DATEATTACHMENT 98300.10 CHG XX
NOTE: The FAA and NTSB must be able to review the records and information at their respective offices when necessary and on request. Persons or entities can fulfill this request in many ways, i.e., floppy disk, paper copy, etc.
Procedures for reviewing the computerized personal identification codes system to ensure that the system will not permit password duplication.
Procedures for auditing the computer system every 60 days to ensure the integrity of the system. A record of the audit should be completed and retained on file as part of the operator’s record retention requirements. This audit may be a computer program that automatically audits itself.
Audit procedures to ensure the integrity of each computerized workstation. If the workstations are server-based and contain no inherent attributes that enable or disable access, there is no need for each workstation to be audited.
Procedures describing how the operator will ensure that the computerized records are transmitted in accordance with the appropriate regulatory requirements to customers or to another operator. The records may be either electronic or paper copies.
Procedures to ensure that records required to be transferred with an aircraft are in a format (either electronic or on paper) that is acceptable to the new owner/operator.
Guidelines for authorized representatives of the owner/operator to use electronic signatures and to have access to the appropriate records.
A description of the training procedure and requirements necessary to authorize access to the computer hardware and software system. (Recognizing that the details will vary with the different individuals who need access,
the training description may simply be part of the position description. Its location should be referenced in the RSM/QCM.)
Security, to include the following:
The electronic system should protect confidential information.
The system should ensure that the information is not altered in an unauthorized way.
A corresponding policy and management structure should support the computer hardware and computer software that delivers the information.
F.Air carrier procedures. If the repair station is performing maintenance for an air carrier (14 CFR Parts 121, 125, 129, or 135), verify the repair station maintenance records reflect the requirements found in the air carrier or air operator’s manual. The forms and procedures may differ from those the repair station normally uses.
Malfunction defect reporting. Verify the repair station has submitted reports of failures, malfunctions, or defects to the CHDO within 96 hours of discovery and that those reports were submitted in accordance with RSM/QCM requirements.
Analyze Findings: Evaluate all deficiencies to determine if corrective actions will be required.
Conduct Debriefing: Brief the certificate holder on the inspection results. Discuss any deficiencies and possible corrective actions.
D. Complete PTRS.
E. Complete the Task. Competition of this task will result in the following.
Send a letter to the operator documenting all deficiencies