Final - EFB - Manual 9 12 2021
Final - EFB - Manual 9 12 2021
Published by
Preface
As a government authority, DCA must ensure that the decisions we make and the processes by which
we make them, are effective, efficient, fair, timely, transparent, properly documented and otherwise
comply with the requirements of the law. At the same time, we are committed to ensuring that all of
our actions are consistent with the requirements.
A thorough knowledge of the relevant civil aviation requirements, adherence to the procedures
described in this manual will help to guide and inform the decisions you make, with a view to better
ensuring the achievement of optimal outcomes in the interest of safety.
~
~Soe
Director General (Acting)
Department of Civil Aviation
Revision History
The table below is provided as a reference to highlight when a major changes were made to the content
of this manual. It does not cover editorial changes. Amendments/ revisions of this manual are recorded
below in order of most recent first.
Table of contents
Preface
3
Revision History
4
Introduction
7
Glossary
8
Definitions
9
Chapter 1 Equipment and Hardware Considerations
11
1.1 Types of EFBs
11
1.2 Hardware considerations for installed resources and mounting devices
11
1.3 Hardware considerations for portable EFBs 12
3.1 General 20
3.4 Reporting 21
5.1 General 23
6.1 General 24
Introduction
This purpose of this manual is to provide the DCA staff and air operators with standard
procedures and guidelines for processing an application and approval of Electronic Flight
Bags. By adhering to the work steps outlined in this manual, a standard approach consistent
with regulatory requirements will be created and maintained when applying and approving
Electronic Flight Bags.
This manual is based on the following document:
1. ICAO Doc.10020- Manual on Electronic Flight Bags.
2. CAAS AC 98-7-1
3. FAA- Flight Standards Information Management System-8900.1, Volume 4, Chapter-
15
Air Operators are encouraged to use the EFB system as a source of information and this
manual does not address EFB airworthiness issues.
Glossary
Definitions
Aircraft interface device (AID). A device or function that provides an interface between
the EFBs and other aircraft systems which protects the aircraft systems and related functions
from the undesired effects from non-certified equipment and related functions.
Critical phases of flight. The period of high workload on the flight deck, normally being
the periods between the beginning of taxiing until the aircraft is on the route climb phase
and between the final part of descent to aircraft parking.
EFB software application. Software hosted on an EFB platform, providing one or more
EFB functions.
EFB management. Contains all procedures related to the operator’s EFB management
system as listed in the section
“EFB management”.
Independent EFB platforms. Multiple EFB platforms that are designed such that no
single failure makes all of them unavailable.
Transmitting PED. A PED that contains an intentional transmitter, which has some or all
of the device’s radio frequency transmitting functions turned on. Intentional transmitters
may include devices enabled with cellular technology, wireless radio frequency network
devices, and other wireless-enabled devices such as remote control equipment (which may
include toys), two-way radios, cellular/mobile/smart phones and satellite phones.
Chapter 1
1.2.2.2 Certified aircraft systems should be protected from adverse effects of EFB system
failures by using a certified AID. An AID may be implemented as a dedicated device, eg. as
defined in ARINC 759, or it may be implemented in non-dedicated devices, such as an EFB
docking station, a network file server or other avionics equipment.
1.3.2 Readability
The EFB data should be legible under the full range of lighting conditions expected on the
flight deck, including direct sunlight.
1.3.3 Environmental
The EFB has to be operable within the foreseeable cockpit operating conditions including
probable high/low temperatures, and after rapid depressurization if the EFB is intended for
use in such an event.
1.3.4.2 As previously noted, portable EFBs are considered to be PEDs. As such, any reference
to PEDs in this section is also applicable to portable EFBs.
1.3.4.3 To operate a portable EFB during flight, the user/operator is responsible for ensuring
that a portable EFB will not interfere in any way with the operation of aircraft equipment.
The following methods can be used to test portable EFBs that are to remain powered
(including being in standby mode) throughout the flight, in order to ensure that they will not
electromagnetically interfere with the operation of aircraft equipment.
1.3.4.4 Method 1
a) Step 1 is an electromagnetic interference (EMI) test using RTCA/DO-160,
Section 21, Category M. An EFB vendor or other source can conduct this test
for an EFB user/operator. An evaluation of the results of the RTCA/DO-160
EMI test can be used to determine if an adequate margin exists between the
EMI emitted by the EFB and the interference susceptibility threshold of
aircraft equipment. If this step determines that adequate margins exist for all
interference, then the test is complete. However, if this step identifies
inadequate margins for interference, then step 2 testing must be conducted.
b) Step 2 testing is a complete test in each aircraft using standard industry
practices. This should be done to the extent normally considered acceptable
for non-interference testing of a portable EFB in an aircraft for all phases of
flight. Credit may be given to other aircraft of the same make and model
equipped with the same avionics as the one tested.
1.3.4.5 Method 2
As an alternative, Step 2 of Method 1 can be used directly to determine non-interference of
the EFB.
aircraft equipment in any way. The following is an accepted method to test portable EFBs
and PEDs that are to remain powered (including being in standby mode) during flight.
1.3.6.2 If an operator intends to solely use battery power for the EFB or in the instance of a
power source failure; the EFB discharge rates, battery conservation techniques and
minimum EFB charge rates for dispatch should be documented.
1.3.6.3 If the EFB hosts functions essential to safe operation of flight, one of the following
must be available before a flight departs:
a) an established procedure to recharge the battery from aircraft power during
flight operations.
b) a battery or batteries with a combined useful battery life to ensure
operational availability during taxi and flight operations to include
diversions and reasonable delays considering duration of flight.
1.3.6.4 Connection of EFB power provisions to a non-essential, or to the least critical power
bus, is recommended, so failure or malfunction of the EFB, or power supply, will not affect
safe operation of aircraft critical or essential systems.
1.3.6.5 The power source needs to be suitable for the device. It may be a dedicated power
source or a general purpose source already fitted.
1.3.6.6 Means to turn off the power source, other than a circuit breaker, should be reachable
by the pilot when strapped in the normal seated position (e g. access to unplug the EFB or a
separate hardware or software switch clearly labelled for the power source).
1.3.7 Batteries
1.3.7.1 The operator shall ensure that the batteries are compliant with the applicable
Standards for use in an aircraft.
1.3.7.2 The standards referred to in the following subparagraphs are currently accepted
editions:
a) United Nations (UN) Transportation Regulations. UNST/SG/AC.10/11/Rev.5,
Recommendations on the Transport of Dangerous Goods-Manual of Tests
and Criteria.
b) Underwriters Laboratory (UL). UL 1642, Lithium Batteries; UL 2054,
Household and Commercial Batteries; and UL 60950-1,3 Information
Technology Equipment - Safety.
NOTE: Compliance with UL 2054 indicates compliance with UL 1642.
c) International Electrotechnical Commission (IEC). International Standard IEC
62133, Secondary cells and batteries containing alkaline or other non-acid
electrolytes – Safety requirements for portable sealed secondary cells, and for
batteries made from them, for use in portable applications.
d) RTCA/DO-311, Minimum Operational Performance Standards for
Rechargeable Lithium Battery Systems.
