SIST-TS CEN/TS 16501:2013

Air Traffic Management - Specification for software assurance levels

This Technical Specification specifies the technical, operational and maintenance requirements for Software Assurance Levels to support the demonstration of compliance with some elements of the Essential Requirements Safety and Principles governing the construction of systems of the Regulation (EC 552/2004) of the European Parliament and of the Council on the interoperability of the European Air Traffic network (the Interoperability regulation).
This Technical Specification on Software Assurance Levels (SWAL) is intended to apply to software that is part of the EATMN, focusing only on its ground segment and providing a reference against which stakeholders can assess their own practices for software specification, design, development, operation, maintenance, evolution and decommissioning.
Requirements in the present document which refer to should statements or recommendations in the normatively referenced material are to be interpreted as fully normative (shall) for the purpose of compliance with the present document.

Flugverkehrsmanagement - Spezifikation für Software-Sicherheitsanforderungsstufen

Diese technische Spezifikation spezifiziert die Anforderungen für die Software-Sicherheitsanforderungsstufen hinsichtlich Technik, Betrieb und Wartung, um den Nachweis der Konformität mit einigen Teilen der grund-legenden Anforderungen „Sicherheit“ und „Grundsätze der Systemauslegung“ der Verordnung (EG) Nr. 552/2004 des Europäischen Parlaments und des Rates zur Interoperabilität des europäischen Flugverkehrs-managementnetzes (Interoperabilitäts-Verordnung) zu unterstützen.
Diese technische Spezifikation zu Software-Sicherheitsanforderungsstufen (SWAL) soll für Software gelten, die Teil des europäischen Flugverkehrsmanagementnetzes ist und bezieht sich nur auf das bodengestützte Segment. Sie bildet eine Referenz, gegen die die Anspruchsgruppen ihre eigenen Verfahren zu Spezifikation, Auslegung, Entwicklung, Betrieb, Wartung, Weiterentwicklung und Außerbetriebnahme von Software überprü-fen können.
Anforderungen in diesem Dokument, die sich auf Soll-Bestimmungen oder Empfehlungen im verpflichtenden Referenzmaterial beziehen, sind zur Einhaltung des vorliegenden Dokuments als verpflichtend zu interpre-tieren.

Gestion du trafic aérien - Spécification des Niveaux d'assurance logicielle

La présente Spécification Technique spécifie les exigences techniques, opérationnelles et de maintenance
des niveaux d’assurance logicielle destinées à appuyer la démonstration de la conformité de certains
éléments des principales exigences de "sécurité" et des "principes régissant l’élaboration des systèmes" du
Règlement (CE) N° 552/2004 du Parlement européen et du Conseil sur l’interopérabilité du réseau de trafic
aérien européen ("Règlement d’interopérabilité").
Le but de la présente Spécification Technique concernant les niveaux d’assurance logicielle (Software
Assurance Levels: SWAL) est de s’appliquer au logiciel qui fait partie de l’EATMN, en se concentrant
uniquement sur le segment "terrestre" et en fournissant une référence à partir de laquelle les parties
prenantes peuvent évaluer leurs propres pratiques pour la spécification, la conception, l'élaboration, le
fonctionnement, la maintenance, l’évolution et le déclassement du logiciel.
Les exigences figurant dans le présent document qui correspondent à des déclarations ou à des
recommandations de type "il convient de" dans la documentation normative de référence doivent être
interprétées comme des "doit/doivent" entièrement normatifs pour des besoins de conformité avec le présent
document

Upravljanje zračnega prometa - Specifikacije za stopnje varovanja programske opreme

Ta tehnična specifikacija določa tehnične, operativne in vzdrževalne zahteve za stopnje varovanja programske opreme v podporo izkazovanja skladnosti z nekaterimi elementi osnovnih zahtev »Varnost« in »Načela za upravljanje konstrukcije sistemov« regulacije (EC 552/2004) Evropskega parlamenta in Sveta za medsebojno usklajenost omrežja evropskega zračnega prometa »Predpis o medsebojni usklajenosti«). Ta tehnična specifikacija o stopnjah varovanja programske opreme (SWAL) naj bi se nanašala na programsko opremo, ki je del EATMN, ki se osredotoča samo na »osnovni« segment in zainteresiranim stranem ponuja referenco za primerjavo lastnih praks za specifikacijo, oblikovanje, razvoj, delovanje, vzdrževanje, evolucijo in prenehanje obratovanja strojne opreme. Zahteve iz tega dokumenta, ki se nanašajo na izjave z »bi bilo treba«, ali priporočila v normativnem referenčnem materialu je treba zaradi skladnosti s tem dokumentom razlagati kot popolnoma normativne (»je treba«).

