Excellence through Assessment, Continuous monitoring and Training

Transcription

1 Excellence through Assessment, Continuous monitoring and Training

2 Original Issue of 29 DISCLAIMER All rights reserved. No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without prior permission in writing from Wyvern. MANUAL RIGHTS This Manual has been prepared for the exclusive use of Wyvern personnel under the direction and authority of Wyvern and shall, at all times, remain the property of Wyvern. The holder hereof acknowledges and agrees that this Manual contains or may contain trade secrets, copyrighted material, and commercial and proprietary information, privileged and confidential, to the interest of Wyvern, and the holder hereof further agrees that this Manual may not be reproduced, distributed, or copied, in whole or in part, without the express prior written consent of Wyvern. In the event this Manual is sold or distributed to any other party, no warranty or guarantee, expressed or implied, is made as to the accuracy, sufficiency, or suitability of the materials contained herein or of any revision, supplement, or bulletin hereto. It is understood and agreed to by such other party that it shall release, indemnify, and hold Wyvern, its officers, employees, and agents harmless against any and all claims or actions of whatever nature which may arise or claim to arise from the use hereof. Wyvern. All rights reserved. New York, USA 22 February. WORD USAGE Gender The male gender is used in a generic sense to designate both sexes. No discrimination is intended or implied. May The word may is used in a permissive sense to state authority or permission. Conformity is not mandatory. Should The word should is used in a permissive sense to state authority or permission. Conformity is recommended, but is not mandatory. Will, Shall, and Must The words will, shall, and must are used in an imperative sense to state the necessity to accomplish the requirement prescribed. Conformity is mandatory.

3 Original Issue of 29 TABLE OF CONTENTS Disclaimer... 2 Manual Rights... 2 Word Usage... 2 Table of Contents References Applicability List of Effective Pages Purpose Revision Responsibility Assessment Outsourced Functions and Contracting Assessment Working Language Part 1 Multipliers, Management Systems Section 1 Organization, Management and Structure (OMS) Section 2 Quality Management System (QMS) Section 3 Safety Management System (SMS) Section 4 Emergency Response Plan (ERP) Section 5 Workplace Safety and Health Management System (WPS) Section 6 Environment Management System (EMS) Section 7 Security and Intelligence Management System (SIS) Part 2 Technical Performance Factors (TPF) Section 1 - Remotely Piloted Aircraft (RPA) Section 2 - Remote Pilot Station (RPS) Section 3 Payload (PYL) Section 4 - Data Link/ Command and Control C2 Link (CCL) Section 5 - Support Equipment (SEQ) Section 6 Qualification and Training (QTR) Section 7 Operation (OPS)... 28

4 Original Issue of REFERENCES The European Commission Regulation (EC) No 785/2004 EASA E.Y Airworthiness Certification of Unmanned Aircraft Systems (UAS), 2009 FAA Integration of Unmanned Aircraft Systems (UAS) in the National Airspace System (NAS) Roadmap, Ed.1, 2013 FAA Unmanned Aircraft Systems (UAS) Regulations & Policies ICAO Cir 328, Unmanned Aircraft Systems (UAS), 2011 ICAO Doc 10019, Manual on Remotely Piloted Aircraft Systems (RPAS), Draft version ISO 9000 Family ISO 14000:2014 (Draft Version July 2014) ISO (Draft Version 2014) ISO 17020:2012 OSHAS 18001:2007 UK CAP 722 Unmanned Aircraft System Operations in UK Airspace Guidance, Ed.5, APPLICABILITY The EXRAS (EXACT Requirements and Standards) as published in this edition of the ESM (EXACT Standards Manual) are applicable for conduct of an assessment according to the EXACT Program. EXRAS shall only be applied to RPAS Operators that operate as a minimum one RPA (Remotely Piloted Aircraft) and hold an ROC (RPAS operator certificate). 1.3 LIST OF EFFECTIVE PAGES INTENTIONALLY LEFT BLANK 1.4 PURPOSE The EXACT Program Manual (EPM) is published in order to make the complete set of requirements and standards that govern all aspects of the EXACT Program available in a single source. Requirements in the EPM provide the basis for Program standardization, which ensures that each Assessment is conducted in a consistent manner. Only Certified EXACT Assessment Organizations (EXAOs) shall conduct EXACT Assessments. The EXRAS defined in this manual have been developed solely for use under the EXACT Program. EXRAS are neither regulations nor legal binding law. The EXACT Program and its associated EXACT Requirements and Standards shall be applied by the RPAS Operator s voluntary choice. 1.5 REVISION RESPONSIBILITY Revisions to this manual are the responsibility of the EXACT Program owner.

5 Original Issue of 29 A published revision to this manual will contain a black bar on the right margin indicating the adjacent provision on a page has been changed. When changes are too numerous to reasonably indicate with lines, a new edition of the EPM will be published. A new edition will not contain bars. 1.6 ASSESSMENT During an Assessment, an operator is assessed against the EXACT Requirements and Standards. The Assessment Team will measure the degree to which EXRAS are complied within the way of being documented and implemented by the RPAS Operator. The organization as such of a service provider to whom the RPAS Operator has chosen to outsource operational functions is outside the EXACT Assessment scope. However, the services provided by the contractor shall be part of the RPAS Operator s Quality Management System. It is the RPAS Operator s responsibility to provide verifiable evidence that all outsourced functions are monitored by the RPAS Operator to ensure fulfillment of applicable regulatory requirements affecting the safety and security of RPAS operations according to the RPAS Operator s standard operating procedures and contractual requirements. English language is the official language of the EXACT Program.