1.3.7.4 The operator should consider introducing procedures to handle thermal runaways or
similar battery malfunctions potentially caused by EFB batteries (e.g. lithium-based
batteries). At least the following issues should be addressed:
a) risk of leakage;
b) safe storage of spares including the potential for short circuit; and
c) hazards due to on-board continuous charging of the device, including battery
overheat.
1.3.8 Cabling
The operator shall ensure that any cabling attached to the EFB, whether in the dedicated
mounting or when handheld, does not present an operational or safety hazard. This may
achieved using cable tether straps/ clips.
1.3.13 Storage
1.3.13.1 All handheld EFBs not secured on the flight crew (e.g. kneeboard) or into an existing
aircraft part (e.g. suction cups) need to be stowed during critical phases of flight to ensure
the safety of the occupants of the flight deck. Stowage needs to be configured such that the
EFB can be easily stowed securely but remain readily accessible in-flight. The method of
stowage should not cause any hazard during aircraft operations.
Viewable stowage
1.3.13.2 A portable EFB (not mounted in a mounting device) may be used during all phases
of flight provided that it is secured on the flight crew or into an existing aircraft part with the
intended function to hold acceptable light mass portable devices viewable to the pilot’s
required duty station. This viewable stowage device is not necessarily part of the certified
aircraft configuration. Its location should be documented in the EFB policy and procedures
manual.
1.3.13.3 Some types of viewable stowage securing means may have characteristics that
degrade appreciably with age or because of various environmental factors. In that case, it
should be ensured that the stowage characteristics remain within acceptable limits for the
proposed operations. Securing means based on vacuum (e.g. suction cups) which have a
holding capacity that decreases with pressure. It should be demonstrated that they will still
perform their intended function at operating cabin altitudes.
1.3.13.4 Viewable stowage solutions must not interfere with flight control movement,
obstruct visual or physical access to controls and/or displays, or obstruct flight crew member
ingress or egress. Viewable stowage should minimise blockage of the windshields to allow
the pilots to maintain a clear view of critical outside references (e.g., during ground
operations, taxiing, takeoff, approach, and landing). Training and procedures must address
specific and acceptable placement of viewable stowage devices.
1.3.13.5 Regardless of whether an EFB is secured using either a certified mounting device or
viewable stowage, the following guidance should be considered:
a) There must be no interference with flight control movement, obstruction to
visual or physical access to controls and/or displays or obstruct flight crew
member ingress or egress.
b) The pilot should have easy access to the EFB controls and a clear
unobstructed view of the EFB when strapped in the normal seated position.
The effects of glare and/or reflections should be minimised. This may be
Chapter 2
Human Factors
The operator shall carry out an assessment of the human-machine interface and aspects
governing crew coordination when using the EFB. Whenever possible, the EFB user-
interface philosophy should be consistent (but not necessarily identical) with the flight-deck
design philosophy. The review of the complete system should include, but is not limited to,
the following:
a) general considerations including workload, usability, integration of the EFB
into the flight deck, display and lighting issues, system shutdown and system
failures;
b) physical placement issues, including stowage area, use of unsecured EFBs,
design and placement of mounting devices;
c) considerations for interference with anthropometric constraints, cockpit
ventilation and speaker sound;
d) training and procedure considerations, including training on using EFB
applications, the EFB policy and procedures manual, fidelity of the EFB
training devices and mechanisms for gathering user feedback on EFB use;
e) hardware considerations — refer to Chapter 1; and
f) software considerations — refer to Chapter 6.
Chapter 3
Crew Operating Procedures
3.1 General
3.1.1 The operator shall have procedures for using the EFB in conjunction with the other
flight-deck equipment.
3.1.3 If normal operational procedures require an EFB for each flight-deck crew member,
the set-up should comply with the definition of independent EFB platforms.
3.1.4 Operators shall include the requirements for EFB availability in the operations
manual, as part of the minimum equipment list, or both.
3.2.2 Flight crews should not, however, have to confirm the revision dates for databases
that would not, in case of outdated data, adversely affect flight operations. Procedures
should specify what actions to take if the software applications or databases loaded on the
EFB are out of date.
3.3.2 Workload should be distributed among flight crew members to ensure ease of use
and continued monitoring of other flight crew functions and aircraft equipment. The
procedures should include specification of the phases of flight at which the flight crew may
not use the EFB, if applicable.
3.4 Reporting
A reporting system for EFB failures should be established. Procedures should be put in place
to inform maintenance and flight crews about a fault or failure of the EFB, including actions
to isolate it until corrective action is taken.
Chapter 4
Flight Crew Training
The use of the EFB should be conditional on appropriate training. Training should be in
accordance with the operator’s SOP (including abnormal procedures) and should include the
following:
a) overview of the system architecture;
b) preflight checks of the system;
c) limitations of the system;
d) use of each operational software application;
e) restrictions on the use of the system, including when some or all of the EFB
functions are not available;
f) conditions (including phases of flight) under which the EFB may not be used;
g) procedures for cross-checking data entry and computed information;
h) human performance considerations on the use of the EFB;
i) additional training for new applications, new features of current applications
or changes to the hardware configuration;
j) recurrent training and proficiency checks; and
k) any area of special emphasis raised during the EFB evaluation with the DCA.
Chapter 5
EFB Risk Assessment
5.1 General
5.1.1 The EFB risk assessment is a process that should be performed to assess the risks
associated with the use of each EFB function and should allow the operator to keep the risks
to an acceptable level by defining the appropriate mitigation means.
5.1.2 This risk assessment should be performed before the beginning of the approval
process (if applicable), and its results should be reviewed on a periodic basis.
5.1.3 The guidance on safety risk assessment is contained in the Safety Management
Manual (SMM) (Doc 9859).
5.2.2 If normal operational procedures require an EFB for each flight deck crew member,
the installation shall comply with the definition of independent EFB platforms.
5.2.3 Apart from procedures to inform maintenance and flight crews about a fault or
failure of the EFB and the actions taken to isolate it until corrective action is taken, back-up
procedures shall also be in place to prevent the use of erroneous information by flight crews.
Chapter 6
EFB Functions
6.1 General
6.1.1 Use of multiple software applications in an EFB is allowable.
6.1.4 The following are the guidance / criteria established by DCA for the operational use
of EFBs that:
a) the EFB equipment and its associated installation hardware, including
interaction with aircraft systems as applicable, meet the DCA Airworthiness
Certification requirements;
b) the operator/owner has assessed the safety risks associated with the
operations with support by the EFB function(s);
c) the operator/owner has established requirements for redundancy of the
information, as appropriate, contained in and displayed by the EFB functions;
d) the operator/owner has established and documented procedures for the
management of the EFB function(s) including any database it may use;
e) the operator/owner has established and documented the procedures for the
use of, and training requirements for, the EFB and the EFB function(s).
6.1.6 EFB functions whose failure, malfunction or misuse would have an adverse effect on
the safety of flight operations (e.g. increased in-flight crew workload during critical phases of
flight, reduction in functional capabilities or safety margins, etc.) are essential to the safe
operation of flight should be recorded in the operations manual and linked to the
operations specifications.
6.1.7 Those functions should be recorded in the operations manual and linked to the
operations specifications as proposed in Appendix-E (for commercial air transport).
