANS OF RULES AND PROCEDURES

The aerodrome operator may use electronic means, or conventional means to distribute rules and procedures to personnel. The method used should verify that the information reached the intended recipient.

ADR.OR.D.017 Training and proficiency check programmes

Delegated Regulation (EU) 2020/2148

(a) The aerodrome operator shall establish and implement a training programme for personnel involved in the operation, maintenance and management of the aerodrome, to ensure their continued competence, and that they are aware of the rules and procedures relevant to operation of the aerodrome and the relationship of their functions and tasks to the aerodrome operation as a whole.

(b) The training referred to in point (a) shall:

(1) include initial, recurrent, refresher and continuation training;

(2) be appropriate to the functions and tasks for the personnel;

(3) include the applicable operational procedures and requirements of the aerodrome, as well as driving.

(c) The aerodrome operator shall ensure that any other personnel, including personnel of other organisations that operate or provide services at the aerodrome, allowed unescorted access to the movement area and other operational areas of the aerodrome, is adequately trained and qualified for such unescorted access.

(d) The training referred to in point (c) shall:

(1) include initial, recurrent, refresher and continuation training;

(2)  include the applicable operational procedures and requirements of the aerodrome, as well as driving.

(e) The aerodrome operator shall ensure that personnel referred to in points (a) and (c) have successfully completed the necessary initial training prior to being allowed:

(1) to perform their duties unattended;

(2) unescorted access to the movement area and other operational areas of the aerodrome.

The initial training shall include theoretical and practical training of adequate duration and competence assessments of the personnel following the provision of the training.

(f) In order to continue to perform their duties unattended and being allowed unescorted access to the movement area and other operational areas of the aerodrome and unless otherwise specified in this Part and Part-ADR.OPS, the aerodrome operator shall ensure that personnel referred to in points (a) and (c) have been trained on the rules and procedures relevant to operation of the aerodrome by successfully completing:

(1) recurrent training, at intervals not exceeding 24 months since the completion of their initial training. If the recurrent training is undertaken within the last 3 calendar months of the interval, the new interval period shall be counted from the expiry date of the original interval;

(2) refresher training, prior to performing their duties unattended or being allowed unescorted access to the movement area or other operational area of the aerodrome, when they are absent from their duties for a period not less than 3 and not more than 12 consecutive months. In case of absence beyond 12 consecutive months, such personnel shall undergo initial training in accordance with point (c);

(3) continuation training due to changes to their operating environment or assigned tasks, as necessary.

(g) The aerodrome operator shall establish and implement a proficiency check programme for personnel referred to in point (a), and ensure for personnel referred to in point (c) that they have demonstrated their capabilities in the performance of their tasks, in accordance with a proficiency check programme, in order to ensure:

(1) their continued competence;

(2) that they are aware of the rules and procedures relevant to their functions and tasks.

Unless otherwise specified in this Part and Part-ADR.OPS, the aerodrome operator shall ensure that persons referred to in points (a) and (c) undergo proficiency checks at intervals not exceeding 24 months since the completion of their initial training.

(h) The aerodrome operator shall ensure that:

(1) adequately qualified and experienced instructors for the provision of training and assessors for the assessments and the proficiency checks are used;

(2) suitable facilities, means and equipment are used for the provision of the training and, where applicable, for the conduct of the proficiency checks.

(i) The aerodrome operator shall establish and implement procedures for the implementation of the training and proficiency check programmes and shall:

(1) maintain appropriate qualification, training and proficiency check records to demonstrate compliance with this requirement;

(2) upon request, make such records available to its personnel concerned;

(3) if a person is employed by another employer, upon request, make such records of that person available to that new employer.

TRAINING OF AERODROME PERSONNEL — GENERAL

(a) The training programme should cover all personnel:

(1) involved in the operation, maintenance, and management of the aerodrome (supervisors, managers, senior managers, and the accountable manager); and

(2) operating unescorted on the movement area, and other operational areas of the aerodrome, and which are related to the aerodrome operator

regardless of their level in the organisation.

(b) The training programme should include safety management system training whose level of detail should be appropriate to the individual’s responsibility and involvement in the safety management system and should also include human and organisational factors.

(c) The training programme should consist of the following:

(1) a process to identify training standards, including:

(i) syllabi, duration, and frequency for each type of training and area of activity for the persons mentioned in point (a), including for the instructors and assessors;

(ii) method(s) for delivery of training and competency assessment; minimum performance to be achieved by trainees; and

(iii) track completion of required training;

(2) a validation process that measures the effectiveness of training;

(3) initial job-specific training;

(4) practical training;

(5) recurrent training;

(6) refresher training; and

(7) continuation training.

