CS 27.865 External loads

ED Decision 2018/007/R

(a) It must be shown by analysis, test, or both, that the rotorcraft external-load attaching means for rotorcraft-load combinations to be used for non-human external cargo applications can withstand a limit static load equal to 2.5, or some lower load factor approved under CS 27.337 through 27.341, multiplied by the maximum external load for which authorisation is requested. It must be shown by analysis, test, or both that the rotorcraft external-load attaching means and any complex personnel-carrying device system for rotorcraft-load combinations to be used for human external cargo applications can withstand a limit static load equal to 3.5 or some lower load factor, not less than 2.5, approved under CS 27.337 through 27.341, multiplied by the maximum external load for which authorisation is requested. The load for any rotorcraft-load combination class, for any external cargo type, must be applied in the vertical direction. For jettisonable rotorcraft-load combinations, for any applicable external cargo type, the load must also be applied in any direction making the maximum angle with the vertical that can be achieved in service but not less than 30°. However, the 30° angle may be reduced to a lesser angle if:

(1) An operating limitation is established limiting external load operations to those angles for which compliance with this paragraph has been shown; or

(2) It is shown that the lesser angle can not be exceeded in service.

(b) The external-load attaching means, for jettisonable rotorcraft-load combinations, must include a quick-release system (QRS) to enable the pilot to release the external load quickly during flight. The QRS must consist of a primary quick-release subsystem and a backup quick-release subsystem that are isolated from one another. The QRS, and the means by which it is controlled, must comply with the following:

(1) A control for the primary quick-release subsystem must be installed either on one of the pilot's primary controls or in an equivalently accessible location and must be designed and located so that it may be operated by either the pilot or a crew member without hazardously limiting the ability to control the rotorcraft during an emergency situation.

(2) A control for the backup quick-release subsystem, readily accessible to either the pilot or another crew member, must be provided.

(3) Both the primary and backup quick-release subsystems must:

(i) Be reliable, durable, and function properly with all external loads up to and including the maximum external limit load for which authorisation is requested.

(ii) Be protected against electromagnetic interference (EMI) from external and internal sources and against lightning to prevent inadvertent load release.

(A) The minimum level of protection required for jettisonable rotorcraft-load combinations used for non-human external cargo is a radio frequency field strength of 20 volts per metre.

(B) The minimum level of protection required for jettisonable rotorcraft-load combinations used for human external cargo is a radio frequency field strength of 200 volts per metre.

(iii) Be protected against any failure that could be induced by a failure mode of any other electrical or mechanical rotorcraft system.

(c) For rotorcraft-load combinations to be used for human external cargo applications, the rotorcraft must:

(1) For jettisonable external loads, have a QRS that meets the requirements of sub-paragraph (b) and that:

(i) Provides a dual actuation device for the primary quick-release subsystem, and

(ii) Provides a separate dual actuation device for the backup quick-release subsystem.

(2) Enable the safe utilisation of complex personnel-carrying device systems to transport occupants external to the helicopter or to restrain occupants inside the cabin. A personnel-carrying device system is considered complex if:

(i) it does not meet a European Norm (EN) standard under Directive 89/686/EEC⁹ Council Directive 89/686/EEC of 21 December 1989 on the approximation of the laws of the Member States relating to personal protective equipment (OJ L 399, 30.12.1989, p. 18). or Regulation (EU) 2016/425¹⁰ Regulation (EU) 2016/425 of the European Parliament and of the Council of 9 March 2016 on personal protective equipment and repealing Council Directive 89/686/EEC (OJ L 81, 31.3.2016, p. 51)., as applicable, or subsequent revision;

(ii)  it is designed to restrain more than a single person (e.g. a hoist or cargo hook operator, photographer, etc.) inside the cabin, or to restrain more than two persons outside the cabin; or

(iii) it is a rigid structure such as a cage, a platform or a basket.

Complex personnel-carrying device systems shall be reliable and have the structural capability and personnel safety features essential for external occupant safety through compliance with the specific requirements of CS 27.865, CS 27.571 and other relevant requirements of CS-27 for the proposed operating envelope.

(3) Have placards and markings at all appropriate locations that clearly state the essential system operating instructions and, for complex personnel-carrying device systems, ingress and egress instructions.

(4) Have equipment to allow direct intercommunication among required crew members and external occupants.

(5) Have the appropriate limitations and procedures incorporated in the flight manual for conducting human external cargo operations.

(6) For human external cargo applications requiring use of Category A rotorcraft, have one-engine-inoperative hover performance data and procedures in the flight manual for the weights, altitudes, and temperatures for which external load approval is requested.

(d) The critically configured jettisonable external loads must be shown by a combination of analysis, ground tests, and flight tests to be both transportable and releasable throughout the approved operational envelope without hazard to the rotorcraft during normal flight conditions. In addition, these external loads must be shown to be releasable without hazard to the rotorcraft during emergency flight conditions.

(e) A placard or marking must be installed next to the external-load attaching means stating the maximum authorised external load as demonstrated under CS 27.25 and this paragraph.

(f) The fatigue evaluation of CS 27.571 does not apply rotorcraft-load combinations to be used for non-human external cargo except for the failure of critical structural elements that would result in a hazard to the rotorcraft. For rotorcraft-load combinations to be used for human external cargo, the fatigue evaluation of CS 27.571 applies to the entire quick-release and complex personnel-carrying device structural systems and their attachments.

[Amdt No: 27/3]

[Amdt No: 27/5]

AMC 27.865  External Loads

ED Decision 2018/015/R

This AMC provides further guidance and acceptable means of compliance to supplement FAA AC 27-1B Change 7 AC 27.865B § 27.865 EXTERNAL LOADS to meet EASA’s interpretation of CS 27.865. As such, it should be used in conjunction with the FAA AC but should take precedence over it, where stipulated, in the showing of compliance.

AMC No 1 addresses certification for applications that require the use of Category A rotorcraft.

AMC No 2 addresses the specificities of complex personnel-carrying device systems for human external cargo applications. This AMC provides further guidance and acceptable means of compliance to supplement FAA AC 27-1B Change 7 AC 27.865B § 27.865 (Amendment 27-36) EXTERNAL LOADS to meet EASA’s interpretation of CS 27.865.

AMC No 3 contains a recognised approach to the approval of simple personnel-carrying device systems if required by the applicable operating rule or if an applicant elects to include simple personnel-carrying device systems within the scope of type certification.

[Amdt No: 27/5]

[Amdt No: 27/6]

AMC No 1 to CS 27.865  Class D (Human External Cargo) for Operations within Europe

ED Decision 2018/015/R/R

1. Introduction

This additional EASA AMC, used in conjunction with FAA guidance¹¹ See reference in AMC 27 General on Human External Cargo (HEC), provides an acceptable means of compliance with CS 27.865 for Human External Cargo (HEC) applications requiring the use of Category A rotorcraft.

This AMC addresses the difference in operational requirements between the USA and Europe and the absence of dedicated material within the FAA AC.

2. Basic Definition and Intended Use

CS 27.865 classifies external loads as HEC or NHEC, which are defined in AMC No 2 to CS 27.865. Operational rules may, however, require the use of Category A rotorcraft for specific applications, and this AMC clarifies the corresponding considerations for compliance with CS 27.865.

3. Certification Considerations

For Category A, a one-engine-inoperative/out-of-ground effect (OEI/OGE) hover performance weight, altitude and temperature envelope should be provided in the flight manual. This becomes the maximum envelope that can be used for HEC applications requiring OEI/OGE hover performance.

4. Compliance Procedures

4.1 The rotorcraft is required to meet the Category A engine isolation specifications of CS­27 Appendix C, and provide an OEI/OGE hover performance data for a jettisonable HEC weight, altitude, and temperature envelope.

(i) In determining OEI hover performance, dynamic engine failures should be considered. Each hover verification test should begin from a stabilised hover at the maximum OEI hover weight, at the requested in­ground­effect (IGE) or OGE skid or wheel height, and with all engines operating. At this point, the critical engine should be failed and the aircraft should remain in a stabilized hover condition without exceeding any rotor limits or engine limits for the operating engine(s). As with all performance testing, engine power should be limited to minimum specification power.