6.1.8 The list below may be considered examples of applications providing such functions,
depending on their use, associated procedures, and failure mitigation means:
6.1.9 On the contrary, the following features are not EFB functions and, unless certified as
avionics functions, should not be hosted on an EFB:
a) displaying information that may be tactically used by the flight crew members
to check, control or deduce the aircraft position or trajectory, either to follow
the intended navigation route or to avoid adverse meteorological conditions,
obstacles or other traffic, in-flight or on ground;
b) displaying information that may be directly used by the flight crew to assess
the real-time status of aircraft critical and essential systems, as a replacement
for existing installed avionics, and/or to manage aircraft critical and essential
systems following failure;
c) communicating with air traffic control;
d) sending data to aircraft systems not certified for this intended purpose; and
e) any other function determined by the DCA to require airworthiness
certification.
6.1.10 The display of own-ship position, in-flight, for strategic use is not universally
accepted by State authorities and not specifically covered in this manual. If an
operator elects to implement the display of own-ship position, in-flight, on an EFB
application, the following risks should be addressed and properly mitigated:
a) use of hazardously misleading information (in particular in case of erroneous
position or frozen display);
b) misuse of the information for short-term piloting, e.g. for track monitoring
purposes (see 6.1.9, a);
c) excessive fixation on EFB information and excessive head-in time; and
6.1.11 Possible effects of improperly mitigated risks include an increase in workload and a
decrease in situation awareness. In some cases, crews might unknowingly build an over-
reliance on this uncertified, yet compelling information.
6.2.1.5 Data-entry and error messages. If user-entered data are not of the correct
format or type needed by the application, the EFB should not accept the data. An error
message should be provided that communicates which entry is suspect and specifies what
type of data are expected.
6.2.1.6 Responsiveness of application. The system should provide feedback to the user
when user input is accepted. If the system is busy with internal tasks that preclude
immediate processing of user input (e.g. calculations, self-test, or data refresh), the EFB
should display a “system busy” indicator (e.g. clock icon) to inform the user that the system
is occupied and cannot process inputs immediately. The timeliness of system response to
user input should be consistent with an application’s intended function.
6.2.1.7 Off-screen text and content. If the document segment is not visible in its
entirety in the available display area, such as during “zoom” or “pan” operations, the
existence of off-screen content should be clearly indicated in a consistent way. For some
intended functions, it may be unacceptable if off-screen content is not indicated. This should
be evaluated based on the application and intended operational function.
6.2.1.8 Software developers and operators are encouraged to evaluate the usability of an
existing HMI before developing a new HMI themselves. It is also recommended that the
HMI be reviewed after some time of operation in the everyday environment for
unforeseeable common human errors, with special regard to the specific-use case of the
operator, which require changes or enhancement of the given design.
6.3 Considerations for EFB applications to be used for the safe operation of
aircraft
6.3.1 EFB Management
6.3.1.1 The operator shall have an EFB management system in place. The role of an EFB
administrator is a key factor in the management of the EFB system. Complex EFB systems
may require more than one individual to support the EFB management system. However, at
least one person (e.g. the EFB administrator, dedicated EFB manager, OPS director, etc.)
should possess an overview of the complete EFB system, including the distribution of
responsibilities within the operator’s management structure. This role and accountability
can be by delegations and by establishing procedures to ensure compliance
6.3.1.2 The EFB administrator is the key link between the operator and the EFB system and
software suppliers.
6.3.1.4 EFB management should be responsible for the procedures and systems,
documented in the EFB policy and procedures manual that maintain EFB security and
integrity. The required level of EFB security depends on the criticality of the used
applications.
Chapter 7
Operational Evaluation Process
7.1.2 The operational evaluation process below is designed to lead to specific operational
approval and consists of the following phases of actions. Appendix-B,C & D provide a
sample checklist of evaluation items.
procedures. Operations inspectors shall utilize the checklist (Appendix-B) to validate the
operator’s initial EFB program application and the checklist (Appendix-G) for a review of the
operator’s EFB policy and procedures manual.
7.4.2 Where an operator seeks to start operations with a new EFB system, the DCA should
participate in either the simulator evaluation or flight evaluation of an EFB. Additional
simulator or flight evaluations are not required for adding a new EFB to an existing approval
unless there is a substantial change in EFB-intended functions. When a new aircraft is added
to an existing EFB approval, the suitability of the EFB for that aircraft must be addressed.
The DCA should examine the technical content and quality of the proposed EFB programme
and other supporting documents and procedures.
7.5.2 During this phase, Operations Inspectors shall utilize the checklists (Appendix-C and
D) to observe and verify the operator’s ability to manage an EFB program and conduct flight
operations in a planned demonstration period. Where an operator seeks to start operations
with a new EFB system, Operations Inspectors should participate in either the simulator
evaluation or flight evaluation of an EFB. Additional simulator or flight evaluations are not
required for adding a new EFB to an existing approval unless there is a substantial change in
EFB-intended functions. When a new aircraft is added to an existing EFB approval, the
suitability of the EFB for that aircraft must be addressed.
7.5.3 An operator who is approved to operate EFB without paper backup shall have
adequate mitigations means in place to access the information in case of EFB failures.
7.6.2 The Operations Specifications entry will include references to the operator’s
Operations Manual where more details of the approved EFB applications are document.
Chapter 8
EFB use in General Aviation Operations with Helicopters or other than
Large or Turbo Aeroplanes
Note.— This material relates to the provisions in Annex 6, Part II, Section 2 (excluding
Section 3), MCAR Part-12 and MCAR Part-14.
8.1.2 The operator shall follow the provisions of 1.3 of this manual when using a portable
EFB.
8.5.2 When using an aeronautical chart, performance calculation, mass and balance or in-
flight weather application, or an airport moving map display (AMM), the following
considerations should be taken into account by the pilot:
a) Aeronautical chart application. The aeronautical charts that are depicted
should contain the information necessary, in appropriate form, to conduct the
flight safely. Consideration should be given to the size and resolution of the
display to ensure legibility.
b) Performance calculation and mass and balance (M&B) application. Prior to
the first use of a performance or M&B application and following any update of
the database supporting the application, the operator should obtain assurance
that the output of the application corresponds with the data derived from the
AFM (or other appropriate sources).
c) Airport moving map application. An AMM application should not be used
as a primary means of navigation for taxi; outside references remain primary.
d) In-flight weather application. The displayed meteorological information may
be forecast, observed, or both and may be updated on the ground or in-flight.
It should be based on data from providers approved by the meteorological
authority concerned or other sources approved by the operator. Consideration
should be given to the latency of meteorological information and the hazards
associated with utilization of latent information. Pilots should only use in-
flight weather applications for broad strategic avoidance of adverse
meteorological conditions.
APPENDIX- A
Guidance for EFB Software Applications
1.1.2 In any event, for the safe operations of flight, the validity and integrity of the aircraft
performance and M&B data are crucial and the applications and the procedures for their use
have to be properly evaluated before being used in service.
1.1.3 In that regard, the verification of the aircraft performance data and calculation
algorithm correctness becomes an essential step of the evaluation. The other part of the
evaluation is to deal with the user interface and crew procedures. A proper human- machine
interface (HMI) on one side, with adequate administration and crew procedures and training
on the other, are necessary to mitigate those errors.
Input HMI
Output
HMI
1.2.2 Input and output HMI. The input HMI takes the pilot’s inputs (or data read
from the avionics if applicable) and requests the calculation from the calculation module.