(d) The training programme should identify training responsibilities and contain procedures:

(1) for training and competency assessment of the trainees;

(2) to be applied in the event that personnel do not achieve or maintain the required standards.

(e) Training contents, syllabi and duration should comply with the requirements prescribed in
Part-ADR.OPS.

(f) A training file should be developed for each employee, including management, and a system should be in place to assist in identifying and tracking employee training requirements, and verifying that personnel have received the required/planned training.

(g) Information related to points (c) and (d), including the identified training standards and the related syllabi and frequency, should be included in the aerodrome manual.

TRAINING OF PERSONNEL OF OTHER ORGANISATIONS — GENERAL

With regard to the training of the personnel employed by other organisations which operate or provide services at the aerodrome, and which are allowed unescorted access to the movement area or other operational areas of the aerodrome, the provisions of AMC1 ADR.OR.D.017(a);(b) apply, except that the safety management system training may cover only the necessary elements (e.g. relevant procedures, safety reporting system, aerodrome safety programmes, etc.).

TRAINING — GENERAL

(a) Aerodrome operator’s personnel

(1) The purpose of the training programme is to ensure the initial and continued competence of the aerodrome operator’s personnel to perform their duties, irrespective of their level in the organisation of the aerodrome. This is to be achieved by ensuring that each person receives initial, recurrent, and if necessary, refresher training (as a result of absence from duties), and other ad hoc training (e.g. due to the planned/implemented change to the aerodrome system, etc.), which is relevant to his or her function and tasks.

One method to achieve this is by identifying the tasks of the employees and ensuring that each one of them receives the training that corresponds to such tasks.

For example, an employee whose tasks involve driving would need to undergo the relevant driving training (depending on the area of the aerodrome that he or she will operate in the course of his or her duties). Moreover, if the duties of that person involve also conducting inspections of the movement area, then the training plan for that employee would also need to include relevant training for that area.

Moreover, apart from this specific type of training, one would also consider the need for all personnel to undergo a safety management system training relevant to their duties.

(2) As part of the process of the development of the training programme, there are also other issues that need to be considered, such as:

(i) the content and duration of the courses;

(ii) the minimum performance required by the trainees;

(iii) the method to be used for the delivery of the training;

(iv) the way the competency assessments of the trainees will be performed; and

(v) the development of the relevant procedures to ensure that the training programme achieves its objectives and covers circumstances that may occur (e.g. the case where an employee fails to achieve the required competency level).

Consideration needs to be given to the fact that the relevant procedures would also need to address the organisation and implementation of the recurrent, refresher and continuation training.

(b) Personnel of other organisations operating or providing services at the aerodrome

(1) At the aerodrome environment, there may be also other organisations that operate or provide their services to other organisations or the aerodrome operator. Given that such activities may have an effect on safety and affect aerodrome operations, it is necessary to ensure that the personnel of these organisations that are allowed unescorted access to the movement area and other operational areas of the aerodrome, are trained in the applicable aerodrome’s operational procedures and requirements, so that they are enabled to safely operate within the aerodrome environment (e.g. the apron, and sometimes on the manoeuvring area), sharing a common understanding about safety management.

To achieve this, the aerodrome operator needs to identify which are the applicable operational procedures and requirements for the relevant training of this type of personnel.

For instance, if an employee of another organisation needs to drive and work on the apron or on the manoeuvring area, then he or she would need to undergo the relevant training prior to being allowed to do so. This would involve the relevant driving training. On the other hand, the same person would be subject to certain aerodrome operational procedures and requirements which apply on this area, and so he or she would need to also receive training on these procedures and requirements (e.g. as part of the FOD control programme). Moreover, there is also an additional need for this employee to receive a safety management system training relevant to their duties, e.g. how to file an occurrence report, etc.

(2) As part of this process, the aerodrome operator would need to make considerations similar to the ones referred to in (a)(2) above, in order to ensure the continued competence and awareness of such personnel in the required fields.

(3) In this way, the aerodrome operator is expected to be able to safely manage the interfaces it has with the other organisations present at the aerodrome. However, in order to ensure the successful implementation of this training, the aerodrome operator would need to cooperate and have relevant arrangements with the organisations whose employees need to complete this training. Depending on the situation and the solutions chosen in each case, the content of the arrangements may vary and cover different areas, such as the exchange of relevant information regarding absence of personnel for the organisation of a refresher training, the use of instructors or assessors proposed by these organisations for the implementation of the relevant part of the training programme, etc.

(4) It is to be noted that the training related to the performance of the actual duties of this type of personnel (e.g. how to use its own organisation’s equipment, or the internal procedures of that organisation, etc.) falls outside of the scope of this part of the training required under ADR.OR.D.017.