(ii) Normal pilot reaction time should be used following the engine failure to maintain the stabilised hover flight condition. When hovering OGE or IGE at maximum OEI hover weight, an engine failure should not result in an altitude loss of more than 10 per cent or 4 feet, whichever is greater, of the altitude established at the time of engine failure. In either case, a sufficient power margin should be available from the operating engine(s) to regain the altitude lost during the dynamic engine failure and to transition to forward flight.

(iii) Consideration should also be given to the time required to recover or manoeuvre the human external cargo and to transition into forward flight. An example is the time to winch up and bring aboard personnel in hoisting operations or manoeuvre clear of power lines for fixed strop/basket operations. The time necessary to perform such actions may exceed the short duration OEI power ratings. For example, for a helicopter with a 30-second/2-minute rating structure that sustains an engine failure at a height of 40 feet, the time required to re­stabilise in a hover, recover the external load (given the hoist speed limitations), and then transition to forward flight (with minimal altitude loss) would likely exceed 30 seconds and a power reduction into the 2-minute rating would be necessary.

(iv) The rotorcraft flight manual (RFM) should contain information that describes the expected altitude loss, any special recovery techniques, and the time increment used for recovery of the external load when establishing maximum weights and wheel or skid heights. The OEI hover chart should be placed in the performance section of the RFM or RFM supplement. Allowable altitude extrapolation for the hover data should not exceed 2 000 feet.

4.2 For helicopters that incorporate engine-driven generators, the hoist should remain operational following an engine or generator failure. A hoist should not be powered from a bus that is automatically shed following the loss of an engine or generator. Maximum two­engine generator loads should be established so that when one engine or generator fails, the remaining generator can assume the entire rotorcraft electrical load (including the maximum hoist electrical load) without exceeding approved limitations.

4.3 The external load attachment means and the complex personnel-carrying device should be shown to meet the provisions of CS 27.865(a) for the proposed operating envelope.

4.4 The rotorcraft is required to be equipped for, or otherwise allow, direct intercommunication under any operational conditions among crew members and the HEC. For HEC applications that require the use of Category A rotorcraft, two­way radios or intercoms should be employed.

[Amdt No: 27/2]

[Amdt No: 27/5]

[Amdt No: 27/6]

AMC No 2 to CS 27.865  External loads

ED Decision 2018/015/R/R

a.  Explanation

(1)  This AMC contains guidance for the certification of helicopter external-load attaching means and load-carrying systems to be used in conjunction with operating rules, such as Regulation (EU) No 965/2012 on Air Operations¹² Commission Regulation (EU) No 965/2012 of 5 October 2012 laying down technical requirements and administrative procedures related to air operations pursuant to Regulation (EC) No 216/2008 of the European Parliament and of the Council (OJ L 296, 25.10.2012, p. 1).. Also, paragraph CS 27.25 concerns, in part, jettisonable external cargo.

(2)  CS 27.865 provides a minimum level of safety for small rotorcraft designs to be used with operating rules, such as Regulation (EU) No 965/2012 on Air Operations. Certain aspects of operations, such as microwave tower and high-line wirework, may also be regulated separately by other national rules. For applications that could fall under the scope of applicability of several regulations, special certification emphasis will be required by both the applicant and the approving authority to assure all relevant safety requirements are identified and met. Potential additional requirements, where thought to exist, are noted herein.

(3)  The CS 27.865 provisions for external loads do not discern the difference between a crew member and a compensating passenger when either is carried external to the rotorcraft. Both are considered to be HEC.

b. Definitions

(1)  Backup quick-release subsystem (BQRS): the secondary or ‘second choice’ subsystem used to perform a normal or emergency jettison of external cargo.

(2) Cargo: the part of any rotorcraft-load combination that is removable, changeable, and is attached to the rotorcraft by an approved means. For certification purposes, ‘cargo’ applies to HEC and non-human external cargo (NHEC).

(3)  Cargo hook: a hook that can be rated for both HEC and NHEC. It is typically used by being fixed directly to a designated hard point on the rotorcraft.

(4) Dual actuation device (DAD): this is a sequential control that requires two distinct actions in series for actuation. One example is the removal of a lock pin followed by the activation of a ‘then free’ switch or lever for load release to occur (in this scenario, a load release switch protected only by an uncovered switch guard is not acceptable). For jettisonable HEC applications, a simple, covered switch does not qualify as a DAD. Familiarity with covered switches allows the pilot to both open and activate the switch in one motion. This has led to inadvertent load release.

(5) Emergency jettison (or complete load release): the intentional, instantaneous release of NHEC or HEC in a preset sequence by the quick-release system (QRS) that is normally performed to achieve safer aircraft operation in an emergency.

(6) External fixture: a structure external to and in addition to the basic airframe that does not have true jettison capability and has no significant payload capability in addition to its own weight. An example is an agricultural spray boom. These configurations are not approvable as ‘External Loads’ under CS 27.865.

(7)  External Load System. The entire installation related to the carriage of external loads to include not only the hoist or hook, but also the structural provisions and release systems. A complex PCDS is also considered to be part of the external load system.

(8)  Hoist: a hoist is a device that exerts a vertical pull, usually through a cable and drum system (i.e. a pull that does not typically exceed a 30-degree cone measured around the z-rotorcraft axis).

(9) Hoist demonstration cycle (or ‘one cycle’): the complete extension and retraction of at least 95 % of the actual cable length, or 100 % of the cable length capable of being used in service (i.e. that would activate any extension or retraction limiting devices), whichever is greater.

(10)  Hoist load-speed combinations: some hoists are designed so that the extension and retraction speed slows as the load increases or nears the end of a cable extension. Other hoist designs maintain a constant speed as the load is varied. In the latter designs, the load-speed combination simply means the variation in load at the constant design speed of the hoist.

(11) Human external cargo (HEC): a person (or persons) who, at some point in the operation, is (are) carried external to the rotorcraft.

(12)  Non-human external cargo (NHEC): any external cargo operation that does not at any time involve a person (or persons) carried external to the rotorcraft.

(13) Normal jettison (or selective load release): the intentional release, normally at optimum jettison conditions, of NHEC.

(14)  Personnel-carrying device system (PCDS) is a device that has the structural capability and features needed to transport occupants external to the helicopter during HEC or helicopter hoist operations. A PCDS includes but is not limited to life safety harnesses (including, if applicable, a quick-release and strop with a connector ring), rigid baskets and cages that are either attached to a hoist or cargo hook or mounted to the rotorcraft airframe.

(15)  Primary quick-release subsystem (PQRS): the primary or ‘first choice’ subsystem used to perform a normal or emergency jettison of external cargo.

(16)  Quick-release system (QRS): the entire release system for jettisonable external cargo (i.e. the sum total of both the primary and backup quick-release subsystem). The QRS consists of all the components including the controls, the release devices, and everything in between.

(17)  Rescue hook (or hook): a hook that can be rated for both HEC and NHEC. It is typically used in conjunction with a hoist or equivalent system.

(18)  Rotorcraft-load combination (RLC): the combination of a rotorcraft and an external load, including the external-load attaching means.

(19)  Spider: a spider is a system of attaching a lowering cable or rope or a harness to an NHEC (or HEC) RLC to eliminate undesirable flight dynamics during operations. A spider usually has four or more legs (or load paths) that connect to various points of a PCDS to equalise loading and prevent spinning, twisting, or other undesirable flight dynamics.

(20)  True jettison capability: the ability to safely release an external load using an approved QRS in 30 seconds or less.

NOTE: In all cases, a PQRS should release the external load in less than 5 seconds. Many PQRSs will release the external load in milliseconds, once the activation device is triggered. However, a manual BQRS, such as a set of cable cutters, could take as much as 30 seconds to release the external load. The 30 seconds would be measured starting from the time the release command was given and ending when the external load was cut loose.

(21)  True payload capability: the ability of an external device or tank to carry a significant payload in addition to its own weight. If little or no payload can be carried, the external device or tank is an external fixture (see definition above).

(22)  Winch: a winch is a device that can employ a cable and drum or other means to exert a horizontal (i.e. x-rotorcraft axis) pull. However, in designs that utilise a winch to perform a hoist function by use of a 90-degree cable direction change device (such as a pulley or pulley system), the winch system is considered to be a hoist.

c.  Procedures

The following certification procedures are provided in the most general form. Where there are significant differences between the cargo types, these differences are highlighted.