The results are transferred to the output HMI.
1.2.3 Calculation module. The calculation module will process the requested data
from the input HMI and determine the results which are then returned to the output HMI.
1.2.3.1 Calculation modules are commonly setup using manufacturer SCAP software
together with the respective aircraft-specific database. To obtain the results, the calculation
module might call the SCAP software several times. Thus, the expression “calling module”
has become widespread in the industry.
1.2.3.2 Another way for the calculation module to obtain results is to interpolate between
pre- calculated tables (e.g. runway weight limitation charts). Those tables are typically
calculated using SCAP software. The SCAP software itself, however, is not specifically part of
the performance application.
1.2.3.3 Where manufacturer software is not available, paper AFM or FCOM charts may have
to be digitised.
1.2.4 Aircraft performance data sources. Different sources of performance data can
be used by TALP applications. Performance data can be delivered in various digitized
formats:
a) SCAP modules or the equivalent delivered by the manufacturer. The SCAP
module is either based on equations of motion or digitised AFM material.
Modules may or may not come from an airworthiness approved electronic
flight manual;
b) the operator can build its own digitised performance data, based on the data
published in the flight manual; and
c) data based on pre-calculated take-off or landing performance tables.
1.3 Performance and Mass and Balance (M&B) applications and human-
machine interface (HMI)
1.3.1 Data error in performance calculations have been identified to have contributed to
and accidents. A good, well-designed HMI can significantly reduce the risk of errors. The
following are examples of design guidelines that are supplemental to the software HMI
considerations from Chapter 6:
a) Input data and output data (results) should be clearly distinctive. All the
information necessary for a given task should be presented together or easily
accessible.
b) All data required for performance and M&B applications should be prompted
for or displayed, including correct and unambiguous terms (names), units of
measurement (e.g. kg or lbs). The units should match those from other
cockpit sources for the same type of data.
c) Field names and abbreviations used in the HMI should correspond to those
used in the manuals and should match the labels in the cockpit.
d) If the application computes both dispatch (regulatory, factored) and other
results (e.g. in-flight or not factored), the flight crew should be made aware of
the nature of the results.
e) The application should clearly distinguish user entries from default values or
entries imported from other aircraft systems.
f) The aircraft tail sign used for calculation must be clearly displayed to the
flight crews, if relevant differences between tail signs exist. If tail signs are
associated with different subfleets, the selected subfleet should be clearly
displayed to the flight crew.
g) The HMI should be designed so that input data are difficult to enter into the
wrong fields of the HMI, by defining data-entry rules.
h) The HMI should only accept input parameters within the aircraft’s
operational envelope approved for the operator (commonly more limiting
than the certified envelope). Consideration should be given to the plausibility
of outputs within the AFM envelope but outside normal operating conditions.
i) All critical TALP calculation assumptions (e.g. use of thrust reversers, full or
reduced thrust/power rating) should clearly be displayed. The assumptions
made about any calculation should be at least as clear to pilots as similar
information would be on a tabular chart.
j) The HMI should indicate to the pilot if a set of entries results in an
unachievable operation (for instance, a negative stopping margin), in
accordance with general HMI considerations (see Chapter 6).
k) The user should be able to modify its input data easily, especially to account
for last-minute changes.
l) When calculation results are displayed, they should be displayed with the
input parameters used for calculation.
m) Any active MEL/CDL/special restriction should be clearly visible and
identifiable.
n) In the case of multiple runway selection, the output data should be clearly
associated with the selected runway.
o) Changes of runway data by the pilot should be clearly displayed and the
changes should be easy to identify.
1.4.1 The criticality of performance calculations and the importance of the correctness of
the calculation results delivered by performance algorithms or calculation modules cannot
be over-emphasised and hence the justification for the considerable investment in the
development, testing and approval or certification of a performance algorithm or calculation
module.
1.4.2 Depending on the EFB set-up three different test phases may apply:
a) the correctness test checks whether the performance results are consistent
with the approved data;
b) a robustness and constraint test checks for sensible system behaviour in
case incorrect values have been entered; and
c) finally, the integration test shall make sure that the application runs in the
EFB environment without any issue.
1.4.3.2 Test cases should, therefore, be defined to sufficiently cover the operations of the
aircraft under a representative cross section of conditions (e.g. for performance applications:
runway state and slope, different wind conditions and pressure altitudes, various aircraft
configuration including failures with a performance impact, etc.), and take into account the
data sources and their individual characteristics (e.g. corner points, break points, etc.). The
evaluation effort should be adapted to the type of data source used.
1.4.3.3 For selected calculations, a detailed check against approved data, or where data are
not approved in the AFM, the best available data has to be documented. Those calculations
must prove that the module’s results will match the data source or are consistently
conservative throughout the entire operating envelope of the aircraft.
1.4.3.4 The operator should provide an explanation of the methods used to evaluate enough
testing points with respect to the design of their software application and databases.
1.4.4.2 Even if using incorrect input values, the application shall not fail or get into a state
that would require special skills or procedures to bring it back to an operational state.
1.4.4.3 The testing should show that the application, in its operating environment (operating
software (OS) and hardware included), is stable and deterministic, i.e. identical answers are
generated each time the process is entered with identical parameters.
1.4.5.2 Integration testing shall ensure the performance application(s) produces the same
results on the EFB as on the computer it was designed and tested on. In addition, the
performance application shall not interfere adversely with other EFB applications or vice
versa.
1.4.5.3 Where data from other applications are processed (e.g. T/O performance using
results from the M&B application), the correct interfacing of those data shall be tested.
1.4.5.4 Finally the overall acceptability of the performance calculation should be assessed.
E.g. the data modification and calculation times should be within acceptable limits to allow
quick recalculations in case of dynamic operational conditions like meteorological or last
minute runway changes.
1.5.1.2 Performance and M&B calculations should be performed by both the pilots
independently on independent EFBs, if available.
1.5.1.3 The results should be cross-checked and differences discussed before the results are
used operationally.
1.5.1.4 Crew procedures should ensure that, in the event of loss of functionality by an EFB
through either the loss of a single application or the failure of the device hosting the
application, a high level of safety can be maintained. Consistency with the EFB risk
assessment assumptions should be confirmed.
1.5.2.2 A quality assurance process should apply for all performance-related software
application modifications.
1.5.3.2 A reporting system shall be in place allowing the operator to detect the nature of
problems and to decide on mitigations.
1.5.4.2 Training should include cross-checks (e.g. with avionics or flight-plan data) and gross
error check methods (e.g. “rule-of-thumb”) that may be used by pilots to identify order-of-
magnitude errors (e.g. entering the zero fuel mass (ZFM) as take-off mass (TOM) or
transposing digits).
1.5.4.3 It should be understood, that the use of EFBs makes performance calculations simple
and does not eliminate the necessity of good pilot performance knowledge.
1.5.4.4 Using EFBs, new procedures may be introduced (e.g. the use of multiple flaps
settings for take-off) and pilots should be trained accordingly.
4.1.2 An EFB AMM with own-ship position symbol is designed to assist flight crews in
orienting themselves on the airport surface to improve pilot positional awareness during taxi
operations. The AMMD function is not to be used as the primary means of taxiing
navigation. This application is limited to ground operations only.