(c) Understanding of the aerodrome system as a whole

It is important that the training provides all trainees with an understanding of the interdependencies between the various functions and actors at the aerodrome environment, and how their work is related to the functions and work of other personnel and organisations, so that they acquire a rather ‘global’ (as opposed to an ‘isolated’) perspective.

INITIAL TRAINING

(a) Theoretical training

(1) A suitable method (or suitable methods) for the delivery of each part of the required training should be identified and specified in the training programme.

(2) The theoretical training should be delivered at appropriate training facilities, and the delivery of the training should be supported by means and equipment which are suitable for the training area covered.

Computer-based training may also be used, where interaction of the trainee(s) with other persons is not necessary and where the training material has been prepared, reviewed and updated by an instructor nominated in accordance with AMC1 ADR.OR.D.017(h). Where provided, such training should consider human factors principles, and, as a minimum, should also cater for the possibility for the trainees to ask questions and receive clarifications, as well as to provide feedback.

(3) After the initial training, the acquired competency should be assessed. The competency assessment should be accomplished by using identified method(s), appropriate to the training element to be assessed. Assessment procedures should be established, addressing, as a minimum, location(s), identity check and invigilation, and assessment discipline. Computer-based systems may be used for the assessment of the trainees provided that:

(i) the assessment material is prepared, reviewed and updated by an assessor nominated in accordance with AMC1 ADR.OR.D.017(h); and

(ii) the assessment is conducted in a controlled facility and environment and in a manner that physically ensures the identity of the trainees during the assessment process.

(4) Training elements that require individual practical participation may be combined with practical assessments.

(b) Practical training

(1) The practical training should follow the successful completion of the theoretical training and should be provided by an instructor nominated in accordance with AMC1 ADR.OR.D.017(h). The duration of the practical training should be appropriate to the area covered.

(2) A practical competency assessment should be conducted by an assessor nominated in accordance with AMC1 ADR.OR.D.017(h), following the completion of each practical training provided. Assessment procedures should be established, addressing, as a minimum, location(s), identity check, and assessment discipline.

INITIAL TRAINING PROCESS — NEW EMPLOYEES

When an aerodrome operator employs personnel mentioned in point (a) of AMC1 ADR.OR.D.017(a);(b), who have already completed a training programme with another aerodrome operator, the current employer may, when determining the training needs required for the post to be filled by that employee, decide to credit training subjects on which the individual has already completed relevant training, as they are documented in his or her training records. In any case, no credit may be given for training areas which are specific to that aerodrome.

INITIAL TRAINING METHODS

(a) The methods to be used for the delivery of the theoretical training include, but are not limited to, the following:

(1) lecture;

(2) lesson/demonstration;

(3) case study;

(4) exercises, including computer-based practical exercises;

(5) facilitation;

(6) group work;

(7) interactive training; and

(8) supervised practices.

(b) The methods to be used for the competency assessment of the trainees upon completion of the theoretical training could include:

(1) practical demonstration;

(2) computer-based assessment;

(3) oral or written assessments;

or combinations of such methods, as appropriate.

When determining the method(s) to be used for the assessment of the trainees, the advantages and the limitations of each method, as well as the objectives of the training, would need to be taken into account.

For example, the oral assessment may be used to test the understanding of the trainees around certain issues, as well as the requirements governing them, to have a clearer indication that the trainee not only knows what he or she should be doing in a given case, but also why he or she should be doing it. However, the oral assessment requires considerable skills and it should be undertaken in a way that ensures consistency among individual assessors. On the other hand, written assessments may also be used to test the theoretical knowledge and to a lesser degree the understanding of the trainees. Written tests may be easier to administer and to ensure their consistency, particularly when using multiple-choice questions. However, multiple-choice questions may test knowledge, but they may not be appropriate for determining how a person would react in an operational situation. A written assessment may also be computer-based.

RECURRENT, REFRESHER AND CONTINUATION TRAINING

(a) Recurrent training

The recurrent training may be only theoretical and should cover the areas addressed in the initial theoretical training provided. The recurrent training should be designed to review, reinforce or enhance the existing knowledge and skills of the trainees, and should also take into account the changes that have taken place in the content of the subjects covered by the initial training.

Upon completion of the recurrent training, an assessment of the trainee should be conducted.

(b) Refresher training

The refresher training may be only theoretical, and shorter than the recurrent training, and its content should take into account the length of the person’s absence and the magnitude of the relevant changes that may have taken place during the period of absence of the employee.

Upon completion of the refresher training, an assessment of the trainee should be conducted (for the process of the assessment, see AMC1 ADR.OR.D.017(e)).

(c) Continuation training

Continuation training should be provided in the following cases:

(1) A person is assigned new/different tasks

In the case a person is to be assigned to different/additional tasks, an appropriate theoretical and practical training which covers any differences between his or her previous and future tasks should be completed. This differences training should be determined based on a comparison between the training required for the new tasks, and the training already completed by that person, as documented in his or her training records.

