xmlns:atom="http://www.w3.org/2005/Atom" xmlns:atom="http://www.w3.org/2005/Atom"

ANNEX IIIU.K.Part Organisation Requirements — Aerodrome Operators (Part-ADR.OR)

SUBPART D — MANAGEMENT (ADR.OR.D)U.K.

ADR.OR.D.005 Management systemU.K.

(a)The aerodrome operator shall implement and maintain a management system integrating a safety management system.U.K.
(b)The management system shall include:U.K.
(1)

clearly defined lines of responsibility and accountability throughout the aerodrome operator, including a direct accountability for safety on the part of senior management;

(2)

a description of the overall philosophies and principles of the aerodrome operator with regard to safety, referred to as the safety policy, signed by the accountable manager;

(3)

a formal process that ensures that hazards in operations are identified;

(4)

a formal process that ensures analysis, assessment and mitigation of the safety risks in aerodrome operations;

(5)

the means to verify the safety performance of the aerodrome operator’s organisation in reference to the safety performance indicators and safety performance targets of the safety management system, and to validate the effectiveness of safety risk controls;

(6)

a formal process to:

(i)

identify changes within the aerodrome operator’s organisation, management system, the aerodrome or its operation which may affect established processes, procedures and services;

(ii)

describe the arrangements to ensure safety performance before implementing changes; and

(iii)

eliminate or modify safety risk controls that are no longer needed or effective due to changes in the operational environment;

(7)

a formal processes to review the management system referred to in paragraph (a), identify the causes of substandard performance of the safety management system, determine the implications of such substandard performance in operations, and eliminate or mitigate such causes;

(8)

a safety training programme that ensures that personnel involved in the operation, rescue and firefighting, maintenance and management of the aerodrome are trained and competent to perform the safety management system duties;

(9)

formal means for safety communication that ensures that personnel are fully aware of the safety management system, conveys safety critical information, and explains why particular safety actions are taken and why safety procedures are introduced or changed;

(10)

coordination of the safety management system with the aerodrome emergency response plan; and coordination of the aerodrome emergency response plan with the emergency response plans of those organisations it must interface with during the provision of aerodrome services; and

(11)

a formal process to monitor compliance of the organisation with the relevant requirements.

(c)The aerodrome operator shall document all management system key processes.U.K.
(d)The management system shall be proportionate to the size of the organisation and its activities, taking into account the hazards and associated risks inherent in these activities.U.K.
(e)In the case that the aerodrome operator holds also a certificate to provide air navigation services, it shall ensure that the management system covers all activities in the scope of its certificates.U.K.

[F1ADR.OR.D.007 Management of aeronautical data and aeronautical informationU.K.

(a)As part of its management system, the aerodrome operator shall implement and maintain a quality management system covering the following activities:U.K.
(1)

its aeronautical data activities;

(2)

its aeronautical information provision activities.

(b)The aerodrome operator shall, as part of its management system, establish a security management system to ensure the security of operational data it receives, or produces, or otherwise employs, so that access to that operational data is restricted only to those authorised.U.K.
(c)The security management system of the aerodrome operator shall define the following elements:U.K.
(1)

the procedures relating to data security risk assessment and mitigation, security monitoring and improvement, security reviews and lesson dissemination;

(2)

the means designed to detect security breaches and to alert personnel with appropriate security warnings;

(3)

the means of controlling the effects of security breaches and of identifying recovery action and mitigation procedures to prevent reoccurrence.

(d)The aerodrome operator shall ensure the security clearance of its personnel with respect to aeronautical data security.U.K.
(e)The aerodrome operator shall take the necessary measures to protect its aeronautical data against cyber security threats.]U.K.

Textual Amendments

ADR.OR.D.010 Contracted activitiesU.K.

(a)Contracted activities include all activities within the aerodrome operator’s scope in accordance with the terms of the certificate that are performed by other organisations either itself certified to carry out such activity or if not certified, working under the aerodrome operator’s approval. The aerodrome operator shall ensure that when contracting or purchasing any part of its activity, the contracted or purchased service or equipment or system conforms to the applicable requirements.U.K.
(b)When an aerodrome operator contracts any part of its activity to an organisation that is not itself certified in accordance with this Part to carry out such activity, the contracted organisation shall work under the approval and oversight of the aerodrome operator. The aerodrome operator shall ensure that the [F2CAA] is given access to the contracted organisation, to determine continued compliance with the applicable requirements.U.K.

ADR.OR.D.015 Personnel requirementsU.K.

(a)The aerodrome operator shall appoint an accountable manager, who has the authority for ensuring that all activities can be financed and carried out in accordance with the applicable requirements. The accountable manager shall be responsible for establishing and maintaining an effective management system.U.K.
(b)The aerodrome operator shall nominate persons responsible for the management and supervision of the following areas:U.K.
(1)

operational services of the aerodrome; and

(2)

maintenance of the aerodrome.

(c)The aerodrome operator shall nominate a person or group of persons responsible for the development, maintenance and day-to-day management of the safety management system.U.K.