4.1.3 The AMM application is designed to indicate the aircraft position and heading (in
case the own-ship position symbol is directional) on dynamic maps. The maps graphically
portray runways, taxiways and other airport features to support taxi and taxi-related
operations. Additionally, warning functions can be provided that notify crews about
potentially dangerous conditions, for example, inadvertently entering a runway.
g) The operator should review the documents and the data provided by the
AMMD developer and ensure that installation requirements of the AMMD
software in the specific EFB platform and aircraft are addressed.
4.2.2 The operations manual or user guide shall provide sufficient information to flight
crews, including limitations and accuracy of the system and all related procedures.
5.1.3 Other ECL functionalities, such as those identified in the list below, may be present,
in which case the operator’s CAA is responsible for the establishment of the applicable basis
for compliance:
a) The ECL receives information from the aircraft (e.g. senses items such as
aircraft system state, switch positions). The status of the sensed items may be
reflected on the checklist. For example, if an action line of a checklist
indicates that a button should be pressed and the aircraft sensors sense that
the button has been pressed, then the checklist display will indicate that the
item has been accomplished.
b) The ECL content includes non-normal (abnormal or emergency)
checklists/procedures.
5.2.1 The ECL system (hardware, software) should provide at least the same level of
accessibility, usability and reliability as a paper checklist.
a) Accessibility time for any checklist should not be longer than an equivalent
paper checklist.
b) All checklists should be easily accessible for reference or review.
c) The resulting pilot actions called from an ECL should be identical to a paper
checklist.
d) The pilot should be able to clearly recognizable which items or checklists are
safety relevant for the operation of the aircraft and which are of an additional
nature.
e) Checklists should be presented in accordance with the normal sequence of
flight.
f) The title of the checklist should be displayed and distinguished at all times
when in use.
g) An indication of the existence of off-screen checklist content should be
provided.
h) The end of each checklist should be clearly indicated.
i) The effect of switching between ECL and other EFB applications on the same
hardware should be evaluated.
5.2.3 Additional HMI and Human Factor considerations for ECL with capability to interact
with the pilot to record the completion of the actions and checklists:
a) ECL should provide a checklist overview displaying which checklists are
completed and which are not.
b) ECL should display the completion status of action items within a checklist.
c) It should be possible to restart a checklist, if needed. The crew should be able
to reset the checklist with a verification step to confirm the restart.
d) It should be possible to uncheck an action item in a checklist, if needed.
5.3.1 The operator should consider the impact on the pilot’s workload in determining the
method of use of ECL.
b) define backup procedure in case of loss of ECL during the flight to enable
access to checklists at any time (e.g. to include scenarios regarding power loss,
software malfunctions).
5.4 Administration
5.4.1 The operator should also establish a consistent and methodical process for modifying
the ECL data and updated data transmission and implementation on the EFBs. Such
processes should include a method for database applicability verification to individual
aircraft in the operator’s fleet.
6.2.2 The IFW application could be used to access both information required to be on
board (e.g. world area forecast system (WAFS) data) and supplemental weather information.
6.2.3 Use of IFW should be non-safety-critical and not necessary for the performance of
the flight.
6.2.5 Information from the official flight documentation or aircraft primary systems should
always prevail in case there is a contradiction with IFW information.
Note.— This manual will not supersede the regulatory material contained in ICAO Annex 3.
6.3.1 Meteorological information can be forecast and/or observed, and can be updated on
the ground and/or in- flight. It should be based on data from providers approved by the
meteorological authority concerned or other sources approved by the operator.
6.3.2 The meteorological information provided to the flight crew should, as far as possible,
be consistent with the information available to ground-based users (e.g. airline operations
center (AOC), dispatcher) in order to establish common situation awareness and to facilitate
collaborative decision-making.
6.4.4 Meteorological information may require reformatting for cockpit use, for example, to
accommodate display size or depiction technology. However, any reformatting of
meteorological information should preserve both the geo-location and intensity of
meteorological conditions regardless of projection, scaling or any other types of processing.
6.4.5 IFW display should, as far as possible, be consistent with the flight-deck design
philosophy in terms of location of titles, location and visual representation of legends,
element size, labelling and text styles, etc.
6.4.6 It is recommended that the IFW is able to display the meteorological information in
relation to the route or operational flight plan, in order to ease interpretation of forecast
information.
6.5.2 Adequate training should be provided for the use of IFW. Training should address
the following:
a) limitations of the IFW, in particular those presented in section 6.2;
b) latency of observed meteorological information and the hazards associated
with utilization of old information;
c) that IFW information beyond Annex 3 specifications is supplementary to the
required information;
d) use of the application;
e) different types of displayed information (e.g. forecast or observed);
f) symbology (e.g. symbols, colours);
g) interpretation of meteorological information;
h) identifying failures (e.g. incomplete uplinks, datalink failures, missing
information);
i) avoiding fixation; and
j) managing workload.
APPENDIX-B
Note: This checklist contains a list of questions for inspectors to use during a tabletop evaluation of the
EFB focusing on the EFB hardware and software applications. The checklist starts with EFB hardware
questions, then presents general user interface questions, and ends with specific EFB software
application questions (if applicable). The checklist is designed so any question answered as “No”
requires a comment.
Yes □
1. Is the display brightness and contrast adjustable? No □
N/A □
Yes □
2. Is the display brightness acceptable when it adjusts automatically? No □
N/A □
Yes □
3. Are there any display artifacts, such as jagged lines, impairing functionality? No □
N/A □
Yes □
4. Are controls labeled appropriately to describe their intended function? No □
N/A □
Yes □
5. Is the display readable under all flight deck illumination conditions? No □
N/A □
Yes □
6. Are touch-sensitive areas clearly indicated on the touch screen? No □
N/A □
Yes □
7. Can EFB inputs be made quickly and accurately in any operational environment No □
(e.g., in turbulence)? N/A □
8. Can touch screen inputs and selections be made without obscuring critical Yes □
information on the display? No □
N/A □
9. Are inadvertent or multiple activation of controls minimized? Yes □
No □
N/A □
Yes □
10. Does the EFB start up in a predictable state? No □
N/A □
Yes □
11. Can the EFB be rebooted when power is cut to the EFB? No □
N/A □
Yes □
12. Does the EFB function correctly when rebooted? No □
N/A □
Yes □
13. Are all the EFB failure modes easy to see and identify? No □
N/A □
Yes □
14. Is the failure annunciation/message appropriate for the EFB function which No □
failed?
N/A □
Yes □
15. Are EFB recovery means easy to remember and apply when the EFB fails? No □
N/A □
Yes □
16. Has the operator provided evidence of electromagnetic compatibility (EMC) No □
testing if utilizing portable EFB hardware?
N/A □
Yes □
17. Has the operator provided evidence that the device will continue operation after No □
a rapid decompression event?
N/A □
Provide the Number and a Comment for Each EFB Hardware Question Checked as “No.”
Yes □
18. Is the revision information and currency expiration date available and presented No □
clearly?
N/A □
Yes □
19. Does the device respond immediately to user inputs? No □
N/A □
Yes □
20. Is the processing speed always appropriate for normal use? No □
N/A □
Yes □
21. Are appropriate busy or progress indicators displayed when processing is No □
delayed?
