EASA Part-66 Module 10 — Aviation Legislation Essay Questions
20 worked model essay answers for Module 10 (Aviation Legislation), each written to the Appendix II standard with the Key Points an examiner marks against. Tap any question to reveal its model answer.
These are example essays for study — not the actual exam questions. Your real exam will use different question wording drawn from the official question bank, so it will not match these word-for-word. Use them to learn how to structure a passing answer and which Key Points to cover — not to memorise.
Module 10 — Aviation Legislation: 20 worked essays
Each answer is followed by the Key Points examiners look for. Links to individual questions are shareable.
Model answer
European aviation safety is governed by a layered framework in which an international body sets broad principles, a supranational legislator turns them into binding European law, a technical agency develops the detail, and national bodies carry out much of the day-to-day oversight. Understanding how these four levels relate is essential because a certifying engineer works under rules that ultimately trace back to all of them.
At the top sits the International Civil Aviation Organisation (ICAO), the United Nations specialised agency established by the Chicago Convention. ICAO is not a European body and does not regulate organisations directly; instead it produces Standards and Recommended Practices (SARPs), published as Annexes to the Convention, which contracting States agree to adopt. ICAO promotes global harmonisation so that aircraft, licences and certificates are recognised across national borders, but the legal obligation to implement its standards rests with each State.
Within the European Union, the European Commission is the legislator. It adopts the binding Regulations that give the framework legal force, most importantly Regulation (EU) 2018/1139, the EASA Basic Regulation, together with its Implementing Rules such as Regulation (EU) No 748/2012 on initial airworthiness and Regulation (EU) No 1321/2014 on continuing airworthiness. The Commission also concludes bilateral aviation safety agreements with non-EU States so that certificates can be mutually accepted. These Regulations apply directly in every Member State without needing to be transposed into national law.
The European Union Aviation Safety Agency (EASA) is the technical authority. EASA prepares the draft Implementing Rules that the Commission adopts, issues the Certification Specifications (CS) and the Acceptable Means of Compliance and Guidance Material (AMC and GM), certifies aircraft type designs and certain organisations, and standardises how the rules are applied. It provides the expertise that underpins the legislation but, for the most part, does not itself license individual engineers.
The Member States, acting through their National Aviation Authorities (NAAs) designated as competent authorities, perform much of the operational oversight. An NAA issues Part-66 aircraft maintenance licences, approves and audits Part-145 maintenance organisations and Part-CAMO organisations established in its territory, and enforces compliance. The NAA is therefore the body a certifying engineer deals with most directly.
In summary, ICAO sets global standards, the Commission enacts them as European law, EASA develops the technical content and ensures consistency, and the Member States through their NAAs deliver the certification and oversight on the ground. The four levels are interdependent, and together they produce the single regulatory environment within which all European maintenance and certification is carried out.
Key points examiners look for
- ICAO = UN body under the Chicago Convention, issues SARPs in Annexes; global harmonisation; States adopt
- European Commission = EU legislator; adopts binding Regulations and Implementing Rules
- Regulation (EU) 2018/1139 is the EASA Basic Regulation
- Implementing Rules include 748/2012 (initial) and 1321/2014 (continuing airworthiness)
- Commission concludes bilateral aviation safety agreements with third countries
- EASA = technical agency; drafts rules, issues CS and AMC/GM, certifies type designs, standardises application
- Member States act through National Aviation Authorities (competent authorities)
- NAAs issue Part-66 licences and approve/oversee Part-145 and Part-CAMO organisations
- EU Regulations apply directly in Member States without transposition
- Four interdependent levels form one harmonised regulatory framework
Model answer
The EASA regulatory system is built on two tiers of material that an engineer must clearly distinguish: legally binding rules, often called hard law, and the supporting material, often called soft law. Confusing the two leads to compliance errors, so understanding their legal weight and how they relate is a core part of aviation legislation knowledge.
Hard law consists of the Regulations themselves. These are adopted by the European Commission and are directly binding in every Member State. The foundation is Regulation (EU) 2018/1139, the Basic Regulation, supported by Implementing Rules such as Regulation (EU) No 1321/2014 on continuing airworthiness, which contains the Annexes known as Part-M, Part-145, Part-66, Part-147, Part-ML, Part-CAMO and Part-CAO, and Regulation (EU) No 748/2012 on initial airworthiness, which contains Part 21. Because these are law, their requirements are mandatory; an organisation or licence holder must comply with them, and a competent authority will take enforcement action where they are breached.
Soft law comprises the material EASA publishes to support the Regulations, principally Acceptable Means of Compliance (AMC), Guidance Material (GM) and Certification Specifications (CS). The essential point is that AMC and GM are not, in themselves, legally binding in the way a Regulation is. An Acceptable Means of Compliance describes one way of satisfying a requirement that EASA has already agreed is acceptable; if an organisation follows the relevant AMC it gains a presumption of compliance with the rule. However, an organisation is permitted to demonstrate compliance by an alternative means, known as an Alternative Means of Compliance, provided the competent authority agrees that the alternative meets the binding requirement. Guidance Material does not establish compliance at all; it explains, illustrates or assists in the understanding of a requirement or an AMC.
Certification Specifications occupy a related place. They are the technical standards, such as CS-23 or CS-25, against which a product is shown to meet the airworthiness requirements during type certification. Like AMC, a CS is a means of compliance with the binding airworthiness objectives rather than the hard-law requirement itself.
The relationship can therefore be summarised as a hierarchy. The Regulation states what must be achieved and is mandatory. The AMC and CS describe an accepted way of achieving it and confer a presumption of compliance, while leaving room for an approved alternative. The GM merely helps the reader understand the rule. In practice an engineer treats the Regulation as the obligation that cannot be ignored, uses the AMC and CS as the established route to satisfy it, and refers to the GM for explanation, never mistaking the supporting material for the binding requirement itself.
Key points examiners look for
- Hard law = the Regulations; binding and mandatory in all Member States
- Basic Regulation (EU) 2018/1139 plus Implementing Rules 1321/2014 and 748/2012
- 1321/2014 contains Part-M/145/66/147/ML/CAMO/CAO; 748/2012 contains Part 21
- Soft law = AMC, GM and CS published by EASA to support the rules
- AMC describes one accepted way to comply and gives a presumption of compliance
- Alternative Means of Compliance allowed if accepted by the competent authority
- GM only explains/illustrates; it does not establish compliance
- CS (e.g. CS-23, CS-25) are technical means of showing airworthiness compliance
- Hierarchy: Regulation (must) > AMC/CS (accepted means) > GM (explanation)
- Engineer must not treat soft law as if it were the binding requirement
Model answer
The Part-66 aircraft maintenance licence, established under Annex III to Regulation (EU) No 1321/2014, defines the categories of certifying staff and the privileges each may exercise. The categories are graded so that the scope of work an individual may certify matches the depth of knowledge and experience demonstrated, ranging from limited scheduled tasks up to full base maintenance certification.
Category A is a line maintenance category. Its holder may issue a certificate of release to service following certain minor scheduled line maintenance and the rectification of simple defects, but only for the specific tasks the individual has actually been trained and authorised on within the maintenance organisation. Category A is divided into subcategories reflecting aircraft type, covering aeroplanes and helicopters with turbine or piston engines.