6 Original Issue of PART 1 MULTIPLIERS, MANAGEMENT SYSTEMS OMS 1 The ROC Holder shall establish, document, implement and maintain a company management system through systems, programs, processes and procedures that are needed for the safe, secure, effective and efficient RPAS operation. OMS 2 The ROC Holder shall define and implement processes and procedures necessary to measure the adequacy, suitability, and effectiveness of the RPAS operation and the company management system as such. OMS 3 The RPAS Operator shall create and maintain a company operation manual including maintenance operation, or set of manuals that include(s) as a minimum: a) the scope of the RPAS Operator s functions, b) verifiable evidence that the company operation manual provisions are in compliance with applicable rules and regulations, c) the documented systems, programs, process's and procedures established for RPAS operation, and d) human performance principles. OMS 4 The RPAS Operator shall establish, amend, and review an accepted and where required by the State of the RPAS Operator approved RPA Operations Manual. It shall contain as a minimum the following structure and parts: a) General, b) RPAS Operating Information for each RPA type operated, normal, abnormal and emergency procedures and associated checklists, c) Areas, Routes and Aerodromes, and d) Training. OMS 5 The RPAS Operator shall ensure that every mission is conducted in accordance with the provisions of the RPAS operations manual. OMS 6 The RPAS Operator shall have a document control system (electronic and/or paper) for the effective conduct and support of RPAS operation. The document control system shall include as a minimum procedures for: the identification, archival, protection, recovery and retention of company documentation and company records.

7 Original Issue of 29 OMS 7 The document control procedure shall define the controls required for: a) approval prior to issue and usage, b) review and update as necessary, c) usage of the current version, d) availability at points of use, and e) verification of their correctness and suitability of documents and records of external origin that are needed for PRAS operation. Their distribution to the end-user shall be controlled and verifiable to prevent the accidental use of obsolete data. OMS 8 The document control system shall have a procedure for the effective determination of actual company manuals and records in use to ensure controlled oversight and management of the complete set of company documents and records. OMS 9 The RPAS Operator s senior management shall: a) provide evidence of its management background and qualification to be suitable for the position executing, b) demonstrate its commitment to the development and implementation of the RPAS operation and associated management systems supporting its functions (QMS, SMS, etc.) and continually improving each system s effectiveness by: i) complying with rules and regulatory requirements, ii) conforming to the EXACT Standard, iii) meeting customer expectations, iv) establishing the quality-, safety-, workplace safety-, environment-, and security policy, v) ensuring that quality-, safety-, workplace safety-, environment-, and security objectives are established and fulfilled, vi) conducting management reviews, and vii) ensuring the availability of resources required. OMS 10 The RPAS Operator shall have a process to ensure that the most senior manager has means in place to define and communicate accountabilities, authorities, and responsibilities of each manager throughout the RPAS organization. This is to include the areas of: a) RPAS operation, b) Quality Management System (QMS), c) Safety Management System (SMS) and Emergency Response Plan (ERP), d) Work Place Safety and Health Management System (WPS), e) Environment Management System (EMS), and f) Security and Intelligence Management System (SIS). OMS 11 The RPAS Operator s most senior manager shall establish a process to ensure that all company personnel have a thorough understanding of their duties, responsibilities, and authorities within the company. OMS 12 The RPAS Operator s most senior manager shall institute a process to ensure that all personnel assigned to, or directly involved in RPAS operation are properly trained and instructed, have

8 Original Issue of 29 demonstrated their abilities in their particular duties and are aware of their responsibilities and the relationship of such duties to the RPAS mission as a whole. OMS 13 The RPAS Operator s most senior manager shall establish a process to ensure that all management personnel report to him regarding: a) the performance of their department, b) the effectiveness of processes and procedures implemented, and c) any need for improvement. OMS 14 The RPAS Operator shall have a process to plan, develop, analyze and if applicable revise the processes needed for RPAS operation. The process shall include the following, as appropriate: a) quality-, safety-, workplace safety-, security- and environment objectives, b) the need to establish processes and documents, and to provide sufficient resources, c) required verification, validation, monitoring, measurement, inspection and test activities, and d) records needed to provide evidence that the company processes and RPAS operation meet all applicable rules, regulations and requirements. OMS 15 The RPAS Operator shall have a management systems training program to institute and provide guidance to all company employees. The training program shall include processes and procedures necessary to manage, control and continuously improve all training courses offered under the program. The management systems training program shall offer as a minimum courses for: a) Company policies and processes familiarization, b) Quality Management System (QMS), c) Safety Management System (SMS) and Emergency Response Plan (ERP), d) Work Place Safety and Health Management System (WPS), e) Environment Management System (EMS), and f) Security and Intelligence Management System (SIS). OMS 16 The RPAS Operator management systems training program shall include sufficient recurrent training courses. OMS 17 The RPAS Operator management systems training program shall involve examination where deemed necessary by the RPAS Operator. OMS 18 The RPAS Operator shall have a robust examination process demonstrating that employee s knowledge and skills are up to date. The process addresses all ROC Holder training activities and shall encompass procedures for: a) re-examination, b) unsuccessful examination participants, and c) conduct and grading of the exam.