(1)  General Compliance Procedures for CS 27.865: The applicant should clearly identify the applicable cargo types (NHEC or HEC) for which an application is being made. The structural loads and operating envelopes for each applicable cargo type should be determined and used to formulate the flight manual supplement and basic loads report. The applicant should show by analysis, test, or both, that the rotorcraft structure, the external-load attaching means, and the complex PCDS, if applicable, meet the specific requirements of CS 27.865 and any other relevant requirements of CS-27 for the proposed operating envelope.

NOTE: the approved maximum internal gross weight should never be exceeded for any approved HEC configuration (or simultaneous NHEC and HEC configuration).

(2)  Reliability of the external load system, including the QRS.

(i)  The hoist, QRS, and rescue hook system should be reliable for all phases of flight and the applicable configurations for those phases (i.e. operating, stowed, or unstowed) for which approval is sought. The hoist should be disabled (or an overriding, fail-safe mechanical safety device such as either a flagged removableshear pin or a load-lowering brake should be utilised) to prevent inadvertent load unspooling or release during any extended flight phases in which hoist operation is not intended. Loss of hoist operational control should also be considered.

(ii) A failure of the external load system, (including QRS, hook, complex PCDS where applicable, and attachments to the rotorcraft) should be shown to be extremely improbable (i.e. 1 × 10-9 failures per flight) for all failure modes that could cause a catastrophic failure, serious injury or a fatality anywhere in the total airborne system. Uncontrolled high-speed descent of the hoist cable would fall into this category. All significant failure modes of lesser consequence should be evaluated and shown to be at least improbable (i.e. 1 × 10-5 failures per flight).

(iii)  The reliability of the system should be demonstrated by completion and approval of the following:

(A)  A functional hazard assessment (FHA) to determine the hazard severity of failures associated with the external load system. The effect of the flailing cable after a load release should be considered.

(B)  A fault tree analysis (FTA) or equivalent to verify that the hazard classification of the FHA has been met.

(C)  A system safety assessment (SSA) to demonstrate compliance with the applicable certification requirements.

(D)  An analysis of the non-redundant external load system components that constitute the primary load path (e.g., beam, cable, hook), to demonstrate compliance with the applicable structural requirements.

(E)  A repetitive test of all functional devices that cycles these devices under critical structural conditions, operational conditions, or a combination of both, at least 10 times each for NHEC and 30 times for HEC. This is applicable to both primary and backup subsystems. It is assumed that only one hoist cycle will typically occur per flight. This rationale has been used to determine the 10 demonstration cycles for NHEC applications and 30 demonstration cycles for HEC applications. However, if a particular application requires more than one hoist cycle per flight, then the number of demonstration cycles should be increased accordingly by multiplying the test cycles by the intended higher cycle number per flight. These repetitive tests may be conducted on the rotorcraft or by using a bench simulation that accurately replicates the rotorcraft installation.

(F)  An environmental qualification for the proposed operating environment. This review includes consideration of low and high temperatures (typically – 40 °C (– 40 °F) to + 65.6 °C (+ 150 °F), altitudes to 12 000 feet, humidity, salt spray, sand and dust, vibration, shock, rain, fungus, and acceleration. The appropriate rotorcraft sections of RTCA Document DO-160/ EUROCAE ED-14 for high and low temperature and vibration are considered to be acceptable for environmental qualification. The environmental qualification will address icing for those external load systems installed on rotorcraft approved for flight into icing conditions.

(G) Qualification of the hoist itself to the appropriate electromagnetic interference (EMI) and lightning threat levels specified for NHEC or HEC, as applicable. This qualification can occur separately or as part of the entire on-board QRS.

(3)  Testing.

(i)  Hoist system load-speed combination ground tests: the load versus-speed combinations of the hoist should be demonstrated on the ground (either using an accurate engineering mock-up or a rotorcraft) by showing repeatability of the no load-speed combination, the 50 per cent load-speed combination, the 75 per cent load-speed combination, and the 100 per cent (i.e. system rated limit) load-speed combination. If more than one operational speed range exists, the preceding tests should be performed at the most critical speed.

(A)  At least 1/10 of the hoist demonstration cycles (see definition) should include the maximum aft angular displacement of the load from the vertical, applied for under CS 27.865(a).

(B)  A minimum of six consecutive, complete operation cycles should be conducted at the system's 100 per cent (i.e. system limit rated) load-speed combination.

(C)  In addition, the demonstration should cover all normal and emergency modes of intended operation and should include operation of all control devices such as limit switches, braking devices, and overload sensors in the system.

(D)  All quick disconnect devices and cable cutters should be demonstrated at 0 per cent, 25 per cent, 50 per cent, 75 per cent, and 100 per cent of system limit load or at the most critical percentage of limit load.

 Note: some hoist designs have built-in cable tensioning devices that function at the no load-speed combination, as well as at other load-speed combinations. This device should work during the no load-speed and other load-speed cable-cutting combinations.

(E)  Any devices or methods used to increase the mechanical advantage of the hoist should also be demonstrated.

(F)  During a portion of each demonstration cycle, the hoist should be operated from each station from which it can be controlled.

(ii)  Hoist and rescue hook systems or cargo hook systems flight test: an in-flight demonstration test of the hoist system should be conducted for helicopters designed to carry NHEC or HEC. The rotorcraft should be flown to the extremes of the applicable manoeuvre flight envelope and to all conditions that are critical to strength, manoeuvrability, stability, and control, or any other factor affecting airworthiness. Unless a lesser load is determined to be more critical for either dynamic stability or other reasons, the maximum hoist system rated load or, if less, the maximum load requested for approval (and the associated limit load data placards) should be used for these tests. The minimum hoist system load (or zero load) should also be demonstrated in these tests.

(iii)  CS 27.865(d) Flight test Verification Work: flight test verification work that thoroughly examines the operational envelope should be conducted with the external cargo carriage device for which approval is requested (especially those that involve HEC). The flight test programme should show that all aspects of the operations applied for are safe, uncomplicated, and can be conducted by a qualified flight crew under the most critical service environment, and, in the case of HEC, under emergency conditions. Flight tests should be conducted for the simulated representative NHEC and HEC loads to demonstrate their in-flight handling and separation characteristics. Each placard, marking, and flight manual supplement should be validated during flight testing.

(A)  General: flight testing or an equivalent combination of analysis, ground tests, and flight tests should be conducted under the critical combinations of configurations and operating conditions for which basic type certification approval is sought. The critical load condition of the intended cargo (e.g. rocks, lumber, radio towers, HEC) may be defined by a heavy weight and low area cargo or a low weight and high area cargo. The effects of these load conditions should be evaluated throughout the operational aspects of cargo loading, take-off, cruise up to maximum allowable speed with cargo, jettison, and landing. The helicopter handling with different cable conditions should include lateral transitions and quick stops up to the helicopter approved low airspeed limitations. Additional combinations of external load and operating conditions may be subsequently approved under relevant operational requirements as long as the structural limits and reliability considerations of the basic certification approval are not exceeded (i.e. equivalent safety is maintained). The qualification flight test of this subparagraph is intended to be accomplished primarily by analysis or bench testing. However, at least one in-flight, limit load drop test should be conducted for the critical load case. If one critical load case cannot be clearly identified, then more than one drop test might be necessary. Also, in-flight tests for the minimum load case (i.e. typically the cable hook itself) with the load trailing both in the minimum and maximum cable length configurations should be conducted. Any safety-of-flight limitations should be documented and placed in the RFM or RFMS. In certain low-gross weight, jettisonable HEC configurations, the complex PCDS may act as a trailing aerofoil that could result in entangling the complex PCDS with the rotorcraft. These configurations should be assessed on a case-by-case basis by analysis or flight test to ensure that any safety-of-flight limitations are clearly identified and placed in the RFM or RFMS (also see PCDS).

(B)  Separation characteristics of jettisonable external loads: for all jettisonable RLCs of any applicable cargo type, satisfactory post-jettison separation characteristics of all loads should meet the minimum criteria that follow:

(1)  Separate functioning of the PQRS and BQRS resulting in a complete, immediate release of the external load without interference by the rotorcraft or external load system.

(2)  No damage to the helicopter during or following actuation of the QRS and load jettisoning.

(3)  A jettison trajectory that is clear of the helicopter.

(4)  No inherent instability of the jettisonable (or just jettisoned) HEC or NHEC while in proximity to the helicopter.