The provision of training should be followed by relevant competency assessment (for the process of the assessment, see AMC1 ADR.OR.D.017(e));

(2) A change is introduced to the operating environment of a person, which is of such nature and/or magnitude that it requires the training of the personnel (e.g. a new system to be used by the personnel concerned).

A method should be established and documented to be used for determining the need (or not) for, as well as the type(s) (theoretical, practical, or both) of, training to be provided following changes. The provision of training should be followed by a relevant competency assessment.

PROFICIENCY CHECKS

(a) The purpose of the proficiency check is to establish the ability of an individual to perform satisfactorily, in accordance with applicable requirements and the content of the aerodrome manual as they relate to his or her tasks.

In particular, the proficiency check of the aerodrome operator’s personnel should determine the performance of an individual regarding the tasks assigned to him or her. Regarding personnel of other organisations operating or providing services at the aerodrome, the objective of the proficiency check should be the assessment of the performance of the individual with regard to the applicable operational procedures and requirements of the aerodrome.

To this end, the elements that each proficiency check should cover should be identified and documented.

A proficiency check does not need to cover all associated elements at the same time; however, all elements of a proficiency check should be covered within the period specified in ADR.OR.D.017(g).

Depending on the situation, specialty and element checked, and provided that it will not affect the quality and completeness of the proficiency check, a single proficiency check may be used to cover more than one person. The person(s) to be checked should be made aware prior to the proficiency check.

Proficiency checks may be conducted during normal and/or abnormal/emergency conditions depending on the situation and the specialty of the person being checked.

(b) The proficiency check programme should:

(1) include a process to identify the frequency of proficiency checks, including for the instructors and assessors, and track completion of the required checks;

(2) identify checking responsibilities and relevant checking methods and procedures;

(3) include procedures to be applied in the event that personnel do not achieve the required standards; and

(4) include a validation process that measures the effectiveness of the programme.

(c) Information related to the proficiency check programme should be included in the aerodrome manual.

PROFICIENCY CHECKS

Proficiency checks may be conducted at shorter intervals following, for example, an occurrence or to ensure that the person is able to apply in practice knowledge acquired due to updated training.

INSTRUCTORS — ASSESSORS

(a) The aerodrome operator should nominate instructors and assessors to be used for the implementation of the training and proficiency check programmes. The personnel to be nominated may also include contracted instructors or organisations for individual subjects.

The aerodrome operator may also nominate personnel proposed by organisations operating or providing services at the aerodrome to be used as instructors and assessors for the implementation of the respective part of the training and proficiency check programmes of these organisations’ personnel. Irrespective of the solution chosen, the aerodrome operator remains responsible for the proper implementation of the training programme and the proficiency check programme in a consistent manner, and according to the relevant procedures and standards established by the aerodrome operator.

(b) A person may be qualified and nominated both as an instructor and as an assessor by the aerodrome operator. However, such a person may not provide assessment for own instruction, courses, or material.

(c) Instructors

(1) Theoretical instruction should be given by appropriately qualified instructors. They should have:

(i) appropriate level and depth of knowledge in the field where instruction is to be given;

(ii) documented ability to use appropriate instructional techniques; and

(iii) adequate experience in the subject where instruction is to be given.

(2) Instruction on practical skills should be given by appropriately qualified instructors who:

(i) meet the theoretical knowledge, and the working experience requirements appropriate to the instruction being given;

(ii) have demonstrated the ability to instruct, and to use appropriate instructional techniques;

(iii) are proficient in instructional techniques in the areas in which it is intended to provide instruction; and

(iv) receive relevant training, in accordance with the training programme, to ensure that the instructional competencies are maintained.

(d) Assessors

The persons who are responsible for assessing the competence and skills of the personnel should:

(1) have demonstrated the ability to assess the performance of, and conduct tests and checks in the areas covered by the training;

(2) receive relevant training, in accordance with the training programme, to ensure that the assessment standards are maintained up to date; and

(3) meet the theoretical knowledge requirements appropriate to the instruction being given and have adequate working experience in the area of instruction.

PERSONNEL RECORDS

(a) The aerodrome operator should use its record keeping system (see AMC1 ADR.OR.D.035) to record the following information for each person:

(1) starting date of employment/ending date of employment (if applicable);

(2) area of activity;

(3) previous working experience;

(4) qualifications;

(5) training (before entry and subsequent); and

(6) proficiency checks, including language proficiency as appropriate;

(b) Latest changes should be reflected into personnel records.