Category B1 covers mechanical aspects of the aircraft. A B1 holder may certify line maintenance, including structure, powerplants, mechanical and electrical systems work, and may also carry out and release work on avionic systems requiring only simple tests to prove serviceability. The B1 subcategories distinguish turbine and piston aeroplanes and turbine and piston helicopters.
Category B2 covers avionic and electrical systems. A B2 holder may certify line maintenance on avionic and electrical systems and, within stated limits, certain electrical and avionic tasks within other systems. Category B2L is a related licence covering avionic and electrical systems on aircraft other than complex motor-powered aircraft, with privileges defined by system ratings rather than full type ratings, making it suited to lighter aeroplanes.
Category B3 is specific to piston-engine, non-pressurised aeroplanes below a defined mass; its holder may certify line maintenance on such aeroplanes across structure, powerplant, mechanical and electrical systems, again with avionic work limited to simple tests. Category B3 therefore serves the lighter general-aviation end of the fleet.
Category C is the base maintenance category. A category C holder issues the certificate of release to service for an aircraft following base maintenance, relying on the base maintenance carried out and released at system level by category B1 and B2 staff. The category C holder takes overall responsibility for the completed base maintenance check rather than certifying individual tasks personally.
For all categories, the privileges may only be exercised once the individual holds the appropriate aircraft type or group ratings entered on the licence, holds an authorisation issued by the maintenance organisation, and meets the recency requirements. In summary, A and B3 address the lighter and line ends of the work, B1 and B2 split mechanical and avionic line maintenance on the wider fleet, B2L provides an avionic licence for lighter aircraft, and C provides the base maintenance release, together giving a complete and graded certifying structure.
Key points examiners look for
- Part-66 licence defined under Annex III to Regulation (EU) No 1321/2014
- Category A: limited line maintenance scheduled tasks/simple defects, only authorised tasks
- Category B1: mechanical line maintenance incl. structure/powerplant/systems plus simple avionic tests
- Category B2: avionic and electrical systems line maintenance
- Category B2L: avionic/electrical for aircraft other than complex motor-powered, by system ratings
- Category B3: piston-engine non-pressurised aeroplanes below a defined mass
- Category C: base maintenance CRS, relying on B1/B2 system-level release
- Subcategories reflect aeroplane/helicopter and turbine/piston
- Privileges require appropriate type/group ratings on the licence
- Exercise also needs an organisation authorisation and recency
Model answer
The Certificate of Release to Service, commonly abbreviated to CRS, is the formal statement that maintenance has been completed correctly and that the aircraft or component is fit to return to service. It is the legal link between the work carried out and the aircraft being released for flight, and no aircraft may be operated after maintenance until a valid CRS has been issued. Understanding when it is required, who may sign it and what it must say is fundamental to a certifying engineer.
A CRS is required after any maintenance has been performed on an aircraft or component, whether that is scheduled maintenance, the rectification of a defect, a modification or a repair. Its purpose is to certify that the work was carried out in accordance with the applicable approved maintenance data and that the aircraft or component is in a condition for safe operation. Without it, the aircraft is not considered released and must not fly. The requirement applies under the continuing-airworthiness rules of Regulation (EU) No 1321/2014, principally through Part-145 for approved-organisation maintenance and through the relevant continuing-airworthiness Parts for lighter aircraft.
The CRS may only be issued by appropriately authorised certifying staff. In an approved Part-145 maintenance organisation this is staff who hold a valid Part-66 licence with the appropriate aircraft type or group ratings and who have been issued a certification authorisation by that organisation for the work concerned. The category of licence must match the work: a category C holder releases an aircraft after base maintenance, while category B1 and B2 staff release line maintenance and the system-level base maintenance within their respective mechanical and avionic scopes, and category A staff release only the limited line tasks for which they are authorised. The individual signing must hold the privilege for the specific task and type being certified.
As to content, the CRS must clearly identify the maintenance performed, including the work done and the approved maintenance data used. It must reference the aircraft or component to which it relates and confirm that the work was completed satisfactorily in accordance with that data. It must state the date the maintenance was completed and carry the identity, including the certification authorisation reference, of the certifying person issuing it, together with a statement that the aircraft or component is released to service. Where any maintenance could not be completed, this must be recorded so that the operator is aware of the outstanding items.
In conclusion, the CRS is the mandatory certification, after every act of maintenance, that the task was done correctly against approved data; it may be signed only by suitably licensed and authorised certifying staff whose privileges match the work, and it must identify the work, the data, the date and the certifier, providing a clear and traceable record that the aircraft is fit to return to flight.
Key points examiners look for
- CRS certifies maintenance was completed correctly and the aircraft/component is fit for service
- Required after any maintenance: scheduled tasks, defect rectification, modification, repair
- No operation after maintenance until a valid CRS is issued
- Issued under Regulation (EU) No 1321/2014 (Part-145 and other continuing-airworthiness Parts)
- Issued only by authorised certifying staff with a valid Part-66 licence and type/group ratings
- Licence category must match the work (A line tasks, B1/B2 line+system, C base maintenance)
- Certifier needs an organisation certification authorisation for the task/type
- Content: identifies work done and approved maintenance data used
- Content: date of completion, certifier identity/authorisation, release statement
- Any incomplete maintenance must be recorded for the operator
Model answer
A Part-66 aircraft maintenance licence is granted only when the applicant has shown both the required knowledge and a defined period of practical maintenance experience, and the privileges it confers may be exercised only while the holder remains current. Experience and recency are therefore two separate but linked safeguards: experience qualifies a person to be licensed, and recency keeps that qualification meaningful over time.
The basic experience requirement reflects the principle that examinations alone cannot prove competence; an applicant must also have worked for a defined minimum period on operating aircraft maintenance before the licence is issued. The length of experience required is set out in Part-66 and depends on the category of licence sought and on the applicant's background. The period is shorter where the applicant has completed relevant approved or recognised training, and longer where the knowledge has been gained without such training, because formal training is taken to substitute for part of the practical exposure. The experience must be recent and relevant, gained on actual aircraft maintenance rather than purely academic study, so that the licence reflects current practical ability and not merely past attendance on a course. Rather than quote specific figures, the principle to remember is that the rule sets a graduated minimum that increases with category and decreases when recognised training has been completed.
Holding the licence is not, by itself, enough to certify work. To exercise certification privileges the holder must also satisfy recency requirements. The underlying principle is that a person must have actually been engaged in relevant aircraft maintenance within a defined recent period, so that skills and familiarity remain current. Part-66 therefore requires a minimum amount of recent maintenance experience within a preceding period for the privileges to be exercised, and where that recent experience is lacking the holder must regain currency before certifying again. Continuation training reinforces this by keeping knowledge of procedures, regulations and aircraft types up to date.
In addition to these recency principles, the certifying privileges in a maintenance organisation depend on holding a current authorisation from that organisation, and the licence and its ratings must themselves remain valid. The combined effect is that a certifying engineer must hold a valid licence with the appropriate ratings, must keep up the required recent maintenance experience, and must hold an organisation authorisation before signing any release.
In summary, basic experience is the practical service an applicant must complete before a licence is granted, set as a graduated minimum that varies with category and with whether recognised training has been undertaken, while recency ensures that a licence holder remains actively engaged in maintenance so that the privileges continue to reflect genuine current competence. Both are essential to keep certification trustworthy.