9 Original Issue of 29 OMS 19 The RPAS Operator shall establish and maintain a process of exercising operational control over any mission and flight operated under the terms of its ROC. QMS 1 The RPAS Operator shall establish a procedure to ensure the company QMS scope encompasses all management systems, like: QMS-, SMS-, EMS-, and SIS, and operational areas to include maintenance system. QMS 2 The RPAS Operator shall establish, document, implement and maintain a quality management system. The quality management system documentation shall include as a minimum: a) a description of the QMS b) duties and responsibilities of personnel involved in QMS c) a quality policy, d) quality objectives, e) processes to ensure: i. regulatory compliance ii. conformity with EXACT Requirements and Standards iii. monitoring of the RPAS operation iv. quality control v. quality assurance vi. reporting vii. corrective actions viii. document control ix. training QMS 3 The RPAS Operator shall: a) design the programs, processes and procedures required to ensure the effective planning, operation and control of the QMS and their use throughout the RPAS company, b) define criteria and methods needed to ensure that both the use and control of the QMS processes are effective and interact with each other, c) offer and deliver sufficient QMS training to all personnel involved in PRAS operation, d) provide adequate recourses to conduct the operation and monitoring of the QMS processes, e) monitor, measure where applicable, and analyze the QMS processes, f) implement actions necessary to reach planned quality objectives, and g) apply continuous improvement techniques on these processes. QMS 4 The RPAS Operator shall have a process to control and exercise supervision over outsourced services and functions.

10 Original Issue of 29 QMS 5 The RPAS Operator shall have a process for planning and conducting Management Evaluations, with the objective to review the company QMS for its suitability, adequacy and effectiveness. The Management Evaluation shall: a) be performed at least once per year or when deemed necessary, b) review the suitability and adequacy of QMS-, SMS-, EMS-, and SIS policies and objectives, c) consider conclusions of previous Management Evaluations, d) look at the results of QMS audits, e) include information on regulatory compliance, f) review the status of preventive and corrective actions, g) evaluate strategic management changes that could affect the ROC Holder s operation, and h) assess opportunities for RPAS operation improvement. QMS 6 The RPAS Operator shall have a process to plan and control company contracts, including: a) requirements specified by the customer, b) applicable regulatory requirements, c) maintenance services, and d) recycling or final disposal of products delivered. QMS 7 The RPAS Operator shall have a process to review the requirements related to the deliverables. This process shall be conducted prior to committing to supply RPAS services and confirm the ability to meet the defined requirements. QMS 8 The RPAS Operator shall have a purchase process to ensure that purchased products and services conform to specified purchase requirements. The process shall cover requirements for: a) the approval of products and services intended to purchase, and b) qualification, training and examination of personnel who will make use of purchased products and services, if applicable. QMS 9 The RPAS Operator shall have a procedure to evaluate and select suppliers based on their ability to supply products and services in accordance with the ROC Holder s requirements. QMS 10 The RPAS Operator shall establish procedures to test, inspect, or assess other activities necessary of purchased products and services to ensure that they meet specified purchase requirements prior to release for RPAS Operation routine use. The RPAS Operator shall document the successful test results. QMS 11 The RPAS Operator shall have an audit Program that encompasses all operational company departments, including contracted service and product providers.

11 Original Issue of 29 QMS 12 The audit program shall have planned processes and procedures required to define audit criteria, scope, frequency, objectives, and methods used. The audit Program shall have a process for company auditor selection, qualification, and training. QMS 13 The audit program shall have a procedure to define the responsibilities and requirements for planning and conducting audits, creating audit records and reporting audit results. QMS 14 The audit program shall have procedures to ensure: a) audits are conducted in an objective and unprejudiced manner, b) auditors are not assessing their own work, c) all audit activities and audit results are documented and archived for a minimum of five (5) years, and d) its processes and procedures are effectively implemented and maintained. QMS 15 The RPAS Operator s QMS shall have a corrective action process to eliminate the root-causes of nonconformities in order to prevent their recurrence. The process shall include procedures for: a) analyzing nonconformities, b) evaluating the need for action to ensure that nonconformities do not recur, c) determining and implementing action needed, which shall be appropriate to the nature of the nonconformities detected, d) ensuring that any corrective actions are taken without undue delay to eliminate detected nonconformities and their root-causes. e) records of the results of action taken, f) reviewing the effectiveness of the corrective action taken, and g) verifying that corrective action taken are effective and the results have been reported to all required parties. SMS 1 The RPAS Operator shall establish, document, implement and maintain a Safety Management System (SMS) for RPAS operation. The RPAS SMS documentation shall include as a minimum: a) a description of the SMS b) accountabilities and responsibilities of personnel involved in RPAS SMS c) a safety policy, d) safety objectives, e) processes to ensure: i. regulatory compliance ii. conformity with EXACT Requirements and Standards iii. the management of safety risks iv. safety assurance v. safety reporting vi. safety promotion