Those persons shall act independently of other managers within the organisation, shall have direct access to the accountable manager and to appropriate management for safety matters and shall be responsible to the accountable manager.

(d)The aerodrome operator shall have sufficient and qualified personnel for the planned tasks and activities to be performed in accordance with the applicable requirements.U.K.
(e)The aerodrome operator shall assign a sufficient number of personnel supervisors to defined duties and responsibilities, taking into account the structure of the organisation and the number of personnel employed.U.K.
(f)The aerodrome operator shall ensure that personnel involved in the operation, maintenance and management of the aerodrome are adequately trained in accordance with the training programme.U.K.

ADR.OR.D.017 Training and proficiency check programmesU.K.

(a)The aerodrome operator shall establish and implement a training programme for personnel involved in the operation, maintenance and management of the aerodrome.U.K.
(b)The aerodrome operator shall ensure that unescorted persons operating on the movement area or other operational areas of the aerodrome are adequately trained.U.K.
(c)The aerodrome operator shall ensure that persons referred to in points (a) and (b) above have demonstrated their capabilities in the performance of their assigned duties through proficiency check at adequate intervals to ensure continued competence.U.K.
(d)The aerodrome operator shall ensure that:U.K.
(1)

adequately qualified and experienced instructors and assessors for the implementation of the training programme are used; and

(2)

suitable facilities and means are used for the provision of the training.

(e)The aerodrome operator shall:U.K.
(1)

maintain appropriate qualification, training and proficiency check records to demonstrate compliance with this requirement;

(2)

on request, make such records available to its personnel concerned; and

(3)

if a person is employed by another employer, on request, make such records of that person available to that new employer.

ADR.OR.D.020 Facilities requirementsU.K.

(a)The aerodrome operator shall ensure that adequate and appropriate facilities are available to its personnel or personnel employed by parties with whom it has contracted for the provision of aerodrome operational and maintenance services.U.K.
(b)The aerodrome operator shall designate appropriate areas at the aerodrome to be used for the storage of dangerous goods transported through the aerodrome, in accordance with the Technical Instructions.U.K.

ADR.OR.D.025 Coordination with other organisationsU.K.

The aerodrome operator shall:

(a)

ensure that the management system of the aerodrome addresses the coordination and interface with the safety procedures of other organisations operating or providing services at the aerodrome; and

(b)

ensure that such organisations have safety procedures in place to comply with the applicable requirements of Regulation (EC) No 216/2008 and its Implementing Rules and the requirements laid down in the aerodrome manual.

ADR.OR.D.027 Safety programmesU.K.

The aerodrome operator shall:

(a)

establish, lead and implement programmes to promote safety and the exchange of safety-relevant information; and

(b)

encourage organisations operating or providing services at the aerodrome to be involved in such programmes.

ADR.OR.D.030 Safety reporting systemU.K.

(a)The aerodrome operator shall establish and implement a safety reporting system for all personnel and organisations operating or providing services at the aerodrome, in order to promote safety at, and the safe use of, the aerodrome.U.K.
(b)The aerodrome operator, in accordance with ADR.OR.D.005 (b)(3), shall:U.K.
(1)

require that the personnel and organisations mentioned in point (a) use the safety reporting system for the mandatory reporting of any accident, serious incident and occurrence; and

(2)

ensure that the safety reporting system may be used for the voluntary reporting of any defect, fault and safety hazard which could impact safety.

(c)The safety reporting system shall protect the identity of the reporter, encourage voluntary reporting and include the possibility that reports may be submitted anonymously.U.K.
(d)The aerodrome operator shall:U.K.
(1)

record all reports submitted;

(2)

analyse and assess the reports, as appropriate, in order to address safety deficiencies and identify trends;

(3)

ensure that all organisations operating or providing services at the aerodrome which are relevant to the safety concern, participate in the analysis of such reports and that any corrective and/or preventive measures identified are implemented;

(4)

conduct investigations of reports, as appropriate; and

(5)

refrain from attribution of blame in line with the ‘just culture’ principles.

ADR.OR.D.035 Record keepingU.K.

(a)The aerodrome operator shall establish an adequate system of record keeping, covering all its activities undertaken under Regulation (EC) No 216/2008 and its Implementing Rules.U.K.
(b)The format of the records shall be specified in the aerodrome manual.U.K.
(c)Records shall be stored in a manner that ensures protection from damage, alteration and theft.U.K.
(d)Records shall be kept for a minimum of five years, except that the below records shall be kept as follows:U.K.
(1)

the aerodrome certification basis, the alternative means of compliance in use and the current aerodrome or aerodrome operator certificate(s), for the lifespan of the certificate;

(2)

arrangements with other organisations, for as long as such arrangements are in effect;

(3)

manuals of aerodrome equipment or systems employed at the aerodrome, for as long as they are used at the aerodrome;

(4)

safety assessment reports for the lifetime of the system/procedure/activity;

(5)

personnel training, qualifications, and medical records as well as their proficiency checks, as appropriate, for at least four years after the end of their employment, or until the area of their employment has been audited by the [F3CAA]; and

(6)

the current version of the hazard register.

(e)All records shall be subject to applicable data protection law.U.K.