(5)  No adverse or uncontrollable helicopter reactions at the time of jettison.

(6)  Stability and control characteristics after jettison that are within the originally approved limits.

(7)  No adverse degradation on helicopter performance characteristics after jettison.

(C)  Jettison requirements for jettisonable external loads: for representative cargo types (low, medium, and high-density loads on long and short lines), emergency and normal jettison procedures should be demonstrated (by a combination of analysis, ground tests, and flight tests) in sufficient combinations of flight conditions to establish a jettison envelope that should be placed in the flight manual.

(D)  QRS demonstration; repetitive jettison demonstrations that use the PQRS, which may be accomplished during ground or flight tests, should be conducted. The BQRS should be utilised at least once.

(E)  QRS reliability (i.e. failure modes) affecting flight performance: the FHA of the QRS (see paragraph c.(2) above) should show that any single system failure will not result in unsatisfactory flight characteristics, including any QRS failures resulting in asymmetric loading conditions.

(F)  Flight test weight and CG locations: all flight tests should be conducted at the extreme or critical combinations of weight and longitudinal and lateral CG conditions within the applied-for flight envelope. Typically the two load conditions would be a heavy weight and low area cargo, and a low weight and high area cargo. The rotorcraft should remain within approved weight and CG limits, both with the external load applied, and after jettison of the load.

(G)  Jettison Envelopes: emergency and normal jettison demonstrations should be performed at sufficient airspeeds and descent rates to establish any restrictions for satisfactory separation characteristics. Both the maximum and minimum airspeed limits and the maximum descent rate for safe separation should be determined. The sideslip envelope as a function of airspeed should be determined.

(H)  Altitude: emergency and normal jettison demonstrations should be performed at altitudes that are consistent with the approvable operational envelope and with the manoeuvres necessary to overcome any adverse effects of the jettison.

(I)  Attitude: emergency and normal jettison demonstrations should be performed from all attitudes that are appropriate to normal and emergency operational usage. Where the attitudes of HEC or NHEC with respect to the helicopter may be varied, the most critical attitude should be demonstrated. This demonstration would normally be accomplished by bench testing.

(4)  Rotorcraft Flight Manual (RFM) and Rotorcraft Flight Manual Supplement (RFMS):

(i)  General.

(A)  Present appropriate flight manual procedures and limitations for all HEC operations.

(1)  The approval of an external loads equipment design in accordance with CS 27.865 does not provide an approval to conduct external loads operations. Therefore, the following should be included as a limitation in the RFM or RFMS:

—             The external load equipment certification approval does not constitute an operational approval; an operational approval for external load operations must be granted by the competent authority.

(2)  The RFM or RFMS that will be approved through the certification activity should not contain any references to the previously used RLC classes.

(B)  For non-HEC designs, the following limitation should be included within the RFM or RFMS:

—             The external load system does not comply with the CS-27 certification provisions for Human External Cargo (HEC).

(C)  The RFM or RFMS may contain suitable text to clarify whether the external load system meets the applicable certification provisions for lifting an external load free of land or water, and whether the load is jettisonable.

(D)  The RFM or RFMS should contain emergency procedures detailing the steps to be taken by the flight crew during emergencies such as an engine failure, hoist failure, flight director or autopilot failure, etc.

(E)  The RFM or RFMS normal procedures should explain the required procedures to conduct a safe external load operation. Such information may include the methods for attachment and normal release of the external load.

(ii)  HEC installations.

(A)  For HEC installations, the following additional information/limitation should be included in the RFM or RFMS:

(1)  That the external load system meets the CS-27 certification specifications for Human External Cargo (HEC).

(2)  Operation of the external load equipment with HEC requires the use of an approved Personnel Carrying Device Systems (PCDS).

 NOTE: for a simple PCDS, also refer to AMC No. 3 to 27.865

(B)  Crew member communications.

(1)  The flight manual should clearly define the method of communication between the flight crew and the HEC. These instructions and manuals should be validated during flight testing.

(2)  If the external load system does not include equipment to allow direct intercommunication among required crew members and external occupants, the following limitation may be included within the limitations section of the RFM or RFMS:

—             This external load system does not include equipment to allow direct intercommunication among required crew members and external occupants. Operating this external load equipment with HEC is not authorised unless appropriate equipment to allow direct intercommunication between required crew members and external occupants has an airworthiness approval.

(iii)  Additional RFM or RFMS requirements are contained within each applicable paragraph of this AMC.

(5)  Continued airworthiness.

(i)  Instructions for Continued Airworthiness: maintenance manuals (and RFM supplements) developed by applicants for external load applications should be presented for approval and should include all appropriate inspection and maintenance procedures. The applicant should provide sufficient data and other information to establish the frequency, extent, and methods of inspection of critical structure, systems, and components. CS 27.1529 and Appendix A to CS-27 requires this information to be included in the maintenance manual. For example, maintenance requirements for sensitive QRS squibs should be carefully determined, documented, approved during certification, and included as specific mandatory scheduled maintenance requirements that may require either ‘daily’ or ‘pre-flight’ checks (especially for HEC applications).

(ii)  Hoist system continued airworthiness. The design life of the hoist system and any limited life components should be clearly identified, and the Airworthiness Limitations Section of the maintenance manual should include these requirements. For STCs, a maintenance manual supplement should be provided that includes these requirements.

 Note: the design life of a hoist and cable system is typically between 5 000 and 8 000 cycles. Some hoist systems have usage time meters installed. Others may have cycle counters installed. Cycle counters should be considered for HEC operations and high-load or other operations that may cause low-cycle fatigue failures.

 (6)  CS 27.865(a) Static Structural Substantiation and CS 27.865(f) Fatigue Substantiation Procedures: The following static structural substantiation methods and fatigue substantiation should be used:

(i)  Critical Basic Load Determination. The critical basic loads and corresponding flight envelope are determined by statically substantiating the gross weight range limits, the corresponding vertical limit load factors (N_ZW) and the safety factors applicable for the type of external load for which the application is being made.

NOTE: in cases where NHEC or HEC can have more than one shape, centre of gravity, centre of lift, or be carried at more than one distance in-flight from the rotorcraft attachment, a critical configuration for certification purposes may not be determinable. If such a critical configuration can be determined, it may be examined for approval as a ‘worst case’ to satisfy a particular certification criterion or several criteria, as appropriate. If such a critical configuration cannot be determined, the extreme points of the operational external load configuration envelope should be examined, with consideration given to any other points within the envelope that experience or any other rationale indicates as points that need to be investigated.

(ii) Vertical Limit and Ultimate Load Factors. The basic N_ZW is converted to the ultimate load by multiplying the maximum vertical limit load by the appropriate safety factor (for restricted category approvals, see the guidance in paragraph AC 27 MG 5 of FAA AC 27-1B Change 7). This ultimate load is used to substantiate all the existing structure affected by, and all the added structure associated with, the load-carrying device, its attachments and its cargo. Casting factors, fitting factors, and other dynamic load factors should be applied where appropriate.

(A)  NHEC applications. In most cases, it is acceptable to perform a standard static analysis to show compliance. A vertical limit load factor (N_ZW) of 2.5 g is typical for heavy gross weight NHEC hauling configurations (ref.: CS 27.337). This vertical load factor should be applied to the maximum external load for which the application is being made, together with a minimum safety factor of 1.5.

(B)  HEC applications.

(1)  If a safety factor of 3.0 or more is used, it is acceptable to perform a standard static analysis to show compliance. The safety factor should be applied to the yield strength of the weakest component in the system (QRS, complex PCDS, and attachment load path). If a safety factor of less than 3.0 is used, both an analysis and a full-scale ultimate load test of the relevant parts of the system should be performed.

(2)  Since HEC applications typically involve lower gross weight configurations, a higher vertical limit load factor is required to assure that the limit load is not exceeded in service. The applicant should use either the conservative value of 3.5 g or an analytically derived maximum vertical limit load factor for the requested operating envelope. Linear interpolation between the vertical load factors of the maximum and minimum design weights may be used. However, in no case may the vertical limit load factor be less than 2.5 g for any HEC application.

(3) For the purpose of structural analysis or test, applicants should assume a 101.2-kg (223-pound) man as the minimum weight of each occupant carried as HEC.

