Training Packages
Learn from the expertise of DMD Solutions’ RAMS Academy experts
Half-Day Package
4 hours of TRAINING
1 training TOPIC
8 hours of CONSULTING
Up to 3 participants
3 months Robin Team Subscription
Full-Day Package
8 hours of TRAINING
2 training TOPICS
16 hours of CONSULTING
Up to 5 participants
3 months Robin Team Subscription
Two-Day Package
12 hours of TRAINING
3 training TOPICS
16 hours of CONSULTING
Up to 5 participants
6 months Robin Team Subscription
DMD Solutions’ RAMS Academy offers Training Packages on RAMS topics which include:
- RAMS online training with expert speakers and curated training material
- Access to Robin subscription at a reduced rate for a limited period
- Consulting credit for technical support in topic related RAMS analyses to be used on request
Training specific topics
MAIN OBJECTIVES
- Understand ARP4761 & ARP4754A for real-world applications
- Learn how to think like Certification Authorities
- Understand the most-used Safety Assessment Analysis Methods
- Maximize productivity and efficiency while complying with all the Certification Specifications
- Learn industry best practices
- Leverage the experience of 100+ successful concluded projects and +15,000 worked hours in the aerospace industry
RAMS Overview: ARP4761 & ARP4754 basics
The standard ARP4761 gives an accurate overview and description of the methods for performing the safety assessment for certification of civil aircraft. This document provides a systematic approach to most activities in the field of Reliability, Maintainability and Safety, serving as a backbone to structure a first introduction to RAMS analyses for the aerospace industry.
STRUCTURE
| 1 | Introduction | 45min |
| 2 | Certification Specifications & Acceptable Means of Compliance | 45min |
| 3 | Safety Assessment Process | 1h |
| 4 | Safety Analysis Methods | 1h 30min |
CONTENT
Relationship between ARP4761 & ARP4754A. Feedback from DO-178C and DO-254.
Certification Specifications & Acceptable Means of Compliance
Knowledge of the aerospace industry rules abided by EASA, FAA & ECSS. Required certification targets. Focus can be centred in alumni interests:
- CS-23, CS-25, CS-27, CS-29
- CS-LURS, CS-LUAS, SC-VTOL
- ECSS standards
Safety Assessment Process
Minimum required safety document involved in a Type Certificate or Supplemental Type Certificate: from FHA to SSA. Classification of Failure Conditions according to their severity.
Safety Analysis Methods
Initial overview, description and adequacy of the diverse safety analyses methods available: FTA, Markov Analysis, Dependence Diagram, FMEA, FMES, Zonal Safety Analysis, Particular Risk Analysis, and Common Mode Analysis
ACTIVITIES
ACTIVITY 1: Development of a Functional Hazard Assessment for an ATA 24 (Electrical) System*
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ARP4761: Guidelines and methods for conducting the Safety Assessment Process on Civil
airborne systems and equipment - ARP4754A: Guidelines for Development of Civil Aircraft and Systems
Auxiliary
- DO-178C: Software Considerations in Airborne Systems and Equipment Certification
- DO-254: Design Assurance Guidance for Airborne Electronic Hardware
MAIN OBJECTIVES
- In-depth and practical understanding of Safety Assessment Analysis Methods
- In-depth knowledge of FDAL and IDAL allocation technique
- Learn industry-best practices
- Leverage the experience of 100+ successful concluded projects and +15,000 worked hours in the aerospace industry
ARP4761 & ARP4754 Extended
In this extended course, the focus is placed more on a practical approach to develop the Safety Assessment Analysis Methods and implement the FDAL and IDAL allocation techniques. Several activities are prepared for this purpose.