12 Original Issue of 29 SMS 2 The RPAS Operator shall have a process to define and regularly review the RPAS SMS policy to ensure it remains relevant and suitable for the RPAS Operator. SMS 3 The RPAS Operator shall have procedures to define measurable RPAS safety goals and objectives deriving from the RPAS SMS policy. SMS 4 The RPAS Operator shall have a process to allocate RPAS safety accountabilities, authorities, and responsibilities for all company senior managers for the implementation and maintenance of the SMS. SMS 5 The RPAS Operator shall have a safety culture policy that promotes an atmosphere of trust in which employees are encouraged for reporting safety related information. The safety culture policy shall include: a) an information gathering process, collecting data of human, technical, organizational and environmental factors, and b) a procedure liking the safety culture policy to the organization s corrective action process. SMS 6 The RPAS Operator shall have a just culture policy that includes processes and procedures for zero tolerance for reckless behavior. SMS 7 The RPAS Operator shall have a procedure to communicate RPAS SMS matters throughout the organization to include RPAS safety promotion materials. SMS 8 The RPAS Operator shall have a RPAS data collection process to detect, document, analyze, evaluate, and initiate appropriate follow-up actions on hazards in RPAS operation and maintenance. The RPAS data collection process shall include reactive, proactive and predictive methods and/or a combination thereof. SMS 9 The RPAS Operator shall have a risk management process that ensures assessment and control of RPAS operation and maintenance risks. SMS 10 The RPAS Operator shall have a risk mitigation procedure to bring identified RPAS operation risks to a predetermined acceptable level of risk.

13 Original Issue of 29 SMS 11 The RPAS Operator shall have a procedure to generate safety case studies for RPAS operation. SMS 12 The RPAS Operator shall have a procedure to define a RPAS risk register. SMS 13 The RPAS Operator shall have a process that assesses the organization s RPAS safety performance in comparison to the organization s safety policy and safety goals and objectives. SMS 14 The RPAS Operator shall have a safety assessment corrective action process that verifies the effectiveness of the organization s safety risk mechanisms and procedures used to manage and regulate them. SMS 15 The RPAS Operator shall have RPAS safety reporting procedures to provide feedback on the organization s safety performance. SMS 16 The RPAS Operator shall have a change management process. The process shall include procedures that: a) recognize the changes, b) describe the new or additional measures to ensure safety performance before implementing changes, c) develop the necessary adjustments, d) train employees on the appropriate changes, and e) verify the effectiveness and suitability of the changes. ERP 1 The RPAS Operator shall have an Emergency Response Plan (ERP) to manage and organize all activities to deal with any disaster resulting from the RPAS operation. ERP 2 The RPAS Operator shall have a process to nominate a qualified responsible manager, empowered to manage the ERP during its development, implementation, and follow up phases.

14 Original Issue of 29 ERP 3 The RPAS Operator shall have a process to ensure that the ERP is adequate to the size, nature, and complexity of its operation and addresses potential emergency scenarios relating to its activities. ERP 4 The RPAS Operator shall have a process to ensure the continuation of safe RPAS routine operation when the RPAS ERP is active. ERP 5 The RPAS Operator shall have a procedure to transition from active ERP operation back to routine operation, and finally ending the ERP phase. ERP 6 The RPAS Operator shall have procedures ensuring that: a) the equipment and personnel described in the Emergency Response Plan are sufficient to the size of operation (space, communication equipment, checklists. etc.), b) are readily available during RPAS operation, and c) are briefed before RPAS operation. ERP 7 The RPAS Operator shall have a process to coordinate the ERP with relevant emergency agencies and authorities. ERP 8 The RPAS Operator shall have a process to ensure ERP training is conducted annually in order to verify the ERP s continuing relevance and effectiveness. ERP 9 The RPAS Operator shall have a process for ERP training to ensure that: a) all personnel associated with RPAS operation are familiarized with company ERP procedures, and b) all equipment and facilities are operational and adequately fulfill their purpose in case of an emergency. ERP 10 The RPAS Operator s ERP training process shall include an annual rehearsal of the company RPAS ERP, incorporating a procedure addressing all deficiencies observed during the ERP rehearsal.

15 Original Issue of 29 WPS 1 The RPAS Operator shall have a documented and implemented Workplace Safety Health Management System. It shall include as a minimum: and a) senior management commitment statement to the Workplace Safety and Health Management System, b) employee involvement program, c) safety and health training program, d) worksite analysis process, and e) workplace hazard prevention and control process. WPS 2 The RPAS Operator shall nominate a person responsible for workplace safety and health to champion the ROC Holder s workplace safety and health policy. WPS 3 The RPAS Operator shall have a process to involve all personnel of the company utilizing their experience and skills to help detect and address efficiently all WPS related issues. WPS 4 The RPAS Operator shall institute a safety and health committee involving senior management and RPAS Operator staff members from all departments. WPS 5 The safety and health committee shall define measurable goals and objectives to be met with the WPS. WPS 6 The RPAS Operator shall have a process to conduct regular safety and health inspections to identify latent unsafe conditions and hazardous actions. WPS 7 The RPAS Operator shall establish a corrective action process as defined under section 2 Quality Management System (QMS) of this document. WPS 8 The RPAS Operator shall have a program for suggestions for improvement. The program shall include the encouragement of all personnel to adhere to a hazard reporting culture and accident prevention.