N/A □
Yes □
22. Is the user interface, including functions and navigation, consistent throughout No □
the EFB?
N/A □
Yes □
23. Is all information needed displayed and easily accessible? Is there missing or No □
difficult to find information?
N/A □
Yes □
24. Are common actions and time-critical functions easy to access? No □
N/A □
Yes □
25. Are there standard ways to perform common actions? No □
N/A □
Yes □
26. Are the displays and controls used on the EFB similar across software
applications? Are a common set of controls and graphical elements used across No □
software applications? N/A □
Yes □
27. Can all colors be distinguished under the various lighting conditions? No □
N/A □
Yes □
28. Is color coding implemented with a secondary code, such as shading or No □
highlighting, when used to display critical information?
N/A □
Yes □
29. Are the colors red and yellow used appropriately—only for warnings and No □
cautions?
N/A □
Yes □
30. Is the text easily readable? No □
N/A □
Yes □
31. Do the characters stand out against the display background? No □
N/A □
Yes □
32. Are upper case and italic text used infrequently? No □
N/A □
Yes □
33. Is text used in low-light conditions appropriate in size and easy to read? No □
N/A □
Yes □
34. Is it easy to zoom in on text or graphics when they are too small? No □
N/A □
35. Is it obvious when information is out of view and can it easily be brought into Yes □
view?
No □
N/A □
Yes □
36. Is the spacing between characters appropriate? No □
N/A □
Yes □
37. Is the vertical spacing between lines appropriate? No □
N/A □
Yes □
38. Are icons and symbols legible? No □
N/A □
Yes □
39. Are icon and symbol functions obvious? No □
N/A □
Yes □
40. Are the icons and symbols distinguishable from one another? No □
N/A □
Yes □
41. Is each icon’s meaning explained by a label or other means? No □
N/A □
Yes □
42. Are the EFB icons and symbols consistent with their paper equivalents? No □
N/A □
Yes □
43. Are alerts and reminders consistent across all EFB software applications? No □
N/A □
Yes □
44. Are reminders implemented so as not to distract? No □
N/A □
Yes □
45. Is the failure message appropriate for the EFB function that failed? No □
N/A □
Yes □
46. Is it easy to reset parameters to their default when they have been customized? No □
N/A □
Yes □
47. Is EFB customization controlled through an administrative control process? No □
N/A □
Provide the Number and a Comment for Each General User Interface Question Checked as “No.”
Provide the Number and a Comment for Each General EFB Software Applications Question
Checked as “No.”
Yes □
70. Is the information layout for fixed charts consistent with the paper equivalent? No □
N/A □
Yes □
71. Is it easy to switch between a decluttered and normal display if decluttering is No □
supported?
N/A □
Yes □
72. Is there a clear indication when any chart elements are suppressed? No □
N/A □
Yes □
73. Can the display be easily returned to its default position after zooming, panning, No □
or decluttering?
N/A □
Provide the Number and a Comment for Each Electronic Documents and Charts Question
Checked as “No.”
No □
N/A □
Yes □
81. Is it easy to select a checklist from a set of open checklists? No □
N/A □
Yes □
82. Is there a reminder to review incomplete items when closing an incomplete No □
checklist?
N/A □
Yes □
83. Can an incomplete checklist be closed after acknowledging it is not complete? No □
N/A □
Yes □
84. Does the ECL discourage two or more checklists from being used No □
simultaneously?
N/A □
Yes □
85. Is progress through the ECL clear? No □
N/A □
Yes □
86. It is easy to reset the ECL to start over again? No □
N/A □
Yes □
87. Does the checklist provide appropriate reminders for tasks requiring a delayed No □
action?
N/A □
Yes □
88. Does the checklist clearly highlight decision branches? No □
N/A □
Yes □
89. Can you return to the checklist from links or related information in one step? No □
N/A □
Yes □
90. Is there an indicator of which item in the checklist you are working on? No □
N/A □
Yes □
91. Is the checklist’s active item clearly indicated? No □
N/A □
Yes □
92. Can the status of an item be easily changed? No □
N/A □
Yes □
93. Does the next item automatically become active when the previous one is No □
complete?
N/A □
Yes □
94. Can the current item be deferred without completing it? No □
N/A □
95. Is it easy to view other items, even in a long checklist, without changing the Yes □
active item? No □
N/A □
Yes □
96. Is it easy to move between items within a checklist? No □
N/A □
Yes □
97. Is there a clear indication all items, as well as the whole checklist, are complete No □
when finished?
N/A □
Provide the Number and a Comment for Each ECL Question Checked as “No.”
N/A □
Yes □
106. Are crews trained to identify and review default values and assumptions about No □
the aircraft status or environmental conditions?
N/A □
Yes □
107. Are the assumptions made about any calculation as clear to pilots as similar No □
information would be on a tabular chart?
N/A □
Provide the Number and a Comment for Each Performance Calculations Question Checked as
“No.”
Mounting Device
Yes □
108. Has the installation of the mounting device been approved in accordance with
No □
the appropriate airworthiness regulations?
N/A □
109. Is it evident that there are no mechanical interference issues between the EFB
Yes □
in its mounting device and any of the flight controls in terms of full and free
No □
movement, under all operating conditions and no interference with other equipment
N/A □
such as buckles, oxygen hoses, etc.?
Yes □
110. Has it been confirmed that the mounted EFB location does not impede crew
No □
ingress, egress and emergency egress path?
N/A □
Yes □
111. Is it evident that the mounted EFB does not obstruct visual or physical access to
No □
aircraft displays or controls?
N/A □
Yes □
112. Does the mounted EFB location minimize the effects of glare and/or
No □
reflections?
N/A □
Yes □
113. Does the mounting method for the EFB allow easy access to the EFB controls No □
and a clear unobstructed view of the EFB display? N/A □
Yes □
114. Is the EFB mounting easily adjustable by flight crew to compensate for glare
No □
and reflections?
N/A □
Yes □
115. Does the placement of the EFB allow sufficient airflow around the unit, if
No □
required?
N/A □
Provide the Number and a Comment for Each Mounting Device Question Checked as “No.”
Inspector Signature:
APPENDIX-C
Note: This checklist contains a list of questions for inspectors consideration during an operational
evaluation of the EFB program, to include documentation, procedures, and training. It also contains
questions to be answered in a training or operational environment by crewmembers, instructor/
evaluators, or other operational personnel. The checklist is designed so any question answered as “No”
requires a comment.
Yes □
1. Is there a backup source in the flight deck for EFB information? No □
N/A □
Yes □
2. Is the EFB display readable under all typical flight-deck lighting conditions? No □
N/A □
Yes □
3. Are there appropriate Master Minimum Equipment List (MMEL)/minimum No □
equipment list (MEL) items to handle EFB failures?
N/A □
Yes □
4. Are crews able to adjust and lock the EFB for optimal viewing? No □
N/A □
Yes □
5. Are the EFB hardware components usable and suitably durable for the flight No □
deck?
N/A □
Provide the Number and a Comment for Each General EFB Hardware Question Checked as “No.”