TRAINING RECORDS

(a) Training programme — general

The records of the training sessions provided, should include as a minimum the following:

(1) type of training, area of training and subjects covered;

(2) names of participants/signed list of participants;

(3) date and duration of training; and

(4) names of the instructor and assessor.

(b) Training records of individuals

The training records maintained for each individual should include as a minimum:

(1) the name of the trainee;

(2) the date(s) and the duration of the training;

(3) the place where the training was received;

(4) the name of the organisation that provided the training;

(5) the subjects covered, and the methodology of the course;

(6) any comments made by the instructor, if applicable;

(7) the performance assessment of the trainee, as applicable; and

(8) the name and signature of the instructor.

PROFFICIENCY CHECK RECORDS

The proficiency check records maintained for each individual should include as a minimum:

(a) the name of the person checked;

(b) the date(s) and the duration of the proficiency check;

(c) the methodology of the check conducted;

(d) any comments made by the assessor;

(e) the performance evaluation of the person checked; and

(f) the name and signature of the assessor.

ADR.OR.D.020 Facilities requirements

Regulation (EU) No 139/2014

(a) The aerodrome operator shall ensure that adequate and appropriate facilities are available to its personnel or personnel employed by parties with whom it has contracted for the provision of aerodrome operational and maintenance services.

(b) The aerodrome operator shall designate appropriate areas at the aerodrome to be used for the storage of dangerous goods transported through the aerodrome, in accordance with the Technical Instructions.

FACILITIES TO BE PROVIDED

Facilities should be provided to allow the performance of all tasks and activities in accordance with the applicable requirements. This includes, but is not limited to:

(a) adequate offices, working space, and office equipment;

(b) personnel protective equipment;

(c) equipment necessary for inspecting the aerodrome and its facilities, such as clinometers, distance measurement devices, etc.; and

(d) access to data sources necessary for the development and effective functioning of the safety management system and compliance monitoring of the aerodrome.

AMC1 ADR.OR.D.020(b) Facilities requirements

ED Decision 2014/012/R

Designated areas may vary and include facilities such as cargo areas, or even open-air areas.

Aircraft stands should also be designated for aircrafts that carry dangerous goods.

ADR.OR.D.025 Coordination with other organisations

Regulation (EU) No 139/2014

The aerodrome operator shall:

(a) ensure that the management system of the aerodrome addresses the coordination and interface with the safety procedures of other organisations operating or providing services at the aerodrome; and

(b) ensure that such organisations have safety procedures in place to comply with the applicable requirements of Regulation (EC) No 216/2008 and its Implementing Rules and the requirements laid down in the aerodrome manual.

COORDINATION OF SAFETY PROCEDURES

Coordination and interface with the safety procedures of other relevant organisations that are active at the aerodrome include, but is not limited to the following: aircraft operators, air navigation service providers, providers of apron management services, ground handling service providers, providers of services to persons with reduced mobility, aircraft maintenance organisations, flying training organisations, public authorities that operate on the movement area, as well as other organisations that perform activities independently at the aerodrome.

COMPLIANCE OF OTHER ORGANISATIONS

In order to ensure compliance of the organisations operating or providing services at the aerodrome, with the requirements of Regulation (EC) No 216/2008 and its Implementing Rules that are applicable to aerodromes and their operators, as well as with the content of the aerodrome manual, the aerodrome operator should:

(a) conduct audits and inspections of such organisations through its compliance monitoring; and

(b) establish procedures for the monitoring of related activities at the aerodrome.

ADR.OR.D.027 Safety programmes

Regulation (EU) No 139/2014

The aerodrome operator shall:

(a) establish, lead and implement programmes to promote safety and the exchange of safety-relevant information; and

(b) encourage organisations operating or providing services at the aerodrome to be involved in such programmes.

AMC1 ADR.OR.D.027 Safety programmes

ED Decision 2014/012/R

SAFETY PROGRAMMES — AERODROME SAFETY COMMITTEES

(a) The aerodrome operator should:

(1) organise, coordinate and implement programmes to promote safety at the aerodrome. Such programmes should include, but are not limited to:

(i) runway safety, including runway incursion and excursion prevention;

(ii) apron safety; and

(iii) FOD prevention;

(2) coordinate and promote the exchange of information, and the joint investigation of occurrences, serious incidents, and accidents.

(b) The aerodrome operator should establish, coordinate, and lead local aerodrome safety committees, and a Local Runway Safety Team, dealing with runway safety, apron safety, and the safety of the operations at the aerodrome in general. All relevant organisations operating or providing services at the aerodrome should participate to such aerodrome safety committees and the Local Runway Safety Team.

The local aerodrome safety committees and the Local Runway Safety Team should convene regularly, identify and review local safety issues, and examine possible solutions, and need for action. Minutes of such meetings should be kept. Procedures relevant to the functioning of local aerodrome safety committees and the Local Runway Safety Team should be included in the aerodrome manual.