Key points examiners look for
- Licence requires demonstrated knowledge plus a defined period of practical experience
- Experience requirement set in Part-66, varies by licence category
- Required period is shorter with relevant approved/recognised training, longer without
- Experience must be recent and relevant, on actual aircraft maintenance
- Recency: holder must have engaged in relevant maintenance within a recent period to certify
- Loss of recency requires regaining currency before certifying again
- Continuation training keeps knowledge of procedures, regs and types up to date
- Exercising privileges also needs a current organisation authorisation
- Licence and ratings must remain valid
- Experience qualifies for the licence; recency keeps the privilege current
Model answer
A Part-145 approved maintenance organisation is one that has demonstrated to its competent authority that it complies with the requirements of Part-145, contained in Annex II to Regulation (EU) No 1321/2014. Approval permits the organisation to maintain aircraft and aircraft components and to issue a Certificate of Release to Service. The privileges of the approval are defined by its scope, which the authority sets out in the approval certificate and which the organisation must not exceed.
The central document of any application is the Maintenance Organisation Exposition (MOE). The MOE describes how the organisation complies with Part-145; it states the scope of work requested, names the Accountable Manager and the nominated post-holders, and describes the procedures the organisation will follow. The Accountable Manager has corporate authority to ensure that all maintenance can be financed and carried out to the required standard, and must sign the MOE as a commitment to comply on a continuing basis. The competent authority reviews the MOE and, when satisfied, accepts it; subsequent significant changes must be processed in agreement with the authority.
Beyond the exposition, the organisation must provide the resources that allow it to work safely. It must employ sufficient and competent personnel, including certifying staff who hold an appropriate Part-66 licence and an organisation authorisation, and where required support staff. It must provide facilities appropriate to the work, including hangar and workshop accommodation that protects the aircraft and components from the weather and gives a suitable working environment, secure stores for serviceable parts and materials, and office space. It must hold the tooling, equipment and current maintenance data necessary for the tasks within its scope, controlling that data so that only the latest applicable revision is used.
The organisation must also operate a system to ensure continued compliance. Part-145 requires a compliance monitoring (quality) function that audits the organisation's activities against the regulation and the MOE, raises findings, and verifies that corrective action is taken. It must operate an internal occurrence reporting and safety management system so that errors and hazards are reported, analysed and addressed, and it must report relevant occurrences to the authority within the timescales required.
The procedure for granting approval is therefore an assessment by the competent authority of the application, the MOE, the named personnel, the facilities, the data and the procedures, normally confirmed by an on-site audit. Once satisfied, the authority issues the approval certificate stating the scope. The approval does not lapse simply with time but remains valid while the organisation continues to comply and is not surrendered, suspended or revoked. The authority maintains continued oversight by periodic audit, and the organisation is obliged to allow that access and to keep its exposition and practices in step with the regulation.
Key points examiners look for
- Part-145 is Annex II to Regulation (EU) No 1321/2014; approval allows maintenance and issue of a CRS
- Maintenance Organisation Exposition (MOE) is the core document, accepted by the competent authority
- Accountable Manager has corporate authority and signs the MOE as a commitment to comply
- Sufficient competent personnel - certifying staff with Part-66 licence plus organisation authorisation, and support staff
- Suitable facilities: hangar/workshop, secure stores, controlled environment, office space
- Tooling, equipment and current controlled maintenance data for the scope of work
- Compliance monitoring (quality) system and internal safety/occurrence reporting
- Authority assessment and on-site audit before the scoped approval certificate is issued
- Approval remains valid while compliance continues; subject to continued authority oversight by audit
Model answer
The Accountable Manager is the single individual who carries ultimate corporate responsibility for a Part-145 approved maintenance organisation. Part-145, in Annex II to Regulation (EU) No 1321/2014, requires that an organisation nominate such a person, because the regulation seeks a clear point at which accountability for airworthiness rests. The Accountable Manager is normally the chief executive or a person of equivalent corporate standing, since the role demands genuine authority over the organisation's resources, not merely a title.
The defining responsibility of the post is to ensure that all the maintenance required can be financed and carried out to the standard demanded by Part-145. This is a financial as well as a technical commitment. The Accountable Manager must be able to commit the organisation's resources, so that adequate staff, facilities, tooling, current data and time are made available and are not sacrificed to commercial pressure. Where there is a conflict between commercial expediency and airworthiness, the regulation places the obligation on this individual to ensure that safety prevails.
This commitment is formally recorded. The Accountable Manager signs the Maintenance Organisation Exposition, and that signature is an undertaking that the organisation will comply with Part-145 and with the procedures set out in the exposition on a continuing basis. By signing, the Accountable Manager establishes and promotes the maintenance standards and the safety policy of the organisation, and accepts responsibility for them before the competent authority.
Although the Accountable Manager holds ultimate responsibility, the day-to-day management of the various functions is normally delegated to nominated post-holders, for example those responsible for maintenance, for the compliance monitoring or quality system, and for safety. The Accountable Manager remains accountable for the proper functioning of these areas even though they are managed by others, and must ensure that competent persons are appointed to them and that they are given the resources to do their work. The compliance monitoring function must be able to report findings directly so that the Accountable Manager is kept aware of the organisation's true level of compliance.
The Accountable Manager is also the organisation's principal interface with the competent authority on matters of accountability. Acceptance of the nominated Accountable Manager by the authority is part of the approval, and a change of Accountable Manager is a significant change that must be notified. The individual is expected to foster a positive safety culture, to ensure that the internal occurrence reporting system is supported, and to act on the information it produces.
In summary, the Accountable Manager gives the Part-145 approval its human anchor: a person with the corporate authority to provide resources, the duty to put airworthiness ahead of commercial convenience, the signature that binds the organisation to its exposition, and ultimate accountability to the authority for the conduct of all maintenance carried out.
Key points examiners look for
- Single individual with ultimate corporate responsibility, required by Part-145 (Annex II to Reg (EU) No 1321/2014)
- Normally the chief executive or equivalent - must hold real authority over resources
- Ensures all required maintenance can be financed and carried out to the required standard
- Must put airworthiness/safety ahead of commercial pressure
- Signs the Maintenance Organisation Exposition as a commitment to comply with Part-145
- Establishes and promotes the maintenance standards and safety policy
- Delegates day-to-day functions to nominated post-holders but remains accountable
- Acceptance by the competent authority is part of approval; change must be notified
- Supports the safety/occurrence reporting culture and acts on its findings
Model answer
The EASA Form 1, titled the Authorised Release Certificate, is the standard document used in the European system to release aircraft components. Its purpose is to certify that the component to which it relates has been produced or maintained in accordance with approved data and is in a condition for safe operation. It accompanies a component as documentary evidence of its airworthiness status, allowing the recipient to satisfy themselves that the part is acceptable for fitment to an aircraft.
The form is used principally in two situations. The first is at the end of production, where an appropriately approved production organisation releases a newly manufactured component, certifying that it conforms to its approved design data. The second, which most concerns the maintenance engineer, is the release of a component after maintenance. When a workshop carries out work on a component away from the aircraft, such as the overhaul, repair, inspection or modification of an item, the maintenance release for that component is made on an EASA Form 1 rather than by an entry in the aircraft technical log. The form is issued by the approved maintenance organisation that performed the work and certifies that the work was carried out in accordance with the applicable maintenance data and that the component is released to service.
The Form 1 carries the information needed to identify the item and to establish what has been done to it. It identifies the component by description, part number, quantity and serial or batch number, names the organisation that produced or maintained it together with its approval reference, and contains a release statement. A maintenance release indicates the work performed and the maintenance data used, and the certifying person signs and dates the appropriate release block with their authorisation reference. The form distinguishes clearly between a new-production release and a maintenance release so that the recipient understands the history of the item.
The practical significance of the form lies in traceability and acceptance. When a component arrives at a maintenance organisation or operator with a valid Form 1, the receiving organisation can establish its origin and status before accepting it into stores and fitting it to an aircraft. A serviceable component should be accompanied by such evidence; an unserviceable or unidentified component, or one whose history cannot be established, should not be installed. The form also supports the wider continuing airworthiness record, because it documents the maintenance event for the component for the period such records must be kept.
It should be noted that the maintenance release of a complete aircraft is not made on a Form 1; that is done by a Certificate of Release to Service. The Form 1 is the instrument for the release of components, and a candidate should be careful to keep the two distinct. Properly used, the EASA Form 1 is the link that lets airworthy parts move through the supply and maintenance chain with their status known and trusted.
Key points examiners look for
- EASA Form 1 = Authorised Release Certificate; certifies a component is produced/maintained to approved data and fit for safe operation
- Used to release new components from an approved production organisation
- Used to release components after maintenance by an approved maintenance organisation (overhaul/repair/inspection/mod)
- Identifies the item: description, part number, quantity, serial/batch number, organisation and approval reference
- Contains a release statement, work/data reference, and the certifier's signature, date and authorisation
- Distinguishes new-production release from maintenance release
- Provides traceability so a recipient can accept the part into stores and fit it
- A part without acceptable release evidence should not be installed
- Component release - NOT the aircraft CRS, which is a Certificate of Release to Service
Model answer
The keeping of maintenance records is a fundamental obligation of an approved maintenance organisation and of the continuing airworthiness system as a whole. Records provide the documentary proof that maintenance has been carried out, that it has been carried out correctly and by authorised persons, and that the aircraft and its components are airworthy. Without complete and accurate records the airworthiness of an aircraft cannot be established, so the records are as much a part of airworthiness as the physical work itself. The requirements for a Part-145 organisation are set out in Part-145, in Annex II to Regulation (EU) No 1321/2014, and they sit within the wider continuing airworthiness record-keeping of Part-M, Part-ML and Part-CAMO.
The organisation must retain a record of the maintenance work it has carried out. This includes details of the work performed, the maintenance data used, and a copy of the Certificate of Release to Service for aircraft work or the EASA Form 1 for component work. The record should be sufficient to show what was done, on which aircraft or component, when, and by whom, so that the certifying signature can be traced to an authorised person. Records of certifying staff and their authorisations, and of personnel competence and training, must also be kept, because the validity of a release depends on the authority of the person who signed it.
These records support several purposes. They allow the organisation, the operator, the continuing airworthiness management organisation and the competent authority to reconstruct the maintenance history of an aircraft, to demonstrate compliance with the maintenance programme and with Airworthiness Directives, to investigate occurrences, and to satisfy an audit. They also underpin the issue and continued validity of the airworthiness review.
Records must be kept in a manner that ensures their integrity. They are to be stored in a form and in conditions that protect them from damage, alteration and theft, and that allow them to be retrieved when needed; where records are held electronically they must be backed up and protected against loss. The organisation must give the competent authority access to its records.
As to retention, the governing principle is that records must be kept for the period specified in the applicable regulation, and that records are not destroyed while they remain relevant to current airworthiness. A maintenance record is generally retained for a defined period after the work is completed, and certain records are retained until superseded by equivalent work or for a defined period after the aircraft is permanently withdrawn from service. When an aircraft or component is transferred to another owner or operator, the relevant records are passed with it so that its history is not lost. A candidate should describe these principles - completeness, protection, accessibility, and retention for the period the regulation requires - rather than quote a particular number of years, because the precise periods are those laid down in the regulation and must be taken from it.
Key points examiners look for
- Records are the documentary proof of airworthiness - as important as the work itself
- Requirements set out in Part-145 (Annex II to Reg (EU) No 1321/2014), within wider Part-M/Part-ML/Part-CAMO record-keeping
- Keep records of work performed, data used, and the CRS (aircraft) or EASA Form 1 (component)
- Keep records of certifying staff authorisations and personnel competence/training
- Records let the operator/CAMO/authority reconstruct maintenance history and show AD/programme compliance
- Records stored to ensure integrity: protected from damage, alteration, theft; electronic records backed up
- Competent authority must be given access to records
- Retain records for the period specified in the applicable regulation (state the principle, not an invented number)
- Records pass with the aircraft/component on transfer of ownership
Model answer
The updated Part-66 syllabus brought in by Regulation (EU) 2023/989 introduced, as a distinct topic, the role of independent certifying staff. The concept recognises that not all maintenance is carried out within an approved maintenance organisation. Certain maintenance, particularly on lighter aircraft managed under the lighter continuing airworthiness rules such as Part-ML, may be released by a suitably qualified individual acting in a personal capacity rather than under an organisation approval. Such a person is an independent certifying staff member: a holder of an appropriate Part-66 aircraft maintenance licence who exercises certification privileges without the framework of a Part-145 organisation behind them.
The privilege of an independent certifying staff member is to certify the release to service of maintenance that they have personally performed or supervised and verified, within the scope of their Part-66 licence and ratings and within the categories of maintenance that the regulation permits to be released in this way. They issue a Certificate of Release to Service for that work in the aircraft's records, just as a certifying engineer within an organisation would for the corresponding aircraft work. The value of the arrangement is that it allows appropriate maintenance, especially on smaller aircraft, to be released without requiring the owner to use a full approved organisation for every task.
With that privilege comes a heightened set of responsibilities, because the individual lacks the supporting systems of an approved organisation. There is no organisational quality system, no separate post-holder structure and no organisational data control to fall back on, so the independent certifying staff member must personally ensure that they are competent for the task, that they use current and applicable maintenance data, that they have the necessary tooling and equipment, and that the work is carried out correctly before they sign. They are personally responsible for the airworthiness of the work they release, for keeping the required records of what they have done, and for working only within their authorised scope.
The limitations on the privilege follow directly from this. An independent certifying staff member may exercise the privilege only for the categories of aircraft and maintenance that the regulation allows to be certified independently; more complex aircraft and the more extensive categories of maintenance remain within the approved-organisation system. They may certify only within their own licence category and ratings, only when they are personally satisfied that the work has been done correctly, and only when their licence is valid and they meet any recency requirement. They remain subject to the oversight of the competent authority and must keep records that allow that oversight. Where the work falls outside what may be released independently, it must be passed to an appropriately approved organisation. In short, independent certifying staff extend the reach of individual certification into clearly bounded areas, in exchange for the individual personally carrying the full weight of the responsibility that an organisation would otherwise share.
Key points examiners look for
- Independent certifying staff introduced as a distinct topic by Regulation (EU) 2023/989 (updated Part-66, Module 10.4)
- A Part-66 licence holder who certifies maintenance without a Part-145 organisation framework
- Typically relevant to lighter aircraft managed under Part-ML
- Privilege: issue a CRS for maintenance personally performed/supervised, within licence scope and permitted categories
- Allows appropriate maintenance to be released without a full approved organisation
- Heightened personal responsibility - no organisational quality system or data control to rely on
- Must ensure own competence, current data, correct tooling, and correct completion before signing
- Must keep the required records and work only within authorised scope
- Limited to permitted aircraft/maintenance categories and own licence category/ratings; valid licence and recency required
- Remains subject to competent authority oversight; complex work goes to an approved organisation
Model answer
The Minimum Equipment List (MEL) and the Configuration Deviation List (CDL) are operational documents whose common purpose is to allow an aircraft to be dispatched with certain items inoperative or missing, while preserving an acceptable level of safety. They exist because it is neither practical nor necessary to defer every flight until the aircraft is in a fully complete and serviceable condition; instead, defined deviations are permitted under controlled conditions. Both documents are used within the framework of Regulation (EU) No 965/2012 (Air Operations) and the operator's continuing airworthiness arrangements.
The MEL deals with inoperative instruments and items of equipment. It is derived from, and may not be less restrictive than, the Master Minimum Equipment List (MMEL) produced by the type-certificate holder and approved as part of the type certification process. The operator develops its own MEL from the MMEL, tailored to its particular aircraft fitment and operation, and that MEL is approved by the competent authority. For each listed item the MEL states the number that must be operative, any operational (O) and maintenance (M) procedures or limitations that apply, and a rectification interval categorised by letter (commonly A, B, C and D) which sets the time within which the defect must be corrected. An item that does not appear in the MEL, or for which the required number cannot be met, renders the aircraft not airworthy for dispatch until rectified.
The CDL, by contrast, addresses secondary airframe parts that may be missing — for example certain fairings, access panels or seals — without affecting the structural integrity or safe operation of the aircraft, subject to stated limitations. The CDL is produced by the type-certificate holder and forms part of the approved Aircraft Flight Manual. Where a permitted part is absent, the CDL specifies any associated performance penalty or operating restriction that must be applied, and the aircraft may be dispatched accordingly.
In use, the flight crew and maintenance staff consult the relevant document when a defect or missing item is identified before flight. The decision to dispatch is recorded, the entry is carried forward in the aircraft technical log, and any O and M procedures are completed and certified as required. The MEL and CDL therefore provide a disciplined, approved means of operating with minor deviations while ensuring the aircraft remains within an acceptable and clearly defined safety standard until full rectification is achieved.
Key points examiners look for
- MEL permits dispatch with inoperative instruments/equipment; CDL permits dispatch with missing secondary airframe parts
- MEL is derived from the MMEL and cannot be less restrictive than it
- MMEL produced by type-certificate holder; operator MEL approved by competent authority
- MEL specifies number required operative, O (operational) and M (maintenance) procedures, and rectification intervals (categories A/B/C/D)
- Items not in the MEL render the aircraft not airworthy for dispatch
- CDL produced by TC holder and forms part of the approved Aircraft Flight Manual
- CDL states performance penalties / operating limitations for the missing part
- Both operated under Regulation (EU) No 965/2012; deferred defects recorded in the technical log
Model answer
Every aircraft, when operated, must carry a defined set of documents that together establish its identity, its airworthiness status, the conditions under which it may be flown, and the protection it carries. These requirements arise from the international standards of the Chicago Convention as implemented for European operations under Regulation (EU) No 965/2012, and they ensure that crew, operators and inspecting authorities can verify at any time that the flight is being conducted lawfully and safely. The exact list applicable to a given flight depends on the type of operation, but a standard core set applies to most aircraft.
The Certificate of Registration identifies the aircraft and the State in which it is registered, and must be carried to demonstrate national affiliation and ownership. The Certificate of Airworthiness establishes that the aircraft conforms to its approved type design and is in a condition for safe operation; for aircraft within the European system it is accompanied by a valid Airworthiness Review Certificate (ARC), which confirms that the continuing airworthiness of the aircraft has been reviewed and remains satisfactory. Where an aircraft does not meet the requirements for a Certificate of Airworthiness, a Permit to Fly is carried instead, together with its associated flight conditions.
The Noise Certificate, where applicable, shows that the aircraft complies with the environmental noise standards required for the routes it operates. The Aircraft Radio Licence authorises the carriage and use of the radio equipment installed. Weight and balance documentation, including the current mass and centre-of-gravity data, allows the crew to confirm that the aircraft is loaded within approved limits for each flight. Proof of insurance, in particular third-party liability cover, must also be available as required by law.
In addition to these airworthiness and identity documents, operational items are carried: a current copy of the operations manual or the relevant parts of it, the Aircraft Flight Manual or equivalent, the Minimum Equipment List, the journey log or equivalent record of the flight, the technical log, and licences and certificates of the operating crew. Together these documents allow the flight to be conducted, recorded and inspected in full compliance with the applicable regulations. The list should always be confirmed against the operator's procedures and the requirements of the State of registry for the specific operation.
Key points examiners look for
- Certificate of Registration — identifies aircraft and State of registry
- Certificate of Airworthiness — conformity to type design and safe condition
- Airworthiness Review Certificate (ARC) accompanies the C of A in the EU system
- Permit to Fly (with flight conditions) carried where no C of A applies
- Noise Certificate where applicable
- Aircraft Radio Licence / station licence
- Weight and balance / mass and CG documentation
- Proof of insurance (third-party liability)
- Operational documents: operations manual, AFM, MEL, journey/technical log, crew licences
- Requirements stem from the Chicago Convention as implemented under Regulation (EU) No 965/2012
Model answer
The Aircraft Technical Log is the primary on-board record through which the airworthiness and serviceability status of an aircraft is communicated between flight crew and maintenance personnel. Its purpose is to provide a continuous, legible and reliable account of the aircraft's operation and condition, so that every flight is dispatched with full knowledge of any defects, deferrals and maintenance actions, and so that the operator and the competent authority can demonstrate that the aircraft has been operated and maintained in accordance with the applicable requirements. The technical log forms part of the continuing airworthiness records system required under Regulation (EU) No 1321/2014, and its use is closely linked to the operational requirements of Regulation (EU) No 965/2012.
The technical log records the essential operational and technical information for each sector. This typically includes the date, the flight or sector details, the aircraft flight and block times, the engine cycles or hours where relevant, and fuel and oil uplift figures. Crucially it records defects observed during operation, entered by the flight crew, together with the corrective action taken by maintenance and the certification of that action. It carries forward any deferred defects, with reference to the Minimum Equipment List and the applicable rectification interval, so that the deferral is visible on subsequent sectors until it is cleared. It also shows that any due maintenance has been accomplished and, importantly, the Certificate of Release to Service confirming the aircraft is fit for the intended flight.
In use, the flight crew enter defects clearly and factually as they are identified, and at the end of each flight or duty period they record the relevant operating data. Before accepting the aircraft for the next flight, the commander reviews the technical log to confirm its serviceability, to see any deferred items and limitations, and to satisfy themselves that a valid certificate of release to service is in place. Maintenance staff use the same document to identify reported defects, to carry out and certify the necessary rectification, to raise and clear deferred defects, and to record scheduled maintenance carried out at the line. Because it is a controlled document, entries must be accurate, timely and legible, errors must be corrected without obliteration, and the completed pages are retained as part of the aircraft's records. The technical log therefore serves as the working bridge between operations and maintenance, ensuring that no aircraft flies without a clear and certified statement of its airworthiness status.
Key points examiners look for
- Primary on-board record linking flight crew and maintenance on aircraft status
- Provides continuous, legible account of operation and condition; demonstrates compliance to the authority
- Records flight/block times, engine cycles or hours, fuel and oil uplift
- Records defects reported by crew and the corrective/rectification action certified by maintenance
- Carries forward deferred defects with MEL reference and rectification interval
- Contains the Certificate of Release to Service confirming fitness for flight
- Commander reviews it before accepting the aircraft; maintenance acts on and clears defects
- Part of continuing airworthiness records under Regulation (EU) No 1321/2014; entries accurate, timely, no obliteration, retained
Model answer
The Type Certificate, the Type Certificate Data Sheet and the Supplemental Type Certificate are the principal instruments through which the design of an aircraft, engine or propeller, and any later changes to it, are formally approved. Within the European system they are issued under Part 21, established by Regulation (EU) No 748/2012, and they provide the design basis on which individual aircraft are then certificated as airworthy. Together they record what the approved design is, the conditions and limitations attached to it, and how it may be modified.
The Type Certificate is the approval of the type design of a product — an aircraft, engine or propeller. It is issued by EASA to the design organisation, normally the manufacturer, once the agency is satisfied that the type design meets the applicable certification specifications and environmental requirements and that no feature makes it unsafe. The Type Certificate signifies that the design as a whole is acceptable; it is the foundation upon which production conformity and the issue of Certificates of Airworthiness for individual aircraft depend.
The Type Certificate Data Sheet is the document that accompanies the Type Certificate and defines, in detail, the approved configuration and the limitations of the type. It records the essential particulars and the conditions under which the product remains within its approved design, such as approved engine and propeller fitments, weights and centre-of-gravity limits, control surface movements, fuel specifications, and any required placards or notes. The TCDS is therefore the authoritative reference against which an aircraft is checked for conformity to its type design, and it is amended as the approved configuration of the type evolves.
A Supplemental Type Certificate is issued to approve a major change to a type design that is introduced after the original Type Certificate, where the change is significant enough to be certificated in its own right rather than as a minor modification. Typical examples include the installation of a different engine variant, a major avionics or interior change, or a structural modification. The STC approves the change and the data supporting it, and it is held alongside the original Type Certificate; the aircraft then conforms to its type design as modified by the applicable STCs. In summary, the Type Certificate approves the basic design, the TCDS records and bounds that approved design, and the STC provides the controlled route by which significant changes are added to it, all under the Part 21 framework.
Key points examiners look for
- Type Certificate, TCDS and STC are design-approval instruments issued under Part 21 (Regulation (EU) No 748/2012)
- Type Certificate approves the type design of a product (aircraft, engine or propeller)
- Issued by EASA once the design meets the applicable certification specifications and environmental requirements
- TC is the basis for production conformity and issue of Certificates of Airworthiness
- TCDS defines the approved configuration and limitations (weights, CG, engine/propeller fitment, etc.)
- TCDS is the reference for checking conformity to type design and is amended as the type evolves
- STC approves a major change to a type design made after the original TC
- Aircraft conforms to its type design as modified by applicable STCs
Model answer
The Certificate of Airworthiness and the Permit to Fly are the documents that authorise an aircraft to be flown, each addressing a different airworthiness situation. They are issued under Part 21, established by Regulation (EU) No 748/2012, and they connect the approved design of the type to the airworthiness of the individual aircraft. Whereas the Certificate of Airworthiness attests that an aircraft conforms to an approved type design and is in a condition for safe operation, the Permit to Fly authorises flight when those conditions are not, or cannot, be fully met.
A standard Certificate of Airworthiness is issued for an aircraft that conforms to a Type Certificate and is in a condition for safe operation. It is issued in respect of the individual aircraft and, within the European system, is of unlimited duration provided the aircraft remains in compliance with its approved design and the continuing airworthiness requirements; its continued validity is confirmed through the Airworthiness Review Certificate. The Certificate of Airworthiness is, in effect, the statement that the aircraft is airworthy and may be operated for its intended purpose.
A Restricted Certificate of Airworthiness is issued where an aircraft does not meet the requirements for a standard Certificate of Airworthiness but conforms to a restricted type design, or where it complies with specific certification specifications that ensure adequate safety for a particular purpose. Such aircraft are airworthy within defined limitations, and the restricted certificate reflects those limitations on how and where the aircraft may be operated.
The Permit to Fly is issued when an aircraft is not able to meet, or temporarily does not meet, the requirements for a Certificate of Airworthiness, but is capable of safe flight under defined conditions. Typical circumstances include flying a newly built or modified aircraft for development or certification, ferrying an aircraft to a location where maintenance or repairs are to be carried out, delivering or exporting an aircraft, demonstrating an aircraft, or flying it for production test purposes. Before a Permit to Fly can be issued, the flight conditions must be established and approved; these define the configuration, limitations and any restrictions, such as crew only and prohibited overflight of populated areas, under which safe flight is assured. The Permit to Fly, together with its approved flight conditions, then authorises operation within those bounds. In summary, the Certificate of Airworthiness is the normal authority for an aircraft conforming to its approved type design, the restricted certificate covers aircraft airworthy within special limitations, and the Permit to Fly provides a controlled means of flying an aircraft that cannot currently hold a Certificate of Airworthiness.
Key points examiners look for
- C of A and Permit to Fly authorise flight; both issued under Part 21 (Regulation (EU) No 748/2012)
- C of A attests the aircraft conforms to an approved type design and is in a condition for safe operation
- Issued per individual aircraft; unlimited duration while compliance is maintained
- Validity confirmed/maintained through the Airworthiness Review Certificate (ARC)
- Restricted C of A for aircraft conforming to a restricted type design or special certification specifications, with limitations
- Permit to Fly issued when the aircraft cannot meet C of A requirements but can fly safely under defined conditions
- Typical Permit to Fly uses: development/test flight, ferry for repair, delivery/export, demonstration, production flight
- Flight conditions must be established and approved before a Permit to Fly is issued
Model answer
An Airworthiness Directive (AD) is a formal notification issued by the competent airworthiness authority — within the European system this is EASA, acting under Regulation (EU) No 748/2012 (Part 21) and supported by the continuing-airworthiness obligations of Regulation (EU) No 1321/2014. An AD is issued when an unsafe condition has been identified in an aircraft, engine, propeller, part or appliance, and when that condition is likely to exist or develop in other products of the same type design. Its purpose is to mandate the corrective action necessary to restore the product to an acceptable level of safety, and it therefore forms part of the type design's continued integrity once the product is in service.
Compliance with an AD is mandatory in law, not optional. Under the continuing-airworthiness rules the owner or operator, supported by the maintenance organisation and the organisation managing continuing airworthiness, is responsible for ensuring that every applicable AD is accomplished within the compliance time the AD specifies. Until an applicable AD has been complied with, the aircraft is not in a condition for safe operation and its Certificate of Airworthiness is, in effect, not valid for flight. An AD will state its applicability, the unsafe condition, the required action, the compliance time and any recurring inspection interval; the engineer must accomplish the work using the approved data the AD references and record that accomplishment in the aircraft and component records so the action can be audited later.
The relationship to a Service Bulletin (SB) is important and frequently tested. A Service Bulletin is issued by the type-certificate holder or manufacturer to recommend a modification, inspection or change in maintenance practice. By itself an SB is advisory, and compliance with it is at the discretion of the operator, unless it has been made mandatory. The common route to mandatory status is that the authority reviews the safety significance of the SB and issues an AD that calls up the SB as the approved method of compliance. In that case the SB provides the technical instructions while the AD provides the legal force, and the work must then be done within the AD's timescale rather than at the operator's convenience.
In conclusion, an AD is the regulator's mandatory instrument for correcting an identified unsafe condition across a fleet, and its accomplishment is a precondition of lawful operation. A Service Bulletin is the manufacturer's recommendation; it becomes compulsory only when an AD adopts it. The certifying engineer must distinguish clearly between the two, comply with every applicable AD on time, and keep accurate records of compliance.
Key points examiners look for
- AD issued by the competent authority (EASA) when an unsafe condition exists and is likely to affect other products of the same type
- AD purpose: mandate corrective action to restore an acceptable level of safety
- Compliance is mandatory in law; owner/operator responsible, supported by maintenance organisation and continuing-airworthiness management
- Aircraft not airworthy / C of A not valid for flight until an applicable AD is complied with
- AD states applicability, unsafe condition, required action, compliance time and any recurring interval
- Accomplishment must be recorded in aircraft/component records using the approved data referenced
- Service Bulletin issued by TC holder/manufacturer; advisory and at operator discretion by itself
- An SB becomes mandatory when an AD adopts it as the method of compliance: SB gives technical instructions, AD gives legal force and timescale
- Engineer must distinguish AD (mandatory) from SB (recommended)
Model answer
The Aircraft Maintenance Programme (AMP) is the controlling document that defines all the scheduled maintenance an individual aircraft must receive throughout its operating life in order to remain airworthy. It is a requirement of the continuing-airworthiness rules in Regulation (EU) No 1321/2014, under Part-M for the general fleet and under the lighter Part-ML regime for the aircraft to which Part-ML applies. The AMP exists so that maintenance is carried out at the right interval, on the right item, by the right method, rather than being left to judgement, and so that the aircraft's airworthiness is preserved in a planned and auditable way.
In terms of content, the AMP is built upon the maintenance instructions produced by the type-certificate holder — principally the Maintenance Review Board report where one exists, the manufacturer's Maintenance Planning Document and the recommendations in the maintenance manual. It lists the scheduled tasks and their intervals, expressed in calendar time, flight hours or flight cycles as appropriate, together with the inspections, lubrications, functional and operational checks, component life limits and any mandatory continued-airworthiness items. It must also account for the aircraft's role and operating environment, applicable Airworthiness Directives and any mandatory modifications, and the operator's own reliability experience where a reliability programme is run. Optional manufacturer recommendations may be incorporated at the operator's discretion.
Regarding approval, the AMP is the responsibility of the owner or operator. Where the continuing airworthiness is managed by a Part-CAMO, the programme is normally approved by that organisation under its approved procedures, or it is approved by the competent authority. For the lighter aircraft under Part-ML the rules additionally allow an owner-declared programme, where the owner takes direct responsibility for the content within the limits the regulation permits. Whichever route applies, an approved AMP must exist before the aircraft is operated, and the maintenance actually carried out must follow it.
Amendment of the AMP is a controlled process because the programme is a live document. It must be reviewed and updated to remain effective: changes are driven by new or revised manufacturer instructions, newly issued Airworthiness Directives, embodied modifications that introduce new maintenance requirements, changes in the aircraft's utilisation or role, and the findings of the reliability programme, which may justify escalating or reducing a task interval. The AMP is reviewed periodically and whenever such a trigger occurs; each amendment is then approved through the same route that approved the original programme and is properly recorded and controlled so that the version in use is always the current approved one.
In conclusion, the AMP is the planned schedule of all required maintenance for an aircraft, derived from approved type data and tailored to the operation. It must be formally approved before use and kept current through a disciplined amendment process, ensuring that continuing airworthiness is maintained throughout the aircraft's service life.
Key points examiners look for
- AMP defines all scheduled maintenance required to keep an individual aircraft airworthy
- Required by Regulation (EU) No 1321/2014: Part-M for the general fleet, Part-ML for lighter aircraft
- Content derived from TC holder data: MRB report, Maintenance Planning Document, maintenance manual recommendations
- Lists tasks and intervals (calendar/hours/cycles), inspections, life limits, mandatory items, applicable ADs and modifications
- Accounts for aircraft role/environment and operator reliability experience
- Approval is owner/operator responsibility; via approved Part-CAMO procedures, by the competent authority, or owner-declared under Part-ML
- An approved AMP must exist before operation and maintenance must follow it
- Amendment triggered by new manufacturer data, new ADs, modifications, changed utilisation, reliability findings
- Amendments approved through the same route and version-controlled so only the current approved programme is used
Model answer
A Part-CAMO is a Continuing Airworthiness Management Organisation approved under Regulation (EU) No 1321/2014. Its role is to manage, on behalf of the owner or operator, the continuing airworthiness of the aircraft entrusted to it, so that those aircraft remain in an airworthy condition and may be released for safe operation. The CAMO does not normally perform the hands-on maintenance itself; rather it manages the airworthiness process and ensures that the necessary maintenance is correctly defined, contracted and accomplished. For commercial air transport, continuing-airworthiness management must be carried out by an approved CAMO, which underlines how central the organisation is to safe operation.
The principal responsibilities of a CAMO are wide-ranging. It is responsible for developing and controlling the Aircraft Maintenance Programme and obtaining its approval; for ensuring that all scheduled maintenance, Airworthiness Directives and applicable modifications are accomplished on time; for assessing manufacturer service information and deciding on its embodiment; and for ensuring that defects and damage are dealt with using approved data. It manages the aircraft's continuing-airworthiness records, controls the technical-log system, arranges for maintenance to be carried out by an appropriately approved maintenance organisation, and ensures that the aircraft is released to service correctly before flight. The CAMO works under an exposition that describes its procedures, operates under an accountable manager, and is required to run a compliance-monitoring system so that its own activities are continuously checked against the regulation.
The Airworthiness Review Certificate (ARC) is the document that confirms, at a point in time, that the aircraft's continuing airworthiness has been satisfactorily reviewed and that the aircraft is airworthy. The airworthiness review is a structured examination of the aircraft's records and, where required, a physical survey of the aircraft, carried out to confirm that the maintenance programme is being followed, that all applicable ADs and mandatory actions have been embodied, that life-limited parts are within limits, that records are complete and consistent, and that no unresolved deficiencies exist. The ARC has a defined period of validity and supports the validity of the Certificate of Airworthiness, which does not itself need periodic renewal in the way the ARC does.
An appropriately approved and privileged CAMO may carry out the airworthiness review and issue the ARC itself through its authorised airworthiness review staff; alternatively the review may be performed and the certificate issued by the competent authority, and recommendations for issue may be made to the authority where the organisation is not privileged to issue directly. A valid ARC may also be extended in defined circumstances by a suitably approved organisation when the prescribed conditions are met.
In conclusion, the Part-CAMO is the organisation that manages an aircraft's continuing airworthiness on the owner's behalf, controlling the maintenance programme, ADs, records and release to service. The ARC is its key output confirming airworthiness for a defined period, issued either by a privileged CAMO or by the competent authority on the basis of a satisfactory airworthiness review.
Key points examiners look for
- Part-CAMO = Continuing Airworthiness Management Organisation approved under Regulation (EU) No 1321/2014
- Manages continuing airworthiness on the owner/operator's behalf; does not normally do hands-on maintenance
- Commercial air transport requires continuing-airworthiness management by an approved CAMO
- Responsibilities: develop/control the AMP, ensure ADs, scheduled maintenance and modifications are done on time, assess service information, manage records and technical log, arrange release to service
- Operates under an exposition and accountable manager with a compliance-monitoring system
- ARC confirms at a point in time that continuing airworthiness has been reviewed and the aircraft is airworthy
- Airworthiness review = records review and where required physical survey: programme followed, ADs embodied, life limits respected, records complete
- ARC has a defined validity period and supports validity of the Certificate of Airworthiness
- A privileged CAMO may issue the ARC via its airworthiness review staff, or the competent authority issues it; valid ARC may be extended under defined conditions
Model answer
Oversight in continuing airworthiness is the means by which the aviation system continually checks that the rules are being followed and that safety is being maintained over time. It operates on two complementary levels: internal oversight exercised by the organisation upon itself, and external oversight exercised by the competent authority upon the organisation. This subject is part of the updated Module 10 syllabus introduced by Regulation (EU) 2023/989 amending Regulation (EU) No 1321/2014, reflecting the increased emphasis the regulator places on a managed, systematic approach to airworthiness rather than reliance on isolated compliance checks.
Within the organisation, compliance monitoring is the structured internal process by which a continuing-airworthiness management organisation, and indeed an approved maintenance organisation, verifies that its own procedures meet the requirements of the regulation and, just as importantly, that those procedures are actually being followed in day-to-day practice. A compliance-monitoring function operates with a degree of independence from the activities it audits, so that it can report objectively. It plans and carries out audits across all areas of the organisation on a programme basis, identifies findings where practice departs from procedure or from the regulation, ensures that root causes are investigated and that corrective and preventive actions are taken, and follows those actions through to confirm they have been effective and closed. The accountable manager carries ultimate responsibility for the system, and the function feeds into the organisation's wider management of safety, so that hazards and trends are identified and acted upon rather than allowed to recur.
The competent authority provides the external layer of oversight. It is responsible for granting approvals and for the continued surveillance of the organisations and aircraft within its remit. It does this through a programme of audits and inspections, planned according to the risk presented, examining whether the organisation's exposition, procedures, personnel and actual activities continue to satisfy the regulation. Where the authority identifies a finding, it requires correction within a defined timescale, and it retains the power to limit, suspend or revoke an approval or certificate where safety is not being assured. In this way the authority does not duplicate the day-to-day work of the organisation; instead it samples and verifies, holding the organisation accountable for its own compliance.
The principle that ties these two levels together is that primary responsibility for compliance and safety rests with the organisation, while the authority provides independent assurance that this responsibility is being discharged. Internal compliance monitoring catches deviations early and drives improvement from within, and the authority's oversight confirms, on a sampling basis, that the system as a whole is working.
In conclusion, effective oversight in continuing airworthiness depends on a robust internal compliance-monitoring system, owned by the accountable manager and operating with independence, supported by risk-based surveillance from the competent authority. Together they provide layered assurance that aircraft remain airworthy and that the regulation is consistently met.
Key points examiners look for
- Oversight operates on two levels: internal (organisation on itself) and external (competent authority on the organisation)
- Part of the updated Module 10 syllabus added by Regulation (EU) 2023/989 amending Regulation (EU) No 1321/2014
- Compliance monitoring is a structured internal process verifying procedures meet the regulation AND are followed in practice
- Compliance-monitoring function operates with independence from the activities it audits
- Audits planned on a programme basis; findings raised, root cause investigated, corrective/preventive action taken and closed out
- Accountable manager holds ultimate responsibility; function feeds the wider management of safety
- Competent authority grants approvals and conducts continued, risk-based surveillance through audits and inspections
- Authority can require correction within a timescale and can limit, suspend or revoke approvals/certificates
- Principle: primary responsibility rests with the organisation; the authority provides independent assurance on a sampling basis
Model answer
Modern aircraft and the organisations that maintain them depend heavily on digital systems, networked equipment and electronically transmitted data. Maintenance data, configuration files, software loads and aeronautical databases are now delivered, stored and uploaded electronically, and much of the ground equipment used in maintenance is itself a computer connected to wider networks. This dependence creates a new category of risk: an information-security event, whether a deliberate cyber attack or accidental corruption, could compromise the integrity of data on which airworthiness depends and therefore become a genuine flight-safety hazard. Recognising this, the regulator has made the management of information-security risk a formal continuing-airworthiness concern, and it appears in the updated Module 10 syllabus introduced by Regulation (EU) 2023/989.
The regulatory framework for this is known as Part-IS, established by Regulation (EU) 2023/203, with the parallel requirements applicable to design and production organisations carried in Regulation (EU) 2022/1645. Part-IS requires the relevant aviation organisations — including those engaged in continuing airworthiness and maintenance — to identify and manage information-security risks that could have an impact on aviation safety. The framework is deliberately built on the same management-system philosophy already familiar from safety and compliance monitoring, so that information security is integrated into how the organisation is run rather than treated as a separate technical afterthought.
At the heart of Part-IS is the requirement for the organisation to establish and maintain an information-security management system, commonly an ISMS. The organisation must identify the information assets and interfaces that could affect safety, assess the threats and vulnerabilities to them, and evaluate the resulting risk. It must then put in place proportionate protective measures to reduce that risk to an acceptable level, covering both the prevention of incidents and the ability to detect, respond to and recover from them when they occur. The organisation is required to have arrangements for reporting and managing information-security events and to ensure that lessons are fed back into the system. As with other management systems, it operates under the accountability of senior management and is subject to internal monitoring and to oversight by the competent authority.
For the individual certifying engineer the practical consequences are about awareness and discipline. Staff must understand that the data they use must come from a trusted, controlled source and must be verified before use, that software and database loads must be obtained and handled through approved channels, that maintenance equipment and removable media must be controlled to prevent the introduction of malicious software, and that any suspected information-security event must be reported promptly through the organisation's procedures.
In conclusion, information security has become part of continuing airworthiness because the integrity of the data and digital systems used in maintenance directly affects flight safety. Part-IS, under Regulation (EU) 2023/203 and the related Regulation (EU) 2022/1645, requires organisations to manage these risks through an information-security management system, while certifying staff contribute by using only trusted data, controlling their equipment and reporting any suspected event.
Key points examiners look for
- Maintenance now depends on digital systems, electronic data, software loads and networked ground equipment
- An information-security event can corrupt airworthiness-critical data and become a flight-safety hazard
- Information-security management added to Module 10 by Regulation (EU) 2023/989
- Part-IS framework established by Regulation (EU) 2023/203; parallel design/production requirements in Regulation (EU) 2022/1645
- Part-IS requires organisations in continuing airworthiness and maintenance to identify and manage information-security risks affecting safety
- Built on the same management-system philosophy as safety and compliance monitoring
- Core requirement: establish and maintain an information-security management system (ISMS)
- ISMS: identify assets, assess threats/vulnerabilities/risk, apply proportionate protection, detect/respond/recover, report and learn from events
- Operates under senior-management accountability with internal monitoring and competent-authority oversight
- Certifying staff: use only trusted/verified data, control software loads and removable media, report suspected events promptly
More Part-66 essay questions
Sources
- Regulation (EU) No 1321/2014, Annex III (Part-66), Appendix II — Basic Examination Standard (essay format, 20-minute timing, 75% Key-Points pass mark).
- Commission Implementing Regulation (EU) 2023/989 — updated Part-66, applicable 12 June 2024.
- Model answers are written to the Appendix II standard and independently fact-checked against the EASA Part-66 syllabus. They are study aids, not official exam questions.