16 Original Issue of 29 EMS 1 The RPAS Operator shall have a documented and implemented Environment Management System (EMS). It shall include as a minimum: a) senior management commitment statement to the EMS, b) employee involvement program, c) EMS training program, d) worksite analysis process, and e) workplace environmental hazard prevention and control process. EMS 2 The RPAS Operator shall have an environmental policy that clearly establishes targets, and objectives to reduce harm on the environment because of RPAS operation. EMS 3 The RPAS Operator shall have a process to allocate sufficient resources (e.g. organizational infrastructure, technology, work environment, human resources) to ensure the effective and efficient management of EMS. EMS 4 The RPAS Operator shall have a process to conduct an environmental review to include an assessment of environmental aspects and their impacts taking into consideration regulatory, legal and any other requirements as applicable. EMS 5 The RPAS Operator EMS shall have a risk management process that ensures data collection, assessment and control of environmental risks evolved through RPAS operation. EMS 6 The RPAS Operator shall have an EMS risk mitigation procedure to bring identified risks to the environment to a predetermined acceptable level of risk. EMS 7 The RPAS Operator shall have a procedure to define a RPAS operation risk register for the environment. EMS 8 The RPAS Operator shall have an EMS corrective action process that verifies the effectiveness of the organization s environmental risks and procedures used to manage and regulate them.

17 Original Issue of 29 EMS 9 The RPAS Operator shall have EMS reporting procedures to provide feedback on the organization s EMS performance. EMS 10 The RPAS Operator EMS shall include emergency response procedures to address environmental accidents and emergency situations. SIS 1 The RPAS Operator shall have a Security and Intelligence Management System (SIS) that includes the senior management commitment to security by establishing a clear security culture and allocating pivotal appropriate level of human, infrastructure and equipment resources. SIS 2 The RPAS Operator shall have a security policy that states its commitment to maintain, enhance and promote security in all its endeavors. Such policy shall be communicated with visible authentication, throughout the organization and shall: a) be validated by the most senior manager, b) set security as one of the main organizational priorities, next to operational safety, c) incorporate security reporting processes and procedures, d) be regularly revised and updated, e) include an engagement to dedicate adequate resources, facilities, equipment and support for its effective execution, f) empower all personnel to enforce security. SIS 3 The RPAS Operator shall have a SIS threat and risk management program that includes: a) a process for determining local threats, b) a threat assessment and scoring system, c) a procedure for measuring security risks, and d) a reevaluation process to identify, and control the effectiveness of the mitigations for those risks. SIS 4 The RPAS Operator shall have a recruitment process that provides for an appropriate level of security background checking of new employees or freelance personnel. SIS 5 The RPAS Operator shall have a process to ensure suitable security characteristics for facilities, equipment, and support services.

18 Original Issue of 29 SIS 6 The RPAS Operator shall have a process to ensure any outsourced services are security checked. SIS 7 The RPAS Operator shall ensure that the SIS includes a process for the management of change in order to: a) prepare, disseminate and perform changes to security policy and procedures; b) control and assess the consequences of change on security. SIS 8 The RPAS Operator shall have a process to seek for continuous security performance improvement. SIS 9 The RPAS Operator shall establish a process ensuring the security of the RPAS RPA, RPS and facilities from sabotage or unlawful malicious interference on both, software and hardware level. SIS 10 The RPAS Operator shall establish a process ensuring the physical security of the installed (or portable) RPS during operational use and when not in use. SIS 11 The RPAS Operator shall have security access control procedures in place to enter the RPS facility. SIS 12 The RPAS Operator shall have security procedures in place for RPS logon and logoff functions to include identification and authentication of each remote pilot. SIS 13 The RPAS Operator shall have procedures to ensure the secure handover between non-collocated RPS, preventing RPA interference by unauthorized individuals or RPA theft. SIS 14 The RPAS Operator shall establish a process ensuring the RPA shall be stored and prepared for flight in a manner that will prevent and detect tampering and ensure the integrity of vital components. SIS 15 The RPAS Operator shall establish a process ensuring safety and security of the C2 link (RPA and RPS) to prevent hacking, spoofing, and other forms of interference or malicious hijack.

19 Original Issue of 29 SIS 16 The RPAS Operator shall have a process addressing restriction of RPA operations in areas of high radio frequency contamination. SIS 17 The RPAS Operator shall have a process to securely store and maintain all data related to the conduct of the RPAS operations. SIS 18 The RPAS Operator shall have an effective intelligence management system including data entry, data linking, data searching and data retrieval.