General Information

• Status: Published
• Publication Date: 13-May-2013
• ICS: 03.220.50 - Air transport
• ICS: 35.240.60 - IT applications in transport
• Technical Committee: I13 - Imaginarni 13
• Current Stage: 6060 - National Implementation/Publication (Adopted Project)
• Start Date: 13-May-2013
• Due Date: 18-Jul-2013
• Completion Date: 14-May-2013
• Ref Project: CEN/TS 16501:2013 - Air Traffic Management - Specification for software assurance levels

Overview

CEN/TS 16501:2013 - "Air Traffic Management - Specification for software assurance levels" - defines technical, operational and maintenance requirements for Software Assurance Levels (SWAL) applied to software in the European Air Traffic Management Network (EATMN). Focused on the EATMN ground segment, the Technical Specification supports demonstration of compliance with the Essential Requirements (“Safety” and “Principles governing the construction of systems”) of Regulation (EC) 552/2004 (the Interoperability Regulation) and the Single European Sky framework.

Key topics and requirements

• SWAL allocation and grading: Allocation of an appropriate SWAL must follow the methodology in EUROCAE ED‑153, including the grading policy and independence expectations.
• Likelihood assessment & justification: Assessment of the likelihood of effects and the rationale for that assessment are performed per ED‑153 guidance.
• Life‑cycle process objectives: SWAL objectives are specified for primary life‑cycle processes:
  • Acquisition, Supply, Development, Operation, Maintenance
  • Supporting processes: Documentation, Configuration Management, Quality Assurance, Verification, Joint Review, Audit, Problem/Change Resolution
  • Organisational processes: Management, Infrastructure, Improvement, Training
• COTS handling: Specific processes for Commercial Off The Shelf (COTS) software: planning, acquisition, verification, and configuration management (ED‑153, Clause 7).
• Independence and assurance evidence: For certain objectives, independence in performing or checking prevention/verification is required - primarily for higher assurance levels (noted for SWAL 1 and 2).
• Configuration management: For highest-assurance SWAL (SWAL 1), software configuration management is required at the executable level.
• Normative effect of referenced guidance: “Should” recommendations in normatively referenced material (e.g., ED‑153) are to be interpreted as “shall” for compliance with CEN/TS 16501.

Practical applications and users

Who uses this standard:

• Air Navigation Service (ANS) providers and operators
• System integrators, software developers and suppliers for ATM ground systems
• Maintainers, verification and quality assurance teams
• Procurement teams assessing COTS suitability
• Regulatory compliance and safety assessment bodies

Practical uses:

• Assigning and justifying SWAL to software components in ATM ground systems
• Structuring development, verification and maintenance activities to meet regulatory safety principles
• Preparing assurance evidence for interoperability and safety compliance under EC 552/2004
• Performing gap analysis against other assurance frameworks (ED‑109, EN 61508 referenced in bibliography)

Related standards and guidance

• EUROCAE ED‑153 (Guidelines for ANS software safety assurance) - normative reference for allocation, objectives and processes
• ED‑109, EN 61508 and EU Regulations cited in the bibliography for complementary guidance and regulatory context

For implementation, consult CEN/TS 16501 together with ED‑153 to map SWAL objectives onto your project lifecycle, evidence collection and audit strategy.