GM1 ADR.OR.D.027 Safety programmes

ED Decision 2014/012/R

AERODROME SAFETY COMMITTEES

(a) Manoeuvring area/Apron Safety Committee

(1) The aerodrome operator should establish (a) Manoeuvring area/Apron Safety Committee(s);

(2) The Manoeuvring area/Apron Safety Committee(s) should have an advisory role to the aerodrome operator;

(b) Management of Manoeuvring area /Apron Safety Committee(s)

(1) The Manoeuvring area /Apron Safety Committee(s) should be chaired by an aerodrome operator’s official, responsible for aerodrome operations; and

(2) The aerodrome operator’s safety manager should act as the secretary of the Committee(s).

(c) Composition of Manoeuvring area /Apron Safety Committee(s)

 Participation should include, but not limited to representatives of:

(1) aerodrome users active in flight operations;

(2) aircraft ground handling services providers;

(3) aerodrome rescue and firefighting services;

(4) aerodrome operations;

(5) aerodrome wildlife management;

(6) aerodrome maintenance; and

(7) air navigation service provider(s).

(d) Tasks

The tasks of the Manoeuvring area /Apron Safety Committee(s) should be:

(1) to receive and evaluate reports on operational safety issues;

(2) to receive reports and statistical information on accidents and incidents, and propose solutions;

(3) to advise on manoeuvring area/apron safety issues such as:

(i) promotion of apron safety discipline;

(ii) FOD prevention;

(iii) developing measures for safe operations;

(iv) considering actions to resolve manoeuvring area/apron safety problems;

(v) apron equipment issues;

(vi) adherence to vehicle traffic issues;

(vii) new and/or updated safety instructions;

(viii) personal protective clothing/equipment issues;

(ix) methods to develop and promote apron safety awareness initiatives,

(x) snow and ice clearance issues;

(xi) proposed aerodrome works;

(xii) proposed changes/developments to the movement area;

(xiii) standard operating procedures, etc.

GM2 ADR.OR.D.027 Safety programmes

ED Decision 2014/012/R

LOCAL RUNWAY SAFETY TEAM

(a) Context

As part of its runway safety programme, the aerodrome operator should establish and lead a Local Runway Safety Team and act on local runway safety issues, including runway incursion (including runway confusion) and excursion prevention.

A runway incursion is defined as ‘Any occurrence at an aerodrome involving the incorrect presence of an aircraft, vehicle, or person on the protected area of a surface designated for the landing and take-off of aircraft20 The ‘protected area of a surface designated for the landing and take-off of aircraft’ is to be interpreted as the physical surface of a runway, from the centreline to the holding point appropriate to the type of runway. Where operations are being conducted during low visibility operations this should be the holding point appropriate to the procedures in force. The ‘protected surface’ includes the ILS glide-path and localiser critical areas at all times, and the ILS sensitive areas during low visibility procedures..’

A runway excursion occurs when ‘An aircraft veers off or overruns the runway surface during either take-off or landing’.

(b) Local Runway Safety Team composition

Participation should include representatives from all interested parties with direct involvement in runway operations at the aerodrome, including, but is not limited, to:

(1) aerodrome operations;

(2) aerodrome engineering and maintenance;

(3) air navigation service providers;

(4) aircraft operators that operate of the aerodrome;

(5) aerodrome rescue and firefighting services;

(6) drivers having access on the manoeuvring area.

(c) Role

The role of the Local Runway Safety Team should be to advise the appropriate management on potential runway safety issues, and to recommend mitigating measures.

(d) Tasks

The Local Runway Safety Team may have the following tasks:

(1) identification of potential runway safety issues, including the need for establishment of hot spots or other problem areas at the aerodrome and the review of the relevant entries of the AIP for accuracy;

(2) developing and running local awareness campaigns, at suitable periods, including at the start of a busy season or before an unusual event, that focus on local issues, for example, producing and distributing local hot spot maps, or other guidance material considered as necessary; local awareness campaigns should be periodically refreshed to maintain interest and operational awareness of the relevant personnel;

(3) monitoring the number, type and, the severity of runway incursions; disseminating safety recommendations delivered from accident and incident investigation findings as well as other relevant lessons learned e.g. from operational experience and best risk mitigation practices; sharing good practices to prevent runway incursions or excursions;

(4) assisting in verifying that communications between air traffic controllers, or other Air Traffic Services personnel, pilots, and vehicle drivers are satisfactory, or if any improvements could be suggested;

(5) making observations on a regular basis in different weather and light conditions to assess whether all runway entrances and visual aids are adequate, correctly located and understandable by all parties concerned, with no possible ambiguity of their meaning, or identify potential aerodrome design issues;