20 Original Issue of PART 2 TECHNICAL PERFORMANCE FACTORS (TPF) RPA 1 The RPAS Operator shall have a management organization to ensure safety and quality in maintenance operations in line with the specifications of the ROC, the manufacturer s recommendation and approved by the State of Registry. RPA 2 The RPAS operator shall have a process to ensure that the RPAS is in an airworthy condition prior to conducting RPAS operations. RPA 3 The RPAS Operator shall have a process to ensure the RPAS is maintained in accordance with the company maintenance program. RPA 4 The RPAS Operator shall have a process to ensure that the airworthiness of the RPAS is maintained in accordance with airworthiness directives issued by the manufacturer of the RPA and the RPS. RPA 5 The RPAS Operator shall have a process to ensure that all modifications and repairs to the RPAS are conducted strictly in accordance with the approved instructions of the manufacturer. RPA 6 The RPAS Operator shall have a training program to ensure that maintenance personnel are properly trained and qualified to maintain the whole RPAS components to include airframe, systems, RPS, power plants as well as command and control links. RPA 7 The RPAS operator shall have a process for the management and control of maintenance records of RPA, RPS, components, and C2 link. RPA 8 The RPAS Operator shall have a battery self-life process for batteries utilized in the operation of RPAs.

21 Original Issue of 29 RPS 1 The RPAS Operator shall have a process clearly defining responsibility for RPS operational control. RPS 2 The RPAS Operator shall have a process to review RPA procedures regarding their suitability and adequacy of the flight operation and missions to be conducted. The review process shall account as a minimum for: a) RPS shape, size and layout, b) type of operation, VLOS or BVLOS, c) RPAS complexity, d) type of control interface utilized, e) number of remote pilots required to operate the RPA, and f) RPS location fixed or moving location. RPS 3 The RPAS Operator shall have procedures to manage, monitor, and control the RPA operation. Such procedures shall include RPA operation on the ground and in the air. RPS 4 The RPAS Operator shall have a process to ensure that the delegation of authority for RPA flight is conferred only to suitably qualified and licensed individuals to perform these functions. RPS 5 The RPAS Operator shall have a process to ensure that an operational flight plan is completed for every intended flight. The operational flight plan shall: a) be approved and signed by the mission commander, b) plot the fuel/other source of energy, c) show position and progress of the flight, d) document the number of remote pilots, and e) state RPA crew duty time. RPS 6 The RPAS Operator shall have a flight and mission planning procedure accounting for: a) flights over populated areas, considering the following: i) minimum safe altitude, ii) emergency landing sites, and iii) heavily populated and housing areas. b) flights in dangerous areas and conditions, like: i) in the proximity of volcanic, chemical or nuclear clouds, ii) gases, and iii) nuclear radiation. RPS 7 The RPAS Operator shall have procedures to ensure that RPA flights are executed in compliance with the respective airspace requirements of the State the RPA is operated, in regards of:

22 Original Issue of 29 a) approvals and authorizations of the States the RPA is operated, b) communications, c) navigation, d) surveillance, and e) separation from other traffic, and distances from clouds. RPS 8 The RPAS Operator shall have a procedure to prevent RPA operation in known icing conditions, unless the RPA and remote pilot are equipped, trained, and certified for cold weather operations. RPS 9 The RPAS Operator shall have a procedure to determine the meteorological conditions in which the RPA is operating during take-off and landing, regardless of VLOS or BVLOS in order to ensure the RPA is operating in accordance with applicable flight rules. RPS 10 The RPAS Operator shall have a procedure to determine a RPA type designator for each flight and document the RPA type designator in the ATC and operational flight plan. RPS 11 The RPAS Operator shall have procedures for RPA performance calculations for every flight to be conducted. The performance calculations shall consider: a) speed, b) climb, descent or turn rates, c) wake turbulence, d) endurance, e) latency, and f) effect of bank angle on C2, and g) ATC communication link capability and reliability. RPS 12 The RPAS Operator shall have a procedure to determine the meteorological conditions while the RPA is enroute to ensure proper action is taken in the event the RPA is on a VFR flight and encounters IMC weather conditions. RPS 13 The RPAS Operator shall have procedures to ensure the right-of-way requirements of ICAO Annex 2 are fully adhered to and the RPA stays well clear of any manned or unmanned traffic. RPS 14 The RPAS Operator shall have a flight duty planning process to determine maximum flight duty times and minimum rest periods. It shall include procedures for fatigue risk management, monitor flight duty time, and time free from duty, for each RPAS crew member.