 NOTE: if the HEC is engaged in work tasks that employ devices of significant added weight (e.g. heavy backpacks, tools, fire extinguishers, etc.), the total weight of the 101.2-kg (223-pound) man and their equipment should be assumed in the structural analysis or test.

(iii) Critical Structural Case. For applications involving more than one RLC class or cargo type, the structural substantiation is required only for the most critical case. The most critical case should be determined by rational analysis.

(iv)  Jettisonable Loads. For the substantiating analyses or tests of all jettisonable external loads, including HEC, the maximum external load should be applied at the maximum angle that can be achieved in service, but not less than 30 degrees. The angle should be measured from the sling-load-line to the rotorcraft vertical axis (z axis) and may be in any direction that can be achieved in service. The 30-degree angle may be reduced in some or all directions if it is impossible to obtain due to physical constraints or operating limitations. The maximum allowable cable angle should be determined and approved. The angle approved should be based on structural requirements, mechanical interference limits, and flight-handling characteristics over the most critical conditions and combinations of conditions in the approved flight envelope.

(v) Hoist System Limit Load.

NOTE: if a hoist cable or a long-line cable is utilised, a new dynamic system is established. The characteristics of the system should be evaluated to assure that either no hazardous failure modes exist or that they are acceptably minimised. For example, the hoist cable or long-line cable may exhibit a natural frequency that could be excited by sources internal to the overall structural system (i.e. the rotorcraft) or by sources external to the system. Another example is the loading effect of the cable acting as a spring between the rotorcraft and the suspended external load.

(A)  Determine the basic loads that would result in the failure or unspooling of the hoist or its installation, respectively.

 NOTE: This determination should be based on static strength and any significant dynamic load magnification factors.

(B)  Select the lower of the two values as the ultimate load of the hoist system installation.

(C)  Divide the selected ultimate load by 1.5 to determine the true structural limit load of the system.

(D)  Determine the manufacturer’s approved ‘limit design safety factor’ (or that which the applicant has applied for). Divide this factor into the true structural limit load (from (C) above) to determine the hoist system’s working (or placarded) limit load.

(E)  Compare the system’s derived limit load to that applied for one ‘g’ payload multiplied by the maximum downward vertical load factor (N_ZWMAX) to determine the critical payload’s limit value.

(F)  The critical payload limit should be equal to or less than the system’s derived limit load for the installation to be approvable.

(vi)  Fatigue Substantiation Procedures

 NOTE: the term ‘hazard to the rotorcraft’ is defined to include all hazards to either the rotorcraft, to the occupants thereof, or both.

(A)  Fatigue evaluation of NHEC applications. Any critical components of the suspended system and their attachments (e.g. the cargo hook, or bolted or pinned truss attachments), the failure of which could result in a hazard to the rotorcraft, should be included in an acceptable fatigue analysis.

(B)  Fatigue evaluation of HEC applications. The entire external load system, including the complex PCDS, should be reviewed on a component-by-component basis to determine which, if any, components are fatigue critical. These components should be analysed or tested to ensure that their fatigue life limits are properly determined, and the limits should then be placed in the limited life section of the maintenance manual.

(7)  CS 27.865(b) and CS 27.865(c) Procedures for Quick-Release Systems and Cargo Hooks: for jettisonable RLCs of any applicable cargo type, both a primary quick-release system (PQRS) and a backup quick-release system (BQRS) are required. Features that should be considered are:

(i)  The PQRS, BQRS and their load-release devices and subsystems (such as electronically actuated guillotines) should be separate (i.e. physically, systematically, and functionally redundant).

(ii)  The controls for the PQRS should be installed on one of the pilot’s primary controls, or in an equivalently accessible location. The use of an ‘equivalent accessible location’ should be reviewed on a case-by-case basis and utilised only where equivalent safety is clearly maintained.

(iii)  The controls for the BQRS may be less sophisticated than those of the PQRS. For instance, manual cable cutters are acceptable provided they are listed in the flight manual as a required device and have a dedicated, placarded storage location.

(iv) The PQRS should release the external load in less than 5 seconds. The BQRS should release the external load in less than 30 seconds. This time interval begins the moment an emergency is declared and ends when the load is released.

(v)  Each quick-release device should be designed and located to allow the pilot or a crew member to accomplish the release of the external cargo release without hazardously limiting the ability to control the rotorcraft during emergency situations. The flight manual should reflect the requirement for a crew member and their related functions.

(vi)  CS 27.865(c)(1) QRS Requirements for Jettisonable HEC Operations.

(A)  For jettisonable HEC operations, both the PQRS and BQRS are required to have a dual actuation device (DAD) for external cargo release. The DAD should be designed to require two actions with a definite change of direction of movement, such as opening a switch or pushbutton cover followed by a definite change of direction in order to activate the release switch or pushbutton. Any possibility of opening the switch cover and inadvertently releasing the load with a single motion is not acceptable. An additional level of safety may also be provided through the use of Advisory and Caution messages. For example, an advisory ‘ON’ message might be illuminated when the pilot energises (but not arms) the system with a master switch. A cautionary ‘ARMED’ message would then illuminate when the pilot opens the switch guard. In this case, a possible unwanted flip of the switch guard would be immediately recognised by the crew. The switch design should be evaluated by ground or flight test. The RFM or RFMS should contain a clear description of the DAD functionality that includes the associated safety features, normal and emergency procedures, and applicable advisory and caution messages.

(B)  The DAD is intended for emergency use during the phases of flight in which the HEC is carried or retrieved. The DAD can be used for both NHEC and HEC operations. However, because it can be used for HEC, the instructions for continued airworthiness should be carefully reviewed and documented. The DAD can be operated by the pilot from a primary control, or, after a command is given by the pilot, by a crew member from a remote location. Additional safety precautions (such as a lock wire) should be considered for a remote hoist console in the cabin. Any emergency release function provided by a remote hoist console should also be designed to protect against inadvertent activation during the hoist operation. If the backup DAD is a cable cutter, it should be properly secured, placarded and readily accessible to the crew member who is intended to use it.

(vii)  CS 27.865(b)(3)(ii) Electromagnetic Interference. Protection of the QRS against potential internal and external sources of EMI and lightning is required. This is necessary to prevent an inadvertent load release from sources such as lightning strikes, stray electromagnetic signals, and static electricity.

(A)  Jettisonable NHEC systems should not be adversely affected when exposed to the electrical field of a minimum of 20 volts per metre (i.e. CAT U or equivalent) radio-frequency (RF) field strength per RTCA Document DO-160/ EUROCAE ED-14.

(B)  Jettisonable HEC systems should not be adversely affected when exposed to the electrical field of a minimum of 200 volts per metre (i.e. CAT Y) RF field strength per RTCA Document DO-160/ EUROCAE ED-14.

(1)  These RF field threat levels may need to be increased for certain special applications such as microwave tower and high voltage high line repairs. Separate criteria for special applications under multi-agency regulation (such as IEEE or OSHA standards) should also be addressed, as applicable, during certification. When necessary, the Special Condition process can be used to establish a practicable level of safety for specific high voltage or other special application conditions. The helicopter High-intensity Radiated Fields (HIRF) safety assessment should consider the effects on helicopter flight safety due to a HIRF-induced failure or a malfunction of external load systems, such as an uncommanded hoist winch activation without the ability to jettison, or an uncommanded load jettison. The appropriate failure effect classification should be assigned based on this assessment, and compliance should be demonstrated with CS 27.1317 and the guidance in AMC 20-158. This should not be limited to the cable cutter devices or load jettison subsystems only. In some designs, an uncommanded load release or a hoist winch activation could also result from a failure of the command and control circuits of the system.

(2)  An approved standard rotorcraft test, which includes the full HIRF frequency and amplitude external and internal environments, on the QRS and any applicable complex PCDS, or the entire rotorcraft including the QRS and any applicable complex PCDS, could be substituted for the jettisonable NHEC and HEC systems tests as long as the RF field strengths directly on the QRS and PCDS are shown to equal or exceed those defined by paragraphs c.(7)(vii)(A) and c.(7)(vii)(B) above for NHEC and HEC respectively.