STRUCTURE
| 1 | In-depth Safety Analysis Methods | 2h 30min |
| 2 | FDAL and IDAL allocation | 1h 30min |
CONTENT
In-depth Safety Analysis Methods
In-depth knowledge of the diverse safety analyses methods available: FTA, Markov Analysis, Dependence Diagram, FMEA, FMES, Zonal Safety Analysis, Particular Risk Analysis, and Common Mode Analysis
FDAL and IDAL allocation
Detailed methods (with practical example) to allocate FDAL/IDAL according to DO-254
ACTIVITIES
ACTIVITY 1: Development of an FTA/DD for an ATA 24 (Electrical) system*
ACTIVITY 2: Development of a typical Common Mode Analysis using the FTA produced in Activity 1*
ACTIVITY 3: Development of a typical Fire Particular Risk Assessment
ACTIVITY 4: FDAL/IDAL allocation using the FTA produced in Activity 1*
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ARP4761: Guidelines and methods for conducting the Safety Assessment Process on Civil
airborne systems and equipment - ARP4754A: Guidelines for Development of Civil Aircraft and Systems
Auxiliary
- DO-178C: Software Considerations in Airborne Systems and Equipment Certification
- DO-254: Design Assurance Guidance for Airborne Electronic Hardware
- NUREG-0492: Fault Tree Handbook
MAIN OBJECTIVES
- Master the gathering and application of safety engineering conclusions to design architecture for critical aerospace systems
- Thorough and practical understanding of the Safety substantiation activities linked to final
certification - In-depth understanding of certification entity expectations from Safety documents linked to the various phases of system design: from prototype to frozen design.
- Insights from industry experience (more than 20,000 hours in successful projects) to develop solid safety documentation
Safety Cycle (FHA, PSSA, SSA & ASA)
The safety cycle is composed, at least, by the main safety assessments: Functional Hazard Assessment (FHA), Preliminary System Safety Assessment (PSSA), and the System Safety Assessment (SSA) if the assessment is at system level, or Aircraft Safety Assessment (ASA) if the assessment is at aircraft level.
Certification entities expect from design companies in the aerospace industry a minute and thorough approach to safety assurance. There is flexibility in the type of analyses provided, but each decision must be justified to design specific requirements. Within this course, an experience-proven approach to safety substantiation is given, highlighting pitfalls to avoid and providing a solid timeline for safety activities following the main design milestones.
STRUCTURE
| 1 | Introduction | 1h |
| 2 | PSSA | 1h 30min |
| 3 | SSA / ASA | 1h 30min |
CONTENT
Introduction
Relationship between ARP4761 & ARP4754A. Feedback from DO-178C and DO-254.
PSSA
Definition of an industry proven Safety cycle, including methods and timeline. Overview of main documents contents & structure (FHA, PSSA, SSA & ASA).
Development of the Preliminary System Safety assessment. Analysing the failure conditions, define the safety requirements, and develop RMS contribution to the design. Common Cause analyses and strategies to solve Single Point of Failures.
SSA / ASA
Development of the System Safety assessment, Verify the safety requirements and build the compliance cross matrix.
ACTIVITIES
ACTIVITY 1: Development of the critical chapters of a Preliminary Systems Safety
Assessment for an ATA 24 (Electrical) System*.
Discussion of best iteration routes to refine the safety of the design
after preliminary analysis
ACTIVITY 2: Development of a System Safety Assessment of a modified ATA 24
(Electrical) System* according to conclusions from Activity 1.
Discussion of technical reporting aspects to gain solid safety assurance
and substantiation
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ARP4761: Guidelines and methods for conducting the Safety Assessment Process on Civil
airborne systems and equipment - ARP4754A: Guidelines for Development of Civil Aircraft and Systems
Auxiliary
- “Aircraft System Safety” – Duane Kritzinger – Woodhead Publishing, 2016
MAIN OBJECTIVES
- Goals of the FTA within the safety cycle and its relationship with other safety analyses
- Clarification of industry standard terms, symbology and usage in context
- Understand the different ways to calculate the Unavailability of the primary events and highlight the difference between dormancy and hidden events
- Evaluate the existing calculation algorithms for probability and their adequacy to system types
- Extract valuable conclusions for design teams from FTA
Fault Tree Analysis
The FTA is a top-down, deductive failure analysis in which an undesired state of a system is analysed using Boolean logic gates to combine a series of lower-level events. The basic events of the FTA are, usually, taken from the FMECA analysis of the system components. The FTA of each subsystem is associated with the rest of the component system of the whole aircraft.