Standards Content (Sample)

SLOVENSKI STANDARD
01-julij-2013
8SUDYOMDQMH]UDþQHJDSURPHWD6SHFLILNDFLMH]DVWRSQMHYDURYDQMDSURJUDPVNH
RSUHPH
Air Traffic Management - Specification for software assurance levels
Flugverkehrsmanagement - Spezifikation für Software-Sicherheitsanforderungsstufen
Gestion du trafic aérien - Spécification des Niveaux d'assurance logicielle
Ta slovenski standard je istoveten z: CEN/TS 16501:2013
ICS:
03.220.50 =UDþQLWUDQVSRUW Air transport
35.240.60 Uporabniške rešitve IT v IT applications in transport
transportu in trgovini and trade
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

TECHNICAL SPECIFICATION
CEN/TS 16501
SPÉCIFICATION TECHNIQUE
TECHNISCHE SPEZIFIKATION
April 2013
ICS 35.240.60
English Version
Air Traffic Management - Specification for software assurance
levels
Gestion du trafic aérien - Spécification des niveaux Flugverkehrsmanagement - Spezifikation für Software-
d'assurance logicielle Sicherheitsanforderungsstufen
This Technical Specification (CEN/TS) was approved by CEN on 12 February 2013 for provisional application.

The period of validity of this CEN/TS is limited initially to three years. After two years the members of CEN will be requested to submit their
comments, particularly on the question whether the CEN/TS can be converted into a European Standard.

CEN members are required to announce the existence of this CEN/TS in the same way as for an EN and to make the CEN/TS available
promptly at national level in an appropriate form. It is permissible to keep conflicting national standards in force (in parallel to the CEN/TS)
until the final decision about the possible conversion of the CEN/TS into an EN is reached.

CEN members are the national standards bodies of Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia,
Finland, Former Yugoslav Republic of Macedonia, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United
Kingdom.
EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

Management Centre: Avenue Marnix 17, B-1000 Brussels
© 2013 CEN All rights of exploitation in any form and by any means reserved Ref. No. CEN/TS 16501:2013: E
worldwide for CEN national Members.

Contents Page
Foreword .3
Introduction .4
1 Scope .5
2 Normative references .5
3 Terms and definitions .5
4 Software Assurance Levels (SWAL) .6
4.1 General .6
4.2 Allocation .6
4.3 Likelihood assessment .6
4.4 Likelihood justification .6
5 SWAL Objectives per Process .6
5.1 General .6
5.2 Primary Life Cycle Processes .7
5.2.1 The Acquisition Process .7
5.2.2 The Supply Process .7
5.2.3 The Development Process .7
5.2.4 The Operation Process .7
5.2.5 The Maintenance Process .7
5.3 Supporting Life Cycle Processes .7
5.3.1 The Documentation Process .7
5.3.2 The Configuration Management Process .7
5.3.3 The Quality Assurance Process .7
5.3.4 The Verification Process .7
5.3.5 The Joint Review Process .7
5.3.6 The Audit Process .8
5.3.7 The Problem/Change Resolution Process .8
5.4 Organisational Life Cycle Processes.8
5.5 COTS processes .8
5.5.1 COTS planning process .8
5.5.2 COTS acquisition process .8
5.5.3 COTS verification process .8
5.5.4 COTS configuration management process .8
Bibliography .9

Foreword
This document (CEN/TS 16501:2013) has been prepared by Technical Committee CEN/TC 377 “Air Traffic
Management”, the secretariat of which is held by DIN.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
According to the CEN-CENELEC Internal Regulations, the national standards organisations of the following
countries are bound to announce this Technical Specification: Austria, Belgium, Bulgaria, Croatia, Cyprus,
Czech Republic, Denmark, Estonia, Finland, Former Yugoslav Republic of Macedonia, France, Germany,
Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland,
Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United Kingdom.

Introduction
The European Union launched the "Single European Sky" (SES) Legislation in 2002, which was adopted in
2004.
The SES legislation is based on a framework of 4 regulations, which includes the Interoperability Regulation
(EC 552/2004). The objective of the Interoperability Regulation is to ensure interoperability of the European
Air Traffic Management Network (EATMN) consistent with air navigation services.
An increasing proportion of functions of the EATMN are implemented by software and these functions are
becoming more safety-critical. It is therefore necessary to define guidance on how to standardise the
assurances that may be provided for software.

1 Scope
This Technical Specification specifies the technical, operational and maintenance requirements for Software
Assurance Levels to support the demonstration of compliance with some elements of the Essential
Requirements “Safety” and “Principles governing the constr
...