(3)  The EMI levels specified in paragraphs c.(7)(vii)(A) and c.(7)(vii)(B) above are total EMI levels to be applied to the QRS (and affected QRS component) boundary. The total EMI level applied should include the effects of both external EMI sources and internal EMI sources. All aspects of internally generated EMI should be carefully considered, including peaks that could occur from time-to-time due to any combination of on-board systems being operated. For example, special attention should be given to EMI from hoist operations that involve the switching of very high currents. Those currents can generate significant voltages in closely spaced wiring that, if allowed to reach some squib designs, could activate the device. Shielding, bonding, and grounding of wiring associated with operation of the hoist and the quick-release mechanism should be clearly and adequately evaluated in design and certification. When recognised good practices for such installation are applied, an analysis may be sufficient to highlight that the maximum possible pulse generated into the squib circuit will have an energy content orders of magnitude below the squib no-fire energy. If insufficient data is available for the installation and/or the squib no-fire energy, this evaluation may require testing. One acceptable test method to demonstrate the adequacy of QRS shielding, bonding, and grounding would be to actuate the hoist under maximum load, together with likely critical combinations of other aircraft electrical loads, and demonstrate that the test squibs (which are more EMI sensitive than the squibs specified for use in the QRS) do not inadvertently operate during the test.

(8) Cargo Hooks or Equivalent Devices and their Related Systems. All cargo hooks or equivalent devices should be approved to acceptable aircraft industry standards. The applicant should present these standards, and any related manufacturer’s certificates of production or qualification, as part of the approval package.

(i)  General. Cargo hook systems should have the same reliability goals and should be functionally demonstrated under the critical loads for NHEC and HEC, as appropriate. All engagement and release modes should be demonstrated. If the hook is used as a quick-release device, then the release of critical loads should be demonstrated under conditions that simulate the maximum allowable bank angles and speeds and any other critical operating conditions. Demonstration of any re-latching features and any safety or warning devices should also be conducted. Demonstration of actual in-flight emergency quick-release capability may not be necessary if the quick-release capability can be acceptably simulated by other means.

 NOTE: Cargo hook manufacturers specify particular shapes, sizes, and cross sections for lifting eyes to assure compatibility with their hook design (e.g. Breeze Eastern Service Bulletin CAB-100-41). Experience has shown that, under certain conditions, a load may inadvertently hang up because of improper geometry at the hook-to-eye interface that will not allow the eye to slide off an open hook as intended.

 For both NHEC and HEC designs, the phenomenon of hook dynamic roll-out (inadvertent opening of the hook latch and subsequent release of the load) should be considered to assure that QRS reliability goals are not compromised. This is of particular concern for HEC applications. Hook dynamic roll-out occurs during certain ground-handling and flight conditions that may allow the lifting eye to work its way out of the hook.

 Hook dynamic roll-out typically occurs when either the RLC’s sling or harness is not properly attached to the hook, is blown by down draft, is dragged along the ground or through water, or is otherwise placed into a dangerous hook-to-eye configuration.

 The potential for hook dynamic roll-out can be minimised in design by specifying particular hook-and-eye shape and cross-section combinations. For non-jettisonable RLCs, a pin can be used to lock the hook-keeper in place during operations.

 Some cargo hook systems may employ two or more cargo hooks for safety. These systems are approvable. However, a loss of any load by a single hook should be shown to not result in a loss of control of the rotorcraft. In a dual hook system, if the hook itself is the quick-release device (i.e. if a single release point does not exist in the load path between the rotorcraft and the dual hooks), the pilot should have a dual PQRS that includes selectable, co-located individual quick releases that are independent for each hook used. A BQRS should also be present for each hook. For cargo hook systems with more than two hooks, either a single release point should be present in the load path between the rotorcraft and the multiple hook system, or multiple PQRSs and BQRSs should be present.

(ii)  Jettisonable Cargo Hook Systems. For jettisonable applications, each cargo hook:

(A)  should have a sufficient amount of slack in the control cable to permit cargo hook movement without tripping the hook release;

(B)  should be shown to be reliable (see paragraph c(1));

(C) for HEC systems, unless the cargo hook is to be the primary quick-release device, each cargo hook should be designed so that operationally induced loads cannot inadvertently release the load. For example, a simple cargo hook should have a one-way, spring-loaded gate (i.e. ‘snap hook’) that allows load attachment going into the gate but does not allow the gate to open (and subsequently lose the HEC) when an operationally induced load is applied in the opposite direction. For HEC applications, cargo hooks that also serve as quick-release devices should be carefully reviewed to assure they are reliable.

(iii) Other Load Release Types. In some current configurations, such as those used for high-line operations, a load release may be present that is not on the rotorcraft but is on the PCDS itself. Examples are a tension-release device that lets out line under an operationally induced load, or a personal rope cutter. For long-line/sling operations, a load release may also be present that is not on the rotorcraft but is a remote release system. The long-line remote release allows the pilot to not release the line itself during repetitive loading operations. The release of the load by a dedicated switch at the pilot controls, through the secondary hook on a long line, presents additional risks due to the possibility of the long line impacting the tail or the main rotor after a release, due to its elasticity. These devices are acceptable if:

(A)  The off-rotorcraft release is considered to be a ‘third release’ means. This type of release is not a substitute for a required release (i.e. PQRS or BQRS);

(B)  The cargo hook release and the long line remote release are placed on the primary controls in a way that avoids confusion during operation. One example of compliance would be to place the cargo hook release on the cyclic, and the long line remote release on the collective, to avoid any possible confusion in the operation;

(C)  The RFM or RFMS includes a description of the new control in the cockpit, and its function and an RFM or RFMS note to the pilot is included, indicating that the helicopter hook emergency release procedures are fully applicable;

(D)  The release meets all the other relevant requirements of CS 27.865 and the methods of this AMC or equivalent methods; and

(E)  The release has no operational or failure modes that would affect continued safe flight and landing under any operations, critical failure modes, conditions, or combinations of these.

 For long-line remote release, the following points should be considered:

(1)  The long line should not be of an elastic material that allows spring up/rebound when unloaded, or elevated dynamics when loaded.

(2)  The long line should have a residual weight that allows its release from the helicopter hook when the long line is unloaded.

(3)  The RFM or RFMS should include all operating procedures to ensure that the long line does not impact the rotors after cargo release or during unloaded flight phases.

(4)  The hook should be designed to minimise inadvertent activation. An example may be a protective device (cage) around the locking mechanism of the long line hook.

(5)  A means should be provided to prevent any fouling of cables in the event of a rotation of the external load. An example may be the inclusion of a swivel or slip ring.

(6)  Installation of a long line that is provided with electrical wiring to control the hook will generally represent a new electromagnetic coupling path from the external area to the internal systems that may not have been considered for type certification. As such, the impact of this installation on the coupling to helicopter systems, due to direct connection or cross talk to wiring, should be addressed as part of compliance with CS 27.610, 27.1316 and 27.1317.

(9)  Cable

(i)  Cable attachment. Either the cable should be positively attached to the hoist drum and this attachment should have ultimate load capability, or an equivalent means should be provided to minimise the possibility of inadvertent, complete cable unspooling.

(ii)  Cable length and marking. A length of cable closest to the cable's attachment to the hoist drum should be visually marked to indicate to the operator that the cable is near full extension. The length of the cable to be marked is a function of the maximum extension speed of the system and the operator's reaction time needed to prevent cable run out. It should be determined during certification demonstration tests. In no case should the length be less than 3.5 drum circumferences.

(iii)  Cable stops. Means should be present to automatically stop cable movement quickly when the system's extension and retraction operational limits are reached.

 (10)  CS 27.865(c)(2) PCDS: for all HEC applications that use complex PCDSs, an approval is required. The complex PCDS may be either previously approved or is required to be approved during certification. In either case, its installation should be approved.

  NOTE: Complex PCDS designs can include relatively complex devices such as multiple occupant cages or gondolas. The purpose of the complex PCDS is to provide a minimum acceptable level of safety for personnel being transported outside the rotorcraft. The personnel being transported may be healthy or injured, conscious or unconscious.

(i)  Regulation (EU) No 965/2012 on Air Operations contains the minimum performance specifications and standards for simple PCDSs, such as HEC body harnesses.

(ii)  Static Strength. The complex PCDS should be substantiated for the allowable ultimate load and loading conditions as determined under paragraph c(6) above.

(iii)  Fatigue. The complex PCDSs should be substantiated for fatigue as determined under paragraph c(6) above.