23 Original Issue of 29 RPS 15 The RPAS Operator shall have procedures for VLOS operation, including VLOS operations at night, where authorized by the State the RPA is operated in. RPS 16 The RPAS Operator shall have procedures for BVLOS operation to include a) Category A, direct control of remote pilot control of the RPA, b) Category B, autopilot control of remote pilot control of the RPA, and c) Category C, waypoint control of remote pilot control of the RPA. RPS 17 The RPAS Operator shall have RPA pilot handover procedures in line with the number, configurations, and locations of the RPS dedicated to the flight. It shall include a detailed handover briefing that is recorded in the flight documentation. RPS 18 The RPAS Operator shall have established emergency and contingency procedures to ensure, the remote pilot: a) initiates procedures as outlined in the operations manual, while avoiding taking any action that would conflict with Air Traffic Control procedures, and b) conveys safety-related information to the mission, including information related to any changes to the flight plan that become necessary in the course of the RPA operation. RPS 19 The RPAS Operator shall have a RPA recovery process considering the following: a) environment, b) position, c) handling the RPA as per manufacture s operating procedures, and d) coordination with Air Traffic Control. RPS 20 The RPAS Operator shall have a program to ensure RPA servicing and ground handling training for each staff member, as applicable to their duties and to the RPA type, to include: a) procedures for fueling, b) procedures for charging batteries, c) use and installation of protective covers, and d) procedures for operating in cold weather such as: i) moving the RPA or other components of the RPA from a warm facility when precipitation or high humidity is present, ii) engine pre-heat procedures including proper use of related equipment; and iii) managing battery degradation. RPS 21 The RPAS Operator shall have a refueling process for the safe operation of the RPA.

24 Original Issue of 29 PYL 1 The RPAS Operator shall have a process to ensure that the RPA payload operator is: a) trained, b) duly licensed, c) familiar with the RPA payloads, d) knowledgeable of RPA limitations, and e) of the airspace and other operational requirements. PYL 2 The RPAS Operator shall have procedures to address any risks associated with the remote pilot holding a dual role (e.g. the RPA pilot is also the payload operator). PYL 3 The RPAS Operator shall have a maintenance system for Intelligence, Surveillance, and Reconnaissance (ISR) payloads, which follows the specifications of the manufacturer s recommendations while ensuring safety and quality in maintenance operations. PYL 4 The RPAS Operator s audit process as per part 1, section 2 QMS, shall include ISR payloads maintenance activities. PYL 5 The RPAS Operator shall have a process to ensure that personnel conducting maintenance operations on ISR payloads are appropriately licensed, qualified and receive appropriate training. PYL 6 The RPAS Operator shall have a process for separating serviceable from non-serviceable parts of ISR payloads, as well as establishing a protected quarantine zone for rejected parts and equipment awaiting disposition. PYL 7 The RPAS Operator shall have procedures concerning payload limitations for: a) limits differing for aircraft and payload, b) dangerous payloads, and c) secondary purposes of payload.

25 Original Issue of 29 CCL 1 The RPAS Operator shall have a process to receive and manage the company frequency band plan, for C2 link utilization that is approved by the competent authority. CCL 2 The RPAS Operator shall have a process to ensure that the command and control C2 link service provider shall commit to provide the required communication performance (RCP). CCL 3 The RPAS Operator shall have a procedure to receive notification in due time from the C2 link service provider in case of degradation of communication performance. CCL 4 The RPAS Operator shall have a process to ensure that the C2 link service provider is acceptable to the State of Registry. CCL 5 The RPAS Operator shall have a process to ensure that operational communications supporting the RPAS functions are conducted in accordance with the C2 link RCP, in an acceptably safe manner in a given operational environment. CCL 6 The RPAS Operator shall have a process for redundant C2 link utilization including procedures for : a) cold standby, b) hot standby, and c) dual operation. CCL 7 The RPAS Operator shall have a process to ensure that the RPA uses data links that meet communication transaction time, continuity, availability and integrity levels appropriate for the airspace and operation. CCL 8 The RPAS Operator shall have a process to ensure that the spectrum of the C2 link is protected from harmful interference, which could affect the availability, continuity, and integrity of the information being transmitted between the RPS and the RPA. CCL 9 The RPAS Operator shall have a process to ensure that the RPAS design and operating procedures is such that either:

26 Original Issue of 29 a) the loss of the C2 link will not lead directly to injury to people or damage to property, and b) the probability of loss of the C2 link should be lower than the allowed probability of injury to people or damage to property. CCL 10 The RPAS Operator shall have a process to ensure that the RPAS design and operating procedures will: a) reduce the risk of an interruption in C2 link data flow, b) provide the RPA remote pilot with a continuous indication of the operational status of all C2 links, and c) allow to assess that no harmful (Radio Frequency) RF interference is present prior to and during flight. CCL 11 The RPAS Operator shall have procedures addressing contingency situations when loss of the C2 link or its degradation is such that normal flight can no longer be assumed. CCL 12 The RPAS Operator shall have procedures addressing contingency situations when the C2 link is recovered after the lost C2 link procedure was initiated. SEQ 1 The RPAS Operator shall have a process to ensure that its premises will be fit for the safe and secure implementation and control of all missions and activities to include: a) proper ground handling facilities, b) maintenance facilities at the Main Operating Base (MOB), c) suitable storage, shipment, power source and other devices for its portable RPS, d) adequate power supply equipment for the fixed RPS, and e) at each operating base, adequate working space for personnel involved in the safety of RPAS operations e.g. remote crew, ground, maintenance and operational staff. SEQ 2 The RPAS Operator shall have a process to ensure that a flight will not be commenced unless sufficient supplies, including water, provisions, and facilities for physiological needs are available to the RPAS crew members. SEQ 3 The RPAS Operator shall have a process to ensure security and protection from damage, alteration and theft of stored items, to include: a) technical data, equipment, tools and material, and b) storage of parts.