EFB Stowage
No □
N/A □
8. Is the stowage securing mechanism unobtrusive when not in use? Yes □
No □
N/A □
9. Does the EFB stowage allow appropriate visual and physical access to flight Yes □
controls, displays, and emergency egress path? No □
N/A □
10. Does the viewable stowage allow pilots a sufficiently clear view of critical outside Yes □
references? No □
N/A □
11. Can the EFB be moved easily to and from the stowage area without blocking Yes □
access to flight displays/controls? No □
N/A □
12. Are the device and/or the stowage area unlikely to be damaged under normal Yes □
use? No □
N/A □
Provide the Number and a Comment for Each EFB Stowage and Unsecured EFB Question
Checked as “No.”
Workload
Yes □
18. Is the EFB installation appropriate for use in high workload phases of flight? No □
N/A □
19. Does stowing the EFB require excessive head-down time or workload? Yes □
No □
N/A □
Yes □
20. Is the workload acceptable when there is an EFB failure? No □
N/A □
Yes □
21. Are other than critical EFB messages inhibited during high workload phases of No □
flight?
N/A □
Yes □
22. Is the workload acceptable when configuring electronic charts while flying a No □
procedure?
N/A □
Yes □
23. Are there procedures to mitigate EFB workload? No □
N/A □
Yes □
24. Are there appropriate procedures for using EFB in high workload phases of No □
flight?
N/A □
Software Applications
Yes □
25. Does the EFB use terms, icons, colors, and symbols consistent with other flight No □
deck systems?
N/A □
Yes □
26. Does using the electronic checklist (ECL) produce the same crew actions the No □
paper equivalent would?
N/A □
27. If the EFB shows own-ship in flight, is there an operationally similar function Yes □
presented on an installed display? Can the flight crew differentiate between the No □
information on the EFB and the information on the installed display? N/A □
Yes □
28. Is there a clear indication of the revision date(s) of the software that are on the No □
EFB?
N/A □
Provide the Number and a Comment for Each Workload and Software Applications Question
Checked as “No.”
EFB Cybersecurity
29. Are cybersecurity controls in place to mitigate against the risk of unauthorized Yes □
modifications to an EFB’s operating system architecture, its specific hosted No □
applications, and any of the databases or datalinks used to enable its hosted
applications? N/A □
30. Are cybersecurity controls in place to ensure administrative management of
portable electronic devices (PED), which have been authorized for use as a portable Yes □
EFB? (Note: This includes, but is not limited to, identifying the individual or aircraft No □
to which the PED is assigned, as well as ensuring operating system architecture and N/A □
associated hosted software applications are updated in a timely manner.)
EFB Procedures
Yes □
31. Are there procedures for starting up and shutting down the EFB? No □
N/A □
Yes □
32. Are there appropriate procedures for all the EFB failure modes? No □
N/A □
Yes □
33. Are there EFB procedures for when other aircraft system failures could render No □
the EFB unusable?
N/A □
Yes □
34. Are there procedures for using EFB backup information? No □
N/A □
Yes □
35. Are there procedures for establishing which source of information is primary? No □
N/A □
Yes □
36. Are there procedures specifying what data to use when data is redundant or No □
different from the EFB?
N/A □
Yes □
37. Are there procedures for removal of a kneeboard EFB during emergency landing No □
or egress (if applicable)?
N/A □
Yes □
38. Are there procedures for updating passwords and for device lockout? No □
N/A □
Provide the Number and a Comment for Each EFB Cybersecurity and Procedures Question
Checked as “No.”
51. Are there procedures or built-in limits preventing the setting of customized color Yes □
schemes conflicting with flight deck color conventions? No □
N/A □
52. Is there a policy regarding the use of supplemental audio and/or video in flight? Yes □
No □
N/A □
53. Is the EFB audio set to minimize any interference with higher priority Yes □
communications? No □
N/A □
Provide the Number and a Comment for Each EFB Procedure Question Checked as “No.”
EFB Training
Yes □
63. Are there appropriate EFB training, checking, and currency requirements? No □
N/A □
Yes □
64. Does the EFB training program address all EFB intended functions and EFB No □
software applications?
N/A □
Yes □
65. Is there training on how to use unique features of the software applications? No □
N/A □
Yes □
66. Are crews proficient on the EFB at the completion of EFB training? No □
N/A □
Yes □
67. Is EFB training customized for new users? No □
N/A □
Yes □
68. Is the manufacturer’s EFB documentation sufficient? No □
N/A □
Yes □
69. Does the EFB training device provide an appropriate degree of fidelity when the No □
actual EFB is not used?
N/A □
Yes □
70. Does the EFB training device simulate the key aspects of the task? No □
N/A □
Yes □
71. Does the EFB training appropriately address the meaning of icons and symbols? No □
N/A □
Yes □
72. Does EFB training address security considerations (e.g., passwords, device No □
lockout)?
N/A □
N/A □
Yes □
75. Is there training on differences in map scale, orientation, and data quality No □
between the electronic charts and other flight deck displays?
N/A □
Yes □
76. Is there training on the limitations of own-ship position when it is displayed? No □
N/A □
Yes □
77. Is there training on policies pertaining to use of the electronic charts? No □
N/A □
Yes □
78. Can crews use the electronic charts as well as paper charts? No □
N/A □
Yes □
79. Can crews use the electronic charts to orient themselves and track their progress No □
as they fly required procedures?
N/A □
N/A □
Yes □
89. Is there training on where to obtain values when their normal sources are not No □
available?
N/A □
Yes □
90. Is there training on coordinating the roles of dispatchers and crewmember? No □
N/A □
Provide the Number and a Comment for Each Training Question Checked as “No.”
Do crews with the EFB perform as well or better than crews with paper document when:
Yes □
91. Calculating aircraft W&B, takeoff, climb, and maneuvering speeds? No □
N/A □
Yes □
92. Crews maintain critical data for immediate reference? No □
N/A □
Yes □
93. There is a runway change and a need to reference deicing fluid requirements or No □
an MEL item?
N/A □
Yes □
94. There are time-critical adjustments prior to block out/taxi and takeoff? No □
N/A □
Do crews with the EFB perform as well or better than crews with paper document when:
95. There is a takeoff on a runway requiring a briefing for a special operator engine- Yes □
out procedure? No □
N/A □
96. There is a complex Standard Instrument Departure (SID) with an abnormal or Yes □
an emergency during the departure climb-out? No □
N/A □
97. There is an emergency requiring a return to the departure or alternate departure Yes □
airport? No □
N/A □
98. One EFB fails, requiring one pilot to rely on the EFB of the other pilot Yes □
immediately after takeoff? No □
N/A □
Provide the Number and a Comment for Each Preflight Planning and Takeoff Question Checked
as “No.”
Do crews with the EFB perform as well or better than crews with paper document when:
Yes □
99. There is an engine failure/fire with possible condition of destination below No □
weather minimums?
N/A □
Yes □
100. There is electrical smoke in the cockpit requiring use of smoke mask/goggles No □
while completing checklists or using EFB for approach briefing?
N/A □
Do crews with the EFB perform as well or better than crews with paper document when:
Yes □
101. There are conditions requiring reference to Surface Movement Guidance and No □
Control System (SMGCS) taxi routing or a complex clearance?
N/A □
Yes □
102. Reported runway conditions require reference to operational limitations? No □
N/A □
Do crews with the EFB perform as well or better than crews with paper document when:
Yes □
103. There is a runway change or the need to recompute landing weight and V No □
speeds during approach?