(iv)  Personnel Safety. For each complex PCDS design, the applicant should submit a design evaluation that assures the necessary level of personnel safety is provided. As a minimum, the following should be evaluated:

(A)  The complex PCDS should be easily and readily entered or exited.

(B)  It should be placarded with its proper capacity, the internal arrangement and location of occupants, and ingress and egress instructions.

(C)  For door latch fail-safety, more than one fastener or closure device should be used. The latch device design should provide direct visual inspectability to assure it is fastened and secured.

(D)  Any fabric used should be durable and should be at least flame-resistant.

(E)  Reserved

(F)  Occupant retention devices and the related design safety features should be used as necessary. In simple designs, rounded corners and edges with adequate strapping (or other means of HEC retention relative to the complex PCDS) and head supports or pads may be all the safety features that are necessary. Complex PCDS designs may require safety features such as seat belts, handholds, shoulder harnesses, placards, or other personnel safety standards.

(v)  EMI and Lightning Protection. All essential, affected components of the complex PCDS, such as intercommunication equipment, should be protected against RF field strengths to a minimum of RTCA Document DO-160/ EUROCAE ED-14 CAT Y.

(vi)  Instructions for Continued Airworthiness. All instructions and documents necessary for continued airworthiness, normal operations and emergency operations should be completed, reviewed and approved during the certification process. There should be clear instructions to describe when the complex PCDS is no longer serviceable and should be replaced in part or as a whole due to wear, impact damage, fraying of fibres, or other forms of degradation. In addition, any life limitations resulting from compliance with paragraphs c (10)(ii) and (iii) should be provided.

(vii)  Flotation Devices. Complex PCDSs that are intended to have a dual role as flotation devices or life preservers should meet the relevant requirements for ‘Life Preservers’. Also, any PCDS design to be used in the water should have a flotation kit. The flotation kit should support the weight of the maximum number of occupants and the complex PCDS in the water and minimise the possibility of the occupants floating face down.

(viii)  Considerations for flight testing. It should be shown by flight tests that the device is safely controllable and manoeuvrable during all requested flight regimes without requiring exceptional piloting skill. The flight tests should entail the complex PCDS weighted to the most critical weight. Some complex PCDS designs may spin, twist or otherwise respond unacceptably in flight. Each of these designs should be structurally restrained with a device such as a spider, a harness, or an equivalent device to minimise undesirable flight dynamics.

(ix)  Medical Design Considerations. Complex PCDSs should be designed to the maximum practicable extent and placarded to maximise the HEC’s protection from medical considerations such as blocked air passages induced by improper body configurations and excessive losses of body heat during operations. Injured or water-soaked persons may be exposed to high body heat losses from sources such as rotor washes and the airstreams. The safety of occupants of complex PCDSs from transit-induced medical considerations can be greatly increased by proper design.

(x)  Hoist operator safety device. When hoisting operations require the presence of a hoist operator on board, appropriate provisions should be provided to allow the hoist operator to perform their task safely. These provisions shall include an appropriate hoist operator restraint system. This safety device is typically composed of a safety harness and a strap attached to the cabin, used to adequately restrain the hoist operator inside the cabin while operating the hoist. For certification approval, the hoist operator safety device should comply with CS 27.561(b)(3) for personnel safety. The applicant should submit a design evaluation that assures the necessary level of personnel safety is provided. As a minimum, the following should be evaluated:

(A) The strap attaching point on the body harness should be appropriately located in order to minimise, as far as is practicable, the likelihood of injury to the wearer in the case of a fall or crash.

(B)  The safety device should be designed to be adjustable so that the strap is tightened behind the hoist operator.

(C)  The strap should allow the hoist operator to detach themselves quickly from the cabin in emergency conditions (e.g. crash, ditching). For that purpose, it should include a QRS including a DAD.

(D)  The safety device should be easily and readily donned or doffed.

(E)  It should be placarded with its proper capacity and lifetime limitation.

(F)  Any fabric used should be durable and should be at least flame resistant.

 (11) CS 27.865(c)(4) Intercom Systems for HEC Operations: for all HEC operations, the rotorcraft is required to be equipped for, or otherwise allow, direct intercommunication under any operational conditions among crew members and the HEC. An intercommunications system may also be approved as part of the external load system, or alternatively, a limitation may be placed in the RFM or RFMS as described under paragraph c.(4)(ii)(B)(2) of this AMC.

(12) CS 27.865(e) External Loads Placards and Markings: placards and markings should be installed next to the external-load attaching means, in a clearly noticeable location, that state the primary operational limitations — specifically including the maximum authorised external load. Not all operational limitations need be stated on the placard (or equivalent markings); only those that are clearly necessary for immediate reference in operations. Other more detailed operational limitations of lesser immediate importance should be stated either directly in the RFM or in an RFM supplement.

(13)  Other Considerations

(i)  Agricultural Installations (AIs): AIs can be approved for either jettisonable or non-jettisonable NHEC or HEC operations as long as they meet relevant certification and operations requirements and follow appropriate compliance methods. However, most current AI designs are external fixtures (see definition), not external loads. External fixtures are not approvable as jettisonable external cargo because they do not have a true payload (see definition), true jettison capability (see definition), or a complete QRS. Many AI designs can dump their solid or liquid chemical loads by use of a ‘purge port’ release over a relatively long time period (i.e. greater than 30 seconds). This is not considered to be a true jettison capability (see definition) since the external load is not released by a QRS and since the release time span is typically greater than 30 seconds (ref.: b(20) and c(7)). Thus, these types of AIs should be approved as non-jettisonable external loads. However, other designs that have the entire AI (or significant portions thereof) attached to the rotorcraft, that have short time frame jettison (or release) capabilities provided by QRSs that meet the definitions herein and that have no post-jettison characteristics that would endanger continued safe flight and landing may be approved as jettisonable external loads. For example, if all the relevant criteria are properly met, a jettisonable fluid load can be approved as an NHEC external cargo. FAA AC 27-1B Change 7 AC 27 MG 5 discusses other AI certification methodologies.

(ii)  External Tanks: external tank configurations that have true payload (see definition) and true jettison capabilities (see definition) should be approved as jettisonable NHEC. External tank configurations that have true payload capabilities but do not have true jettison capabilities should be approved as non-jettisonable NHEC. An external tank that has neither a true payload capability nor true jettison capability is an external fixture; it should not be approved as an external load under CS 27.865. If an external tank is to be jettisoned in flight, it should have a QRS that is approved for the maximum jettisonable external tank payload and is either inoperable or is otherwise rendered reliable to minimise inadvertent jettisons above the maximum jettisonable external tank payload.

(iii)  Logging Operations: These operations are very susceptible to low-cycle fatigue because of the large loads and relatively high load cycles that are common to this industry. It is recommended that load-measuring devices (such as load cells) be used to assure that no unrecorded overloads occur and to assure that cycles producing high fatigue damage are properly considered. Cycle counters are recommended to assure that acceptable cumulative fatigue damage levels are identifiable and are not exceeded. As either a supplementary method or an alternate method, maintenance instructions should be considered to assure proper cycle counting and load recording during operations.

 [Amdt No: 27/5]

 [Amdt No: 27/6]

AMC No 3 27.865 External loads operations using simple personnel-carrying device systems

ED Decision 2018/015/R/R

If required by the applicable operating rule or if an applicant elects to, this AMC provides a means of compliance for the airworthiness certification of a simple personnel-carrying device system (PCDS) and attaching means to the hook, providing safety factors and consideration of calendar life replacement limits in lieu of a dedicated fatigue analysis and test.

A PCDS is considered to be simple if:

(a)  it meets an EN standard under Directive 89/686/EEC, or Regulation (EU) 2016/425, as applicable, or subsequent revision;

(b)  it is designed to restrain no more than a single person (e.g. hoist or cargo hook operator, photographer, etc.) inside the cabin, or to restrain no more than two persons outside the cabin;

(c)  it is not a rigid structure such as a cage, a platform or a basket.

PCDSs that cannot be considered to be simple are considered to be complex.

Note 1: EASA or the relevant Authority should be contacted to confirm the classification in the event that:

—             a PCDS includes new or novel features;

—             a PCDS has not been proven by appreciable and satisfactory service experience; or

—             there is any doubt in the classification.