27 Original Issue of 29 QTR 1 The RPAS Operator shall establish a RPAS operation-training program in order for remote flight crews, RPA observers, ground station technicians, maintenance staff, and other ground support crew, to acquire, maintain, and continuously improve their knowledge and skills necessary for the planned tasks and activities to be conducted in accordance with the company requirements. QTR 2 The RPAS Operator s operation-training program shall have a process for maintaining qualification and training records of remote flight crews, RPA observers, ground station technicians, and other ground support crew, as well as maintenance staff. QTR 3 The RPAS Operator s operation-training program shall have procedures for training course planning, preparation, conduct, and examination. QTR 4 The RPAS Operator s operation-training program shall have procedures for the conduct of: a) RPAS Operator familiarization training course, b) conversion training course, c) initial and recurrent training courses per RPS types operated, that is to include abnormal and emergency situations, d) initial and recurrent training courses per RPA types operated, that is to include abnormal and emergency situations, and e) remote flight crew coordination and handover procedures. QTR 5 The RPAS Operator shall have procedures for the familiarization of aerodromes, routes, and operating sites to be used by its RPAS flight crews. QTR 6 The RPAS Operator s operation-training program shall have procedures for RPAS crew resource management (CRM) training for RPAS crewmembers. The RPAS CRM training course shall include but is not limited to the following topics: a) communication, b) threat and error management, c) maintenance of situational awareness, d) human performance and behavior, e) ergonomics, and f) fatigue-related risks and countermeasures. QTR 7 The RPAS Operator s operation-training program shall have a process to ensure that RPAS members who are assigned to operate at different positions at the RPS, complete appropriate training and checking.

28 Original Issue of 29 QTR 8 The RPAS Operator shall have a process to ensure that each RPAS crewmember undergoes RPAS flight training in a Flight Simulation Training Device (FSTD) or in segregated airspace, or a combination of both, at least every 12 calendar months, unless differently approved by the competent authority. QTR 9 The RPAS Operator shall have a process to ensure that the RPAS crewmembers whose duties include communication with ATC, demonstrate the level specified in the English language proficiency requirements in ICAO Appendix 1 to Annex 1. OPS 1 The RPAS Operator shall have procedures for integrating the RPA into non-segregated airspace and at aerodromes, by limiting the risk from the following hazards: OPS 2 a) conflicting traffic, b) terrain and obstacles, c) hazardous meteorological conditions (i.e. thunderstorms, icing, turbulence, etc.), d) ground operations (aircraft, vehicles, structures or people on the ground), and e) other airborne hazards, including wake turbulence, wind shear, birds or volcanic ash. The RPAS Operator shall have a process to ensure that the detectability and conspicuity of RPA is sufficient to ensure timely identification and detection by other airspace users and Air Traffic Control during all phases of flight. OPS 3 The RPAS Operator shall have a process to ensure that the Detect and Avoid (DAA) System including its Remain-well-clear (RWC) function is approved by the State of Registry and that the System covers at least Detect and Avoid, Detect and Advise or Detect and Inform functions. OPS 4 The RPAS Operator shall have detailed normal and emergency procedures associated to its Detect and Avoid (DAA) System alerting the RPA remote pilot of imminent collisions. OPS 5 The RPAS Operator shall have a process to ensure communication backup with Air Traffic Control in case of RPA relay communication failure. OPS 6 The RPAS Operator shall have a process that addresses actions to be taken in the event of a complete radio failure (lost communication).

29 Original Issue of 29 OPS 7 The RPAS Operator shall have a process to ensure regular oversight of contracted C2 link service provider (whether offering ground network, satellite communications (SATCOM) or combination of both), to verify the minimum standards and RCP are maintained (refer to part 1, section 2 QMS). OPS 8 The RPAS Operator shall have a procedure that requires the RPA flight crews to maintain continuous listening watch on the appropriate radio frequency and establish two-way communication, as necessary, with the appropriate Air Traffic Control. OPS 9 The RPAS Operator shall have a procedure to ensure that an up to date communications list is kept in the RPS detailing the frequencies of all likely Air Traffic Control and agencies concerned in the conduct of the flights. OPS 10 The RPAS Operator shall have procedures to ensure that the RPA flight crews continuously monitor navigational equipment and performance. OPS 11 The RPAS Operator shall have a process to ensure that up-to-date information is readily available to all RPA flight crews, to include as a minimum: a) relevant runway data, b) aerodrome facilities, and c) site facilities. OPS 12 The RPAS Operator shall have procedures for approach, missed approach, and departure. OPS 13 The RPAS Operator shall have procedures for automated launch and system recovery. OPS 14 The RPAS Operator shall have a coordination process in the event of loss of downlink data between the RPAS Operator and Air Traffic Control. OPS 15 The RPAS Operator shall have procedures for the Safe Transport of Dangerous Goods (DGR) by Air according to ICAO Annex 18 and Article 35 of the Chicago Convention, to include all applicable DGR training and qualification requirements.