N/A □
Yes □
104. There are poor weather conditions or airports with complex taxi routes? No □
N/A □
Yes □
105. There is a request for a specific taxiway turn during rollout after landing? No □
N/A □
Provide the Number and a Comment for Each Preflight Planning and Takeoff Question Checked
as “No.”
Inspector Signature:
APPENDIX-D
Note: This checklist provides a starting point for EFB line operations evaluations. This is a final
checklist to ensure there are no problems with the EFB design/interface, training, or procedures prior
to the authorization for use.
Overview
Yes □
1. Was training adequate to ensure the crewmember(s) could perform in a safe and No □
efficient manner?
N/A □
Yes □
2. Were individual crewmember knowledge and skills adequate to allow normal No □
coordinated flight deck activities?
N/A □
3. Was crewmember knowledge regarding observed software applications adequate? Yes □
No □
N/A □
4. Are adequate procedures in place to ensure the EFB is integrated into the Yes □
crew/operator’s system (e.g., normal and abnormal/emergency operations and No □
maintenance functions)? N/A □
5. Were the EFB hardware or software applications adequate and appropriate during Yes □
the flight? If there were any problems, particularly in a critical phase of flight, No □
describe in the notes space below.
N/A □
6. Could the crewmember(s) recover from usage errors without undue distraction or Yes □
discussions? If usage errors were frequent or a distraction, describe in notes space No □
below.
N/A □
7. Was the workload required for completing a task with the EFB equal to or less
than the workload for completing the task with the conventional method? Consider Yes □
the use of the EFB both in isolation as well as with those functions used concurrently No □
with other aircraft systems. If no, specify phase of flight and task for any marginal or N/A □
unacceptable increases in workload in notes space below.
General
8. Was each crewmember able to use the controls for menu and functionality Yes □
without frequent errors? No □
N/A □
9. Was the device appropriate and operational when exposed to environmental Yes □
factors (e.g., turbulence, cold weather, vibration)? No □
N/A □
10. Was the device free of significant limitations in regard to display (e.g., off-axis Yes □
view angles or various different lighting conditions)? No □
N/A □
11. Does the device have easy and adequate dimming functions in low-light Yes □
(nighttime) conditions? No □
N/A □
12. Is the device adequately backlit and/or viewable by flight deck lighting in Yes □
low-light (nighttime) conditions? No □
N/A □
13. Is the device clearly visible in bright sunlight conditions? Yes □
No □
N/A □
14. Was the device display clear (adequate resolution)? Confirm the display was Yes □
never misinterpreted because of viewing limitations. If so, record issues in notes No □
space below.
N/A □
15. Did the crewmember(s) ensure proper EFB stowage (including viewable Yes □
stowage) per standard operating procedures (SOP)? Temperature limitations No □
acknowledged?
N/A □
16. Does the display continue to be usable after prolonged use in the flight deck Yes □
environment (if applicable)? No □
N/A □
17. Are normal functions (e.g., shutdown, startup) adequate to ensure crewmembers Yes □
are not required any undue attention or concern? No □
N/A □
18. Were procedures adequate for identifying currency of EFB data? Yes □
No □
N/A □
19. Could the crewmember(s) easily find and use required items and functions? Yes □
No □
N/A □
20. Were the abbreviations and/or icons easy to understand? Yes □
No □
N/A □
21. Could the crewmember(s) easily switch between critical software applications? Yes □
No □
N/A □
22. If critical (e.g., abnormal or emergency checklists) software applications are Yes □
authorized in the EFB configuration basis, is their use at least equal to or better than
General Conclusions
42. Were any unique safety issues or events caused or exacerbated by using the EFB Yes □
during this evaluation? No □
N/A □
43. Can the flight be conducted as safely with an EFB as with the methods/products Yes □
it is intended to replace? No □
N/A □
44. Does the EFB add an unacceptable level of complexity for any critical activity or Yes □
phase of flight? No □
N/A □
Inspector Signature:
APPENDIX-E
EXAMPLE OF OPERATIONS SPECIFICATIONS AND OPERATIONS MANUAL CONTENT
When an EFB function is to be used for the safe operation of an aeroplane (see Chapter 6), an
entry must be included in the operator’s operations specifications approved by the DCA. The
operations specifications will reference the location in the operations manual where the approved EFB
applications are detailed. Figure E-1 shows an example of a specific approval EFB entry.
OPERATIONS SPECIFICATIONS
(Subject to the approved conditions in the operations manual)
Continuing airworthiness
18
EFB for A/C type Type 1 - Specifically approved EFB
hardware and software
c c applications for A/C type Type 1
are contained in [operations
manual reference]
Other
18.
List the EFB functions with any applicable limitations.
Note.— Boxes YES/NO are not used since some EFB functions might not require an
operational approval. Other EFB functions not requiring an EFB approval should not be listed in the
operations specifications form.
The EFB-specific approvals referenced in the operations specifications form should have a companion
detailed list of EFB-approved hardware and software applications. This list should be located in the
operations manual in a table and be updated through the normal operations-manual-approval process
established by the State. Figure E-2 contains an example of a companion EFB-specific approval table.
The “Approved hardware for A/C type” column of the companion EFB (hardware and
software) with specific approval table should match the “DESCRIPTION” column of the operations
specifications form. The “EFB applications” column of the table should list all the applications
requiring a specific approval and include the application version, with any applicable limitations. The
“Specific references and/or remarks” column of the table should include the application version in
addition to any specific operations manual reference and other remarks, if applicable.
EFB for A/C type Type 2 – Charts application: See operations manual page X
En route – AppName3 ver x.x Paper backup operation
APPENDIX-F
EFB Policy and Procedures Manual
1. The following are typical contents of an EFB policy and procedures manual that can be
fully or partly integrated in the Operations Manual, as applicable.
2. The structure and content of the EFB policy and procedures manual should correspond
to the size of the operator, the complexity of its activities and the complexity of the EFB used.
• Introduction
EFB general philosophy
EFB limitations
EFB-approved hardware and software applications
• EFB management
Responsibilities
Data management
Updates and changes management
• Hardware description
EFB system architecture
Hardware configuration control
• Software description
Operating system description
List and description of applications hosted
• Operating procedures
• Maintenance consideration
• Security considerations
APPENDIX-G
Introduction
Yes □
1. EFB general philosophy is explained?
No □
Yes □
2. EFB limitations are described?
No □
Yes □
3. Approved EFB hardware and software applications are outlined?
No □
EFB Management
4. Duties and responsibilities of personnel concerned for EFB management are Yes □
outlined? No □
Yes □
5. Procedures for EFB data management are written down?
No □
Yes □
6. Procedures for EFB updates and changes are written down?
No □
Hardware description
Yes □
7. EFB system architecture is illustrated?
No □
Yes □
8. EFB hardware configuration control is illustrated?
No □
Software description
Yes □
9. Operating system description is outlined?
No □
Yes □
10. List and description of applications hosted are described?
No □
Training
Operating Procedures
Yes □
12. Crew operating procedures for EFB usage are outlined?
No □
Maintenance
Yes □
13. Maintenance considerations for EFB are described?
No □
Security
Yes □
14. Security considerations for EFB are outlined?
No □
Inspector Signature: