Page 56 - UK ADR Aerodrome Regulations (Consolidated) October 2021

Part OR - ANNEX III - Aerodrome Operators

(6) monitoring of implementation and effectiveness of safety actions, and risk mitigation
measures;
(7) safety performance monitoring;
(8) safety reporting (including hazard reporting) and investigation;
(9) coordination of emergency response planning;
(10) management of change (including organisational changes with regard to safety
responsibilities);
(11) safety promotion; and
(12) safety management system outputs.
ADR.OR.D.005(c) GM1 Management system
AERODROME OPERATOR MANAGEMENT SYSTEM DOCUMENTATION
It is not required to duplicate information in several manuals. The Safety Management Manual is
considered to be a part of the aerodrome manual.
ADR.OR.D.007 Management of aeronautical data and aeronautical information
(a) As part of its management system, the aerodrome operator shall implement and maintain
a quality management system covering the following activities:
(1) its aeronautical data activities;
(2) its aeronautical information provision activities.
(b) The aerodrome operator shall, as part of its management system, establish a security
management system to ensure the security of operational data it receives, or produces, or
otherwise employs, so that access to that operational data is restricted only to those
authorised.
(c) The security management system of the aerodrome operator shall define the following
elements:
(1) the procedures relating to data security risk assessment and mitigation, security
monitoring and improvement, security reviews and lesson dissemination;
(2) the means designed to detect security breaches and to alert personnel with
appropriate security warnings;
(3) the means of controlling the effects of security breaches and of identifying recovery
action and mitigation procedures to prevent reoccurrence.
(d) The aerodrome operator shall ensure the security clearance of its personnel with respect
to aeronautical data security.
(e) The aerodrome operator shall take the necessary measures to protect its aeronautical
data against cyber security threats.
ADR.OR.D.007(a) AMC1 Management of aeronautical data and aeronautical information
QUALITY MANAGEMENT SYSTEM FOR AERONAUTICAL DATA AND AERONAUTICAL
INFORMATION PROVISION ACTIVITIES
(a) A quality management system supporting the origination, production, storage, handling,
processing, transfer, and distribution of aeronautical data and aeronautical information
should:
(1) define the quality policy in such a way as to meet the needs of different users as
closely as possible;
(2) set up a quality assurance programme that contains procedures designed to verify
that all operations are being conducted in accordance with the applicable
requirements, standards and procedures, including the relevant requirements of
Part-ADR.OPS;
(3) provide evidence of the functioning of the quality system by means of manuals and
monitoring documents;
(4) appoint management representatives to monitor compliance with, and adequacy of,
procedures to ensure safe and efficient operational practices; and
(5) perform reviews of the quality system in place, and take remedial actions, as
appropriate.
(b) An EN ISO 9001 certificate, issued by an appropriately accredited organisation, is
considered as an Acceptable Means of Compliance.
ADR.OR.D.007(a) GM1 Management of aeronautical data and aeronautical information
QUALITY MANAGEMENT SYSTEM FOR AERONAUTICAL DATA AND AERONAUTICAL
INFORMATION PROVISION ACTIVITIES
An aerodrome operator does not need to duplicate functions and activities in order to discharge the
responsibilities related to the management of aeronautical data and aeronautical information provision
activities.
In this respect, the compliance monitoring may be used for the purposes of ensuring compliance with
the relevant requirements for management of aeronautical data and aeronautical information provision
activities.
ADR.OR.D.007(b) AMC1 Management of aeronautical data and aeronautical information
SECURITY MANAGEMENT FOR AERONAUTICAL DATA AND AERONAUTICAL INFORMATION
PROVISION ACTIVITIES
(a) The security management objectives should be:
(1) to ensure the security of aeronautical data and aeronautical information received,
produced, or otherwise employed so that it is protected from interference, and
access to it is restricted only to those authorised; and
28th October 2021 56 of 144