AMC2 SPA.EFB.100(b)(3) Use of electronic flight bags (EFBs) - Operational approval    

CAA ORS9 Decision No. 1

EFB POLICY AND PROCEDURES MANUAL

The operator should establish procedures, documented in an EFB policy and procedures manual, to ensure that no unauthorised changes take place. The EFB policy and procedures manual may be fully or partially integrated in the operations manual.

The EFB policy and procedures manual should also address means to ensure that the content and databases of the EFB are valid and up to date, in order to ensure the integrity of the EFB data. This may include establishing revision-control procedures so that flight crew members and others can ensure that the contents of the system are current and complete. These revision control procedures may be similar to the revision control procedures used for paper or other storage means.

The EFB policy and procedures manual should also clearly identify those parts of the EFB system that can be accessed and modified by the operator’s EFB administration process and those parts that are only accessible by the EFB system supplier.

For data that is subject to a revision cycle control process, it should be readily evident to the user which revision cycle has been incorporated in the information obtained from the system. Procedures should specify what action to take if the applications or databases loaded on the EFB are outdated. This manual should at least include the following:

(a) All EFB-related procedures, including:

(1) operating procedures;

(2) security procedures;

(3) maintenance procedures;

(4) software control procedures;

(b) Management of changes to content/databases;

(c) Notifications to crews of updates;

(d) If any applications use information that is specific to the aircraft type or tail number, guidance on how to ensure that the correct information is installed on each aircraft;

(e) Procedures to avoid corruption/errors when implementing changes to the EFB system; and

(f) In cases involving multiple EFBs in the flight crew compartment, procedures to ensure that they all have the same content/databases installed.

The EFB administrator should be responsible for the procedures and systems documented in the EFB policy and procedures manual that maintain EFB security and integrity. This includes system security, content security, access security, and protection against malicious software.