STRUCTURE
| 1 | Introduction | 30min |
| 2 | Main definitions & symbology | 30min |
| 3 | Main objective & steps of FTA | 30min |
| 4 | FTA construction. Main nodes used in the FTA | 45min |
| 5 | Unavailability of the Primary Events. Types of calculation | 30min |
| 6 | Qualitative and quantitative analysis of FTA | 30min |
| 7 | Extract conclusions from FTA. Introduction to CMA. |
45min |
CONTENT
Introduction
Explain what is the FTA and what is the relationship with the other safety analyses like FMECA, FHA, SSA…
Main definitions & symbology
Definition of the main concepts of the FTA and the symbology used to develop the analysis.
Main objective & steps of FTA
Main objective the FTA and development of steps/process to build system’s FTAs. Structure of complex projects.
FTA construction. Main nodes used in the FTA
Learn how to develop an FTA with schematics and FMECA as inputs. In-depth knowledge about the different types of nodes used in this analysis. Pitfalls to avoid to effectively reproduce system failure behaviour.
Unavailability of the Primary Events. Types of calculation
Understand the different types of calculation of the unavailability. Obtain the unavailability from FR and MTBF. Understand the difference between dormancy and hidden events.
Qualitative and quantitative analysis of FTA.
Learn the qualitative analysis of the FTA, like the cut sets analysis, and the quantitative analyses.
Understand the two types of quantitative analysis:
- Exact method calculation
- MCS calculation
Extract conclusions from FTA. Introduction to CMA
Learn how to extract the main conclusions from the FTA. Identify Single Points of Failure (SPF) from the cut sets analysis.
Introduction to the Common Mode Analysis (CMA) and how to extract the information needed from the FTA.
ACTIVITIES
an already existing FMECA.
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- NUREG-0492: Fault Tree Handbook
- CIVE240: Fault Tree Analysis
MAIN OBJECTIVES
- Gain practical understanding of Hazards classification
- In-depth knowledge of FDAL and IDAL allocation technique
- Learn industry-best practices
- Leverage the experience of 100+ successful concluded projects and +15,000 worked hours in the aerospace industry
Hazard Log
A hazard log is a record keeping tool applied to tracking all hazard analysis, risk assessment and risk reduction activities for the whole-of-life of a safety-related system. The Hazard Log is a fundamental tool to track mitigations applied to life-cycle risk discoveries, from prototyping through the whole service until final disposal.
In this course, a methodical an organized approach is given to risk assessment for hazards to health, safety and the environment and a system for logging and tracking mitigations in order to generate a coherent, comprehensive database that works as a living tool to track safety improvements thorough the aerospace system’s life-cycle.
STRUCTURE
| 1 | Hazard Log: why, when and who? | 15min |
| 2 | Hazard Analysis | 1h |
| 3 | HAZOP | 45min |
| 4 | Hazard Log Database | 30min |
| 5 | Problematic Substances | 1h |
| 6 | HRI, Residual Risk and Risk Acceptance | 30min |
CONTENT
Introduction
Explain what is the FTA and what is the relationship with the other safety analyses like FMECA, FHA, SSA…
Hazard Log: why, when and who?
Hazard Log in the aerospace context. Evaluation of safety outcomes, compliance and measures of hazard control.
Hazard Analysis
A description of methods and techniques used to conduct the hazard analysis, including assumptions made, qualitative and quantitative data used, and means to provide traceability to the source data.
HAZOP
Identification of possible hazards in maintenance and operation processes. Effects of variation. Failure Points.
Hazard Log Database
Parametrization and classification of hazards. Understanding context and operations for a workable Hazard Log.
Problematic Substances
Rules & regulations applicable to problematic substances classification. Labelling and authorized usage.
HRI, Residual Risk and Risk Acceptance
Quantitative and qualitative criteria to define an acceptable level of risk.
ACTIVITIES
ACTIVITY 2: Classification, labelling and usage procedures for 3 example Problematic Substances
ACTIVITY 3: Classification and justification of acceptable level of residual risk using the HAZOP results produced in Activity 1*
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ECAST Guidance on Hazards Identification
- Regulation (EU) No 376/2014: Reporting, Analysis and Follow-up of Occurrences in Civil Aviation
- Regulation (EU) No 1321/2014: Continuing Airworthiness
- ICAO Safety Management Manual, Fourth Edition – 2018 (Doc 9859-AN/474)
MAIN OBJECTIVES
- Practical understanding of the REACH and RoHS regulatory framework
- Tools to classify products by types and materials and assign compliance actions required for each
- Learn industry best practices in regards to compliance and risks of non-compliance
- Leverage the value of on-hands experience of REACH and RoHS consulting within aerospace industry companies
REACH / ROHS
REACH and ROHS are European level regulations affecting the inclusion of Chemicals and Hazardous Substances in products manufactured, used or sold within the EU. In this course, an overview of the application of REACH and ROHS regulations is given, focusing on integrator companies intending to sell their products in Europe. The course draws the roadmap to build strong processes in aerospace systems companies to provide a turnkey compliant product for customers in the EU.
STRUCTURE
| 1 | Regulation overview | 15min |
| 2 | REACH: Registration, Evaluation, Authorisation and Restriction of Chemicals | 1h 30min |
| 3 | RoHS Directive: Restriction of Hazardous Substances in Electronical and Electrical Equipment | 30min |
| 4 | Obligations for Downstream Users and Distributers in the EU | 1h 45min |
CONTENT
Regulation overview
Overview of international regulations for all types of Hazardous Materials and Problematic Substances, including labelling, transport and usage. REACH and RoHS in context.
REACH: Registration, Evaluation, Authorisation and Restriction of Chemicals
Understand the different roles in the supply chain with regard to REACH compliance. Classification of substances according to REACH Registry. Annex XVII (Restricted List), Annex XIV (Authorisation List) & Candidate List. Tools for substance identification.
RoHS Directive: Restriction of Hazardous Substances in Electronical and Electrical Equipment Applicability to Electronics and Electronical Equipment.
Overview of Directive 2002/95/EC (RoHS 1) amended by 2011/65/EU (RoHS 2) & Directive 2015/863. RoHS and CE marking. Obligations of RoHS equipment suppliers.
Obligations for Downstream Users and Distributers in the EU
Obligations regarding documentation linked to articles, substances and mixtures. Storage and safe usage, risk exposure management. Penalties in case of non-compliance.
ACTIVITIES
ACTIVITY 1: Understand, classify and collect required data for a substance, a mixture, an article and a piece of electronic equipment.
ACTIVITY 2: Analysis of an aerospace system BOM: classify parts and assign compliance action for each.
BIBLIOGRAPHY
Basic
- Regulation (EC) No 1907/2006: Registration, Evaluation, Authorisation and Restriction of Chemicals
- Directive 2002/95/EC: Restriction of the use of certain hazardous substances in electrical and electronic equipment
- Directive 2011/65/EU: RoHS 2 recast
- Directive 2015/863: RoHS 3, addition of four restricted substances to RoHS 2
MAIN OBJECTIVES
- Understand FRACAS for real-world applications in the industry
- Clarify specific terms in reliability to avoid confusion with similar concepts
- Understand the value of a complete FRACAS process for the different actors of the aerospace industry
- Evaluate the effort of applying to FRACAS process to your particular case
FRACAS
FRACAS (Failure reporting, Analysis, and Corrective Action System) records the problems related to a product or process and their associated root causes and failure analyses to assist in identifying and implementing corrective actions.
To develop and implement a FRACAS is an essential requirement to get the Type Certificate. The manufacturer has to demonstrate to EASA (or FAA) that it has a fully implemented FRACAS to record all the defects related to the aircraft.
STRUCTURE
| 1 | Introduction | 30min |
| 2 | Main definitions | 30min |
| 3 | Main objective & Process of FRACAS | 1h |
| 4 | FRACAS Database | 30min |
| 5 | Reliability Assessment | 45min |
| 6 | Corrective Actions | 45min |
CONTENT
Introduction
What is FRACAS? The importance of FRACAS in the aeronautical sector and industry actors involved.
Main definitions
Definition of the main concepts in FRACAS:
- Sources of data: AMR / DIR / Failure report
- Distinction between reported anomalies: Malfunction, defect, failure, no fault found, etc.
- Reliability concepts: MTBF, MTBUR, MTBCF, PMTBF, GMTBF, MTTF
Main objective & Process of FRACAS
Goals and benefits of implementing a FRACAS. Insights derived of a FRACAS process for aerospace systems.
Overview of the complete process of FRACAS and the importance of each role in this process.
FRACAS Database
Hands-on development of the main fields that a FRACAS database should have in order to perform valuable analyses.
Reliability Assessment
Insights in a reliability assessment and organization of conceptual conclusions according to goals. Understanding of the results obtained.
Corrective Actions
Application and adequacy of corrective actions. Understand the importance of the corrective actions and how it could be beneficial to the aircraft manufacturer.
ACTIVITIES
ACTIVITY 1: Failure reporting: classification and data introduction of an AMR, a DIR and a field failure report to avoid data error
ACTIVITY 2: Development of a Reliability Assessment in Robin and extract main conclusions. Identification of CA impact in the MTBF parameter
BIBLIOGRAPHY
Basic
- MIL-STD-2155: Failure reporting, Analysis and Corrective Action taken
Auxiliary
- AIAA Standard: Performance-Based Failure Reporting, Analysis & Corrective Action System (FRACAS) Requirements
MAIN OBJECTIVES
- Understand the importance of reliability in the aerospace industry context and clarify Reliability Theory concepts
- Learn how to use different electronic and non-electronic predictions standards
- Learn industry best practices related to reliability data assumptions for both new designs and system modifications
- Leverage the experience of 100+ successful concluded projects and +15,000 worked hours in the aerospace industry
RPA
Reliability is a primary key for high operational readiness and has a significant impact on mission success of any equipment. It is defined as the probability of a system to remain failure free during a specified interval. A Reliability Prediction Analysis can be performed following rules from standards or by using historical data.
STRUCTURE
| 1 | Introduction to Reliability | 15min |
| 2 | Reliability Modelling and Prediction theorical concepts | 1h |
| 3 | Overview of the available Prediction Standards | 30min |
| 4 | Prediction calculations | 1h 15min |
| 5 | Reliability Historical data | 15min |
| 6 | Reliability Prediction Analysis | 45min |
CONTENT
Introduction to Reliability
Importance of reliability and historical evolution. Reliability for aerospace.
Reliability Modelling and Prediction theorical concepts
General procedure for prediction calculations. Basic mathematical models and reliability modelling. Methodologies such as Reliability Block Diagrams, Failure Distributions, Environmental Data and Mathematical/Simulation models will be discussed.
Overview of the available Prediction Standards
Overview, applicability and scope of the different available Reliability Prediction Standards.
Prediction calculations
Calculation methodology for the following standards:
- MIL-HDBK-217F (Including specific topics related to environment and temperature dependence)
- ANSI-VITA specification application
- RIAC-HDBK-217Plus
- FIDES 2009 (Including specific topics related to the standard as definition of mission phases, computation of Pi factors or phase dependant parameters importance)
- NSWC-11 for non-electronic parts.
For each standard, component categorization and scope are discussed.
Reliability Historical data
Overview and applicability of the NPRD2016 and EPRD2014 databases.
Reliability Prediction Analysis
Evaluation of reliability requirements in design specifications. Sections and methodology for conducting an RPA. Interpretation of results and detection of possible flaws in the design.
ACTIVITIES
ACTIVITY 1: Perform prediction calculations for each discussed standard (MIL-HDBK-217F, RIAC-HDBK-217Plus, FIDES2009 and NSWC-11) with the aid of Robin RPA
ACTIVITY 2: Perform a complete Reliability Prediction Analysis for a Simple Electronic System* using Robin RPA
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- MIL-HDBK-217F: Reliability Prediction of Electronic Equipment
- ANSI-VITA: American National Standard for Reliability Prediction MIL-HDBK-217 Subsidiary Specification.
- RIAC-HDBK-217Plus: Handbook of 217Plus™ Reliability Prediction Models
- FIDES 2009: FIDES guide 2009 Reliability Methodology for Electronic Systems
- NSWC-11: Handbook of Reliability Prediction Procedures for Mechanical Equipment
- MIL-HDBK-338B: Electronic Reliability Design Handbook
Auxiliary
- “Case Studies in Reliability and Maintenance” – Wallace R. Blischked & N. Prabhakar Murthy – Wiley Interscience
- Alessandro Birolini, “Reliability Engineering: Theory and Practice”, Eight Edition
MAIN OBJECTIVES
- Get an overview of the benefits of Reliability Centred Maintenance methodologies for the life-cycle cost, efficiency and availability of aerospace systems
- Learn how to use the standard methodologies applied to Maintenance Significant Items to define a preventive maintenance program for an aerospace product
- Understand the relevance of Zonal Analysis Procedure to group and schedule maintenance tasks
- Leverage the experience of 100+ successful concluded projects and +15,000 worked hours in the aerospace industry
MSG-3 / RCM
The objective of the MSG-3 is to present means for developing the scheduled maintenance tasks and intervals which need to be acceptable to the authorities. MSG-3 is of great utility for determining scheduled maintenance requirements during the life of the aircraft, component or aerospace system.
There are mainly four types of scheduled maintenance according to the MSG-3 document:
- Aircraft Systems/Powerplant (MSI) Analyses: The MSIs are identified and the analyses are usually grouped by ATA chapters. The objective of this analysis is to define scheduled maintenance task for the MSI.
- Zonal Analyses: It requires an analysis of each zone on the aircraft. These analyses enable appropriate attention to electrical wiring, plumbing or ducting installations.
- L/HIRF Analyses: These analyses try to reduce the possibility of a single failure cause (e.g. lighting strike) or a common failure cause.
STRUCTURE
| 1 | MSG-3 / RCM | 30min |
| 2 | MSI Analysis | 1h 30min |
| 3 | Zonal Analysis Procedure | 1h 30min |
| 4 | L/HIRF Analysis | 30min |
CONTENT
MSG-3/RCM
Brief introduction to RCM and MSG-3 methodologies.
MSI Analysis
In-depth knowledge of the MSI Analysis process. Identification of the MSI and the further analysis. Definition of the failure modes.
Zonal Analysis
Procedure Detailed process explanation of the Zonal Analysis.
L/HIRF Analysis
Theorical overview of L/HIRF Analysis.
ACTIVITIES
ACTIVITY 1: Development of an MSI Analysis for an ATA 27 (Flight Control) system*
ACTIVITY 2: Development of a Zonal Analysis Procedure for an ATA 32 (Landing Gear) system*
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ATA MSG-3: Operator/Manufacturer Scheduled Maintenance Development
Auxiliary
- “Case Studies in Reliability and Maintenance” – Wallace R. Blischked & N. Prabhakar Murthy – Wiley Interscience
MAIN OBJECTIVES
- Understand the philosophy behind the different FMECA approaches (functional and piece-part).
- Learn the link between Reliability Prediction Analysis (RPA), FMECA, and Fault Tree Analysis (FTA).
- Understand how to improve the reliability of your designs by focusing the effort on mitigating the most probable failure modes.
- Learn by doing. By providing real examples and adopted solutions to problems in the past.
- Understand which inputs are necessary to correctly develop an FMECA analysis.
FMEA / FMECA
The FMECA is a bottom-up analysis performed on an item, system or function with the aim to identify their potential failure modes and the effects on the next higher level. It might be conducted at several levels, e.g. piece-part FMECA, functional FMECA.
FMECA is the foundation of system analysis for the RAMS discipline and the fundamental input for the Fault Tree Analyses. The aim of this course is to set the knowledge for a successful implementation of FMECA for aerospace systems that allows a practical continuation of the related RAMS analyses. Consistent definition of failure modes is essential to safety analyses. Criticality definition is crucial for FHA. Detectability and means of detection are the first step towards design for availability.
STRUCTURE
| 1 | Introduction | 30min |
| 2 | FMECA | 1h 45min |
| 3 | Detection Coverage | 45min |
| 4 | FMES & Candidate Critical Item List | 30min |
| 5 | Recommendations and safety requirements | 30min |
CONTENT
Introduction
Basic concepts and definitions of the FMECA analysis
FMECA
Methodology and recommendations for each FMECA field (e.g. Local Effect, Next Effect, End Effect…). Real examples of different types of FMEA
- Functional vs piece-part FMECA
- Qualitative vs Quantitative FMECA
- Structural vs LRU FMECA
- Data source for failure rate
- Failure modes distribution
Detection Coverage
Definition of the different types of detection (PBIT, CBIT, IBIT, maintenance, pilot…). Computation of the detection coverage according to the phases and effects of each Failure Mode. Acceptable detection requirements for the aerospace industry. Calculation of false alarm ratios.
FMES & Candidate Critical Item List
FMES obtention after FMECA completion. Analysis of the most critical end effects and most influencing items and failure modes. Candidate Critical Item List. How to draw conclusions from an FMECA
Recommendations and safety requirements
Recommendations for system engineers derived from the FMECA (e.g. fail-safe demonstration, dual check reuqired, critical characteristic investigation). Safety requirements.Final tips to perform a good FMECA. Detection of possible flaws
ACTIVITIES
ACTIVITY 1: Development of a complete FMECA analysis for an ATA 24 (Electrical) system* in Robin FMECA
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ARP4761: Guidelines and methods for conducting the Safety Assessment Process on Civil airborne systems and equipmen
- FMD-2016: Failure Mode Mechanisms Distribution, Quanterion
Auxiliary
- Guidelines for Failure Mode and Effects Analysis for Automotive, Aerospace and General Manufacturing Industries, Dyadem Press. ISBN: 0849319080
- Product Excellence Using Six Sigma. Failure Modes, Effects & Criticality Analysis. Warwink Manufacturing Group
MAIN OBJECTIVES
- Understand the increasing importance of Aircraft Cybersecurity
- Learn how to perform a Security Risk Assessment
- Conduct Security Verifications
- Learn industry best practices
- Leverage the experience of 100+ successful concluded projects and +15,000 worked hours in the aerospace industry
Cybersecurity
Aircraft systems and parts are increasingly connected and, hence, susceptible to security threats. The purpose of Aircraft Cybersecurity analyses is to mitigate the safety effects caused by potential cybersecurity threats and handle the threat of intentional unauthorized electronic interaction to aircraft safety. This training also considers the interdependencies between Safety and Security.
STRUCTURE
| 1 | History of Cybersecurity | 15min |
| 2 | Applicable and related regulation | 45min |
| 3 | Development Process | 15min |
| 4 | Security Risk Assessment | 2h |
| 5 | Security Verification and Continued Airworthiness | 45min |
CONTENT
History of Cybersecurity
Background explaining the beginning and evolution of Airworthiness Cybersecurity, specially centred in EASA
Applicable and related regulation
Amendments performed in Certification Specifications by EASA & FAA. Requirements specified by DO-178C
Development Process
Steps and processes to follow to comply with ED-202 standard. Interdependencies between Safety and Security
Security Risk Assessment
Sections and methodology for performing a SRA. Numerical evaluation of level threat according ED-203A
Security Verification and Continued Airworthiness
Security, Robustness and Vulnerability Tests. Cybersecurity in Continued Airworthiness according to ED-204.
ACTIVITIES
ACTIVITY 1: Perform a Security Risk Assessment for a WiFi equipment*
*The example system can be adapted to students’ industry and requirements on previous request
BIBLIOGRAPHY
Basic
- ED-202A: Airworthiness Security Process Specification
- ED-203A: Airworthiness Security Methods and Considerations
- ED-204: Information Security Guidance for Continuing Airworthiness
Auxiliary
- DO-178C: Software Considerations in Airborne Systems and Equipment Certification
Contact Us
Carrer d'Àlaba 140, 5-3, Barcelona 08018, Spain
(+34) 633 259 805
(+41) 78 943 14 34