Approval of Simple PCDSs

If the approval of a simple PCDS is requested, then Directive 89/686/EEC, or Regulation (EU) 2016/425 or subsequent revision are an acceptable basis for the certification of a simple PCDS provided that:

(a)  the applicable Directive 89/686/EEC, or Regulation (EU) 2016/425, as applicable, or subsequent revision and corresponding EN standards for the respective components are complied with (EC Type Examination Certificate);

(b) the applicant for the minor change has obtained from the manufacturer and keeps on record the applicable EC Conformity Certificate(s).

Note 2: A simple PCDS has an EC Type Examination Certificate (similar to an STC), issued by a Notified Certification Body and, for the production and marketing, an EC Conformity Certificate (similar to an EASA Form 1) issued by the manufacturer.

Note 3: In cases where ropes or elements connect simple PCDSs to the hoist/cargo hook or internal helicopter cabin, the EN certification can be achieved by a body meeting the transposition into national law of the applicable EC/EU regulation.

The EC-certified components are appropriately qualified for the intended use and the environmental conditions.

Note 4: The intended use and corresponding risks must be considered when selecting EN standards. For example hoist operators and rescuers that have to work at the edge of the cabin or outside should have full body harnesses to address the risk of inversion. Litters and the corresponding restraint systems should be adequately designed for the loads that can be generated during spinning.

Note 5: The assembly of the different components should also consider the intended use. For example, the attachment of the tethering strap to the harness of a hoist operator should be of a DAD quick-release type to allow quick detachment from the aircraft following a ditching or emergency landing. The tethering strap should also be adjustable to take up slack and avoid shock loads being transmitted to other components.

(c)  The maximum load applied to each component between the HEC and the hook is conservatively estimated. This is particularly important when more than one person is attached by a single system to the cargo hook/ hoist. Appendix 1 defines the appropriate minimum ultimate load (UL_min). If UL_min is above the static strength currently declared by the supplier of the PCDS or of a component of the attachments, through compliance with an EN standard, then proof of sufficient strength is to be provided by static tests. All possible service load cases (including asymmetric load distribution) are to be considered. In this case, the PCDS and/or the attaching means (e.g. rope, carabineer, shackles, etc.) must be capable of supporting UL_min for a minimum of 3 minutes without failure. There should be no deformation of components that could allow the release of the HEC. Components and details added to the EN-approved equipment (such as splicing, knots, stitching, seams, press fits, etc.) or the materials used (textiles, composites, etc.) that might reduce the strength of a product or could (in combination) have other detrimental effects have been investigated by the applicant and accounted for in the substantiation.

(d)  The effects of ageing (due to sunlight, temperature, water immersion, etc.) and other operational factors that may affect the strength of the PCDS are accounted for through appropriate inspections and the application of a calendar life limit as appropriate. The PCDS and the related attachment elements are limited to the carriage of HEC.

(e) The risk of fatigue failure is minimised. See section below for further details.

(f) Instructions for Continued Airworthiness (ICA) should be provided. Typically, the ICA would comprise an inspection programme and maintenance instructions based on the applicable manufacturer’s data. The ICA should ensure that specific operational uses of the system that might affect its strength are accounted for. A calendar life limit should be applied when appropriate.

(g)  When the harness is not designed to transport an incapacitated or untrained person, then the labelling and/or the user/flight manual should include a specific limitation of use as applicable.

Note 6: The following considerations and corresponding instructions/limitations should be taken for EN 1498 Type A and C rescue loops due to their potential detrimental physiological effects and the risk of falling out:

(a)  whether life is in imminent risk;

(b)  the physical condition of the person to be hoisted, particularly whether the rescuee will remain conscious and coherent during the hoist process;

(c)  the potential for the person to remain compliant with the brief given prior to hoisting;

(d)  alternative methods and devices to recover the person; and

(e)  whether the risk of falling from the device would result in further serious injury or death.

Simple PCDS Helicopter Compatibility

The ingress/egress of the simple PCDS in the cabin should be verified on the specific rotorcraft by means of a test. The compatibility with the hoist hook, unless the ring is already specified in the RFM, should also be verified by means of a test.

The verification of the hook and simple PCDS compatibility should also verify the absence of any roll-out/jamming phenomenon in order to:

(a) prevent any inadvertent release of the load from the cargo hook; and/or

(b) prevent the ring from jamming on the load beam during the release.

Manufacturing and Identification

Simple PCDSs that comply with Directive 89/686/EEC, or Regulation (EU) 2016/425, as applicable, or subsequent revision and the corresponding EN standards for the respective components are labelled by the manufacturer according to the applicable standard. If not already contained in the manufacturer labelling, the following additional information, as applicable, should be made visible on labelling on simple PCDSs:

(a)  manufacturing date;

(b)  life-limit date (if different from any existing one marked on the personal protective equipment (PPE));

(c)  manufacturer’s identification;

(d) part number;

(e) serial number or unique identification of the single PCDS;

(f)  STC/minor change approval number (if applicable);

(g)  authorised load in kg;

(h) authorised number of persons;

(i)  any other limitation not recorded in the manufacturer labelling.

Simple PCDS Static Strength

The PCDS should be substantiated for the loading conditions determined under the applicable paragraphs of FAA AC 27.865. For a PCDS to be certified separately from the hoist, using the guidance of this certification memo, the minimum ultimate load (UL_min) to be substantiated is defined as follows:

Where:

M is the total mass of the PCDS equipment/component and persons restrained by the part being substantiated (this is equivalent to the working load rating of an EN). The mass of each person should be assumed to be 100 kg.

NOTE: If the person(s) or their task requires the personal carriage of heavy items (backpacks, tools, fire extinguishers, etc.), these must be accounted for in the total mass M, in addition to the person’s mass of 100 kg.

n is the helicopter manoeuvring limit load factor and must be assumed = 3.5 (CS 27.337 and 27.865).

j is the ultimate load factor of safety for all parts = 1.5 (CS 27.303).

K is an additional safety factor for textiles = 2.0 (see NOTE 1) (CS 27.619).

jf is an additional fitting factor = 1.33 applying to all joints, fittings, etc. (CS 27.619).

g is the acceleration due to gravity of 9.81 m/s².

The resulting values to ensure compliance with the CS-27 static strength requirements are:

UL_min for metallic elements with a fitting factor (needed for all joints and fittings): = 7 Mg.

(NOTE: To address fatigue, a value of 10 Mg may be required; see the section below on fatigue.)

UL_min for textiles (webbing, ropes, etc.) with fitting factor: = 14 Mg (see NOTE 1).

UL_min may be compared to the strength of the PCDS components already substantiated according to Directive 89/686/EEC, or Regulation (EU) 2016/425, as applicable, or subsequent revision and the corresponding EN Standards or Directive 2006/42/EC Annex I Point 6. Where UL_min is greater than that laid down in the Directives/EN requirements, a static test to not less than UL_min will be necessary. The test load must be sustained for 3 minutes. In addition, there should be no detrimental or permanent deformation of the metallic components at 3.5 Mg (CS 27.305).

NOTE 7: Directive 2006/42/EC Annex I Point 6 recommends a safety factor of 14 (2 × 7) for textiles applied to the working load (equivalent to 14 M above) for equipment lifting humans, whereas for a rescue harness, EN 1497 requires a static test load of not less than the greater of either 15 kN or 10 times the working load. Considering this difference, for each textile component within the PCDS certified to one of the following ENs, the value of K may be reduced, such that UL_min is not less than 10 M x g, where M is not more than 150 kg:

For harnesses, EN 361, EN 1497 or EN 12277A, EN 813 or EN 12277C apply; for belts or straps and for lanyards, EN 354 applies. This allowance is not applicable to ropes.

Furthermore, to allow this reduced value of UL_min and to address any potential deterioration of textiles due to environmental and other hidden damage, the ICA must include a life limitation of 5 years (or the life indicated by the PCDS manufacturer, if less) and an annual detailed inspection of the general condition of the harness.

Simple PCDS Fatigue

When the simple PCDS and the related attachment elements are limited to the carriage of HEC only, no further specific fatigue substantiation is necessary for each part of the simple PCDS that is either:

(a)  certified in accordance with an applicable EN that is referenced in this AMC for which the allowable working load is not exceeded by the mass M; or

(b)  substantiated for static strength as described above with UL_min not less than 10 Mg

[Amdt No: 27/5]

[Amdt No: 27/6]