(6) understanding the operating difficulties of personnel working in other areas, and recommending areas for improvement; when reviewing operating procedures it is necessary to ensure that the procedures employed by different companies at the aerodrome are integrated and effective, so as to minimise the risk of runway incursions. Care should be taken when examining existing or proposed runway capacity enhancing procedures or noise abatement schemes involving runway preferential systems;

(7) development of joint, initial and recurrent, training programmes and familiarisation on runway incursion and excursion prevention, for all relevant personnel (vehicle drivers and other personnel operating on the manoeuvring area, pilots, Air Traffic Services personnel)              ; this may include visits to the manoeuvring area to increase awareness of the aerodrome layout, markings, signs, position of anemometers etc., where this is considered necessary;

(8) providing advice prior to the implementation of changes to the aerodrome, practices and procedures to identify potential for runway incursion or excursion; and

(9) assessing the effectiveness of implemented operational solutions periodically.

AMC2 ADR.OR.D.027 Safety programmes

ED Decision 2014/012/R

HOT SPOTS

Once hot spots have been identified at an aerodrome, suitable strategies should be implemented to remove the hazard and, when this is not immediately possible, to manage and mitigate the risk, including the publication of HOT SPOT charts in the Aeronautical Information Publication.

GM3 ADR.OR.D.027 Safety programmes

ED Decision 2014/012/R

HOT SPOTS

A hot spot is defined as ‘a location on an aerodrome movement area with a history, or potential risk of collision, or runway incursion, and where heightened attention by pilots/drivers is necessary.’

Strategies to manage and mitigate the risk from hot spots, depending on the case, may include, but are not limited to:

(a) awareness campaigns;

(b) additional visual aids (signs, markings, and lighting);

(c) establishment of alternative routings;

(d) introducing changes to the design of parts of the aerodrome; and

(e) the mitigation of blind spots in the aerodrome control tower.

Aerodrome charts showing hot spots should be produced locally, checked regularly for accuracy, revised as needed, distributed locally, and published in the AIP. The criteria used to establish and chart a hot spot are contained in the PANS-ATM (Chapter 7) and Annex 4 — Aeronautical Charts (Chapters 13, 14 and 15).

Examples of how hot spots are shown on charts are provided in Figures 1, 2, and 3 below.

adrAMCannexIIIimage1.png

Figure 1

adrAMCannexIIIimage2.png

Figure 2

adrAMCannexIIIimage3.png

Figure 3

ADR.OR.D.030 Safety reporting system

Regulation (EU) No 139/2014

(a) The aerodrome operator shall establish and implement a safety reporting system for all personnel and organisations operating or providing services at the aerodrome, in order to promote safety at, and the safe use of, the aerodrome.

(b) The aerodrome operator, in accordance with ADR.OR.D.005(b)(3), shall:

(1) require that the personnel and organisations mentioned in point (a) use the safety reporting system for the mandatory reporting of any accident, serious incident and occurrence; and

(2) ensure that the safety reporting system may be used for the voluntary reporting of any defect, fault and safety hazard which could impact safety.

(c) The safety reporting system shall protect the identity of the reporter, encourage voluntary reporting and include the possibility that reports may be submitted anonymously.

(d) The aerodrome operator shall:

(1) record all reports submitted;

(2) analyse and assess the reports, as appropriate, in order to address safety deficiencies and identify trends;

(3) ensure that all organisations operating or providing services at the aerodrome which are relevant to the safety concern, participate in the analysis of such reports and that any corrective and/or preventive measures identified are implemented;

(4) conduct investigations of reports, as appropriate; and

(5) refrain from attribution of blame in line with the ‘just culture’ principles.

SAFETY REPORTING SYSTEM

(a) Safety reporting system — General

(1) An effective safety reporting system should include, apart from aerodrome operator’s personnel, aircraft operators, ground handling service providers, air navigation service providers, and any other organisation operating on the aerodrome, or providing services at the aerodrome.

(2) The safety reporting system should include voluntary reporting possibilities intended for safety hazards identified by the reporter, and that may have potential safety consequences.

(3) The aerodrome operator should identify which events are mandatory to be reported.

(4) The aerodrome operator should provide the means and the format for reporting which should be such that meets the existing reporting requirements foreseen in the applicable legislation in terms of time, format, and required information to be reported.

(5) The safety reporting system should include an acknowledgement to the reporter for the submission of the report.

(6) The reporting process should be as simple as possible, and well documented, including details as to what, how, where, whom, and when to report;

(7) Regardless of the source or method of submission, once the information is received, it should be stored in a manner suitable for easy retrieval and analysis;

(8) Access to the submitted reports should be restricted to persons responsible for storing and analysing them;

(9) Protection of the identity of the reporter should be ensured, and the procedures established by the aerodrome operator to gather additional information for analyses, or investigations should respect this principle;

(10) The safety reporting system should include a feedback system to the reporting person, on the outcome of the occurrence analysis.

(b) Wildlife hazard reporting

(1) The aerodrome operator should ensure that its safety reporting system specifically addresses the requirement for all third parties (aircraft operators, aircraft mechanics, air traffic controllers, and other Air Traffic Services personnel, etc.) and all aerodrome personnel, to report to the aerodrome operator wildlife strikes, and relevant identified hazards.

(2) The reporting of such third parties should be done irrespectively of any other requirements according to which they have to report to the Competent Authority of the aerodrome, or the state of registry of the aircraft involved, or any other Competent Authority in the context of the national occurrence reporting programme.

NEED FOR SAFETY REPORTING

(a) The overall purpose of the safety reporting system is to use reported information to improve the level of safety performance of the aerodrome, and not to attribute blame.

(b) The objectives of the safety reporting system should be:

(1) to enable an assessment to be made of the safety implications of each relevant occurrence, serious incident and accident, including previous similar events, so that any necessary action can be initiated; and

(2) to ensure that knowledge of relevant occurrences, serious incidents and accidents is disseminated, so that other persons and organisations may learn from them.

ADR.OR.D.035 Record keeping

Delegated Regulation (EU) 2020/2148

(a) The aerodrome operator shall establish an adequate system of record keeping, covering all its activities undertaken under Regulation (EC) No 216/2008 and its Implementing Rules.

(b) The format of the records shall be specified in the aerodrome manual.

(c) Records shall be stored in a manner that ensures protection from damage, alteration and theft.

(d) Records shall be kept for a minimum of five years, except that the below records shall be kept as follows:

(1) the aerodrome certification basis, the alternative means of compliance in use and the current aerodrome or aerodrome operator certificate(s), for the lifespan of the certificate;

(2) arrangements with other organisations, for as long as such arrangements are in effect;

(3) manuals of aerodrome equipment or systems employed at the aerodrome, for as long as they are used at the aerodrome;

(4) safety assessment reports for the lifetime of the system/procedure/activity;

(5) personnel training, qualifications, and medical records as well as their proficiency checks, as appropriate, for at least four years after the end of their employment, or until the area of their employment has been audited by the Competent Authority; and

(6) the current version of the hazard register;

(7) driving authorisations and, if appropriate, language proficiency certificates, for at least four years after the end of a person’s employment, or the revocation or cancelation of a driving authorisation, or until this area of activity has been audited by the competent authority;

(8)  vehicle authorisations and aerodrome operator’s vehicle maintenance records, for at least four years after a vehicle is removed from operations, or until this area has been audited by the competent authority.

(e) All records shall be subject to applicable data protection law.

AMC1 ADR.OR.D.035 Record keeping

ED Decision 2014/012/R

DOCUMENTATION TO BE RETAINED

(a) The system employed by the aerodrome operator for record keeping should provide for adequate procedures, storage facilities, and reliable traceability, retrievability and accessibility of the records related to the activities of the aerodrome operator that are subject to the Basic Regulation and its Implementing Rules, throughout the required retention period.

(b) Records should be kept in paper form, or in electronic format, or a combination of both. Records stored on microfilm or optical disc format are also acceptable. The records should remain legible throughout the required retention period. The retention period starts when the record has been created or last amended.

(c) Paper systems should use robust material which can withstand normal handling and filing. Computer systems should have at least one backup system which should be updated within 24 hours of any new entry. Computer systems should include safeguards against the ability of unauthorised personnel to alter the data.

(d) All computer hardware used to ensure data backup should be stored in a different location from that containing the working data, and in an environment that ensures they remain in good condition. When hardware or software changes take place, special care should be taken that all necessary data continues to be accessible, at least, through the full retention period. In the absence of any indication, all records should be kept for a minimum period of five years.

AMC2 ADR.OR.D.035 Record keeping

ED Decision 2014/012/R

RECORDING OF AIRCRAFT MOVEMENTS

(a) The aerodrome operator should employ a system to be used for recording the aircraft movements at the aerodrome.

(b) Such a system should allow the aerodrome operator to record:

(1) the number of movements of each aircraft type using the aerodrome;

(2) the type of each aircraft movement (commercial air transportation, cargo, etc.);

(3) the date of each movement; and

(4) the number of passengers.

(c) The system used should also satisfy the provisions of AMC1 ADR.OR.D.035.

GM1 ADR.OR.D.035(b) Record keeping

ED Decision 2014/012/R

RECORDS

Microfilming or optical storage of records may be carried out at any time. The records should be as legible as the original record, and remain so for the required retention period.