Development assurance objectives checklist
Track the development assurance objectives for each assurance level, with independence, evidence and completion by process area, for airborne hardware and software.
Safety and securityFor membersHow it worksSourcesWhere it helps
Register or sign in to use this tool
The working tool, its inputs and its results are for registered members. Registration is free and takes a minute. You come back to this page afterwards.
How it works
Airborne software and electronic hardware are developed to a design assurance level, and the level sets how many objectives must be met and how strictly. This checklist proposes the objectives for the standard and level you choose, grouped by process area, with whether each applies and whether independence is expected, then tracks status, evidence and owners and shows completion area by area.
- Choose the standard and the level. Pick software (RTCA DO-178C) or electronic hardware (RTCA DO-254) and the design assurance level from A, the most demanding, to E. The level comes from the system safety assessment of the function the software or hardware contributes to. Level E has no objectives.
- Propose the objectives. The proposed rows are the Hub's condensed groupings in eight process areas: planning, requirements, design, implementation and coding, verification and validation, configuration management, process assurance and certification liaison. Each row says whether it applies at the level and whether independence is expected. A row applies from the least demanding level it names up to level A.
an objective applies at a level if the level is at or above the least demanding level it names; levels rank A > B > C > D > E - Set independence. Independence means the person who checks the work is not the person who produced it. Where the Hub is sure, the row says required or not required. It is sure of two things: hardware requirements are validated with independence at levels A and B, and the reviews of software requirements, design and code are independent at level A. Everything else that may need independence is marked confirm. Set it from your copy of the standard.
- Track status and evidence. Mark each applicable objective not started, in progress or done, name the owner and give the evidence reference: the document number, report or review record that shows it was met. An objective counts as done only when its status is done.
- Read completion, independence and open items. Completion is the share of applicable objectives that are done, overall and for each process area. The independence list shows the done and open objectives that need an independent check. Open items are the applicable objectives that are not done.
completion = done objectives / applicable objectives; area completion = done in the area / applicable in the area - Compare with the standard's count. For DO-178C the Annex A tables list 71 objectives at level A, 69 at level B, 62 at level C and 26 at level D, and none at level E. The Hub's rows group several of these into one, so its counts are smaller; the comparison table shows both so the grouping is not mistaken for the standard.
Assumptions
- The objective wording is the Hub's own and condensed; it is not the numbered objective text of either standard.
- Applicability by level follows the commonly published pattern of the annex tables. Check each row against your copy of the standard and the certification plan you have agreed with your authority.
- Independence is stated only where the Hub is sure; otherwise the row says confirm and the member decides.
- A row counts as done only on the member's word. The tool does not check the evidence.
Limits and warnings
- A tracking aid, not a compliance assessment. Your certification authority decides whether the objectives are met.
- The Hub does not reproduce the standards or their tables. Process requirements, activities and data items are in the standards.
- The supplements for tool qualification (DO-330), model-based development (DO-331), object-oriented technology (DO-332) and formal methods (DO-333) add objectives that this checklist does not list.
- Single event effects and the other topics the FAA's hardware circular leaves out are not covered.
- Use of the standards depends on the authority and the aircraft programme: the FAA and EASA publish their own recognition documents.
Sources
The methods and default figures rest on these public sources. The wording here is our own; read the source for its full text.
- DO-178C, Software Considerations in Airborne Systems and Equipment Certification (EUROCAE ED-12C), RTCA, Inc., 13 December 2011. The software standard; cited by name, section and annex table only.
- DO-254, Design Assurance Guidance for Airborne Electronic Hardware (EUROCAE ED-80), RTCA, Inc., 19 April 2000. The hardware standard; cited by name, section and appendix table only.
- AC 20-115D, Airborne Software Development Assurance Using EUROCAE ED-12() and RTCA DO-178() (opens in a new tab), U.S. Federal Aviation Administration, 21 July 2017. Recognises DO-178C as an acceptable means of compliance for the software aspects of airborne systems.
- AC 20-152A, Development Assurance for Airborne Electronic Hardware (opens in a new tab), U.S. Federal Aviation Administration, 7 October 2022. Recognises DO-254 and adds objectives for custom devices, commercial IP, commercial devices and circuit board assemblies. It covers hardware levels A to C and does not require its objectives at level D.
- AMC 20-152A, Development Assurance for Airborne Electronic Hardware (AEH) (opens in a new tab), European Union Aviation Safety Agency (EASA), Easy Access Rules for Acceptable Means of Compliance (AMC-20), ED Decision 2020/010/R; compiled publication updated 23 June 2023. The European counterpart of the FAA's hardware circular.
Where it helps
The lifecycle stages this tool serves: 2 stages in 1 lifecycle.
More safety and security tools
- Hardware safety metrics calculator
- Safety integrity level determination
- Fault tree calculator
- Fault injection campaign sizer
- Safety function failure probability calculator
- Threat risk assessment calculator
- Vulnerability severity calculator
- Side-channel leakage assessment
- Software update impact assessment
- SBOM licence checker
- Medical device classification helper
Terms on this page
- DAL
- Design assurance level (DAL): the level, from A to E, assigned to airborne software or electronic hardware according to the worst effect its failure could have on the aircraft.
- DO-178C
- The airborne software assurance standard defining objectives by design assurance level from A to E, covering planning, development, verification, configuration management and quality assurance.
- DO-254
- The avionics guidance governing development of complex airborne hardware such as FPGAs and ASICs, requiring planning, requirements traceability, verification and, at the highest design assurance le...
- Configuration management
- The discipline of identifying the items that make up a product, such as requirements, design files, software, tools and documents, controlling changes to them and recording which versions form each...
- Tool qualification
- Showing that a software tool used to develop or verify a safety-related or airborne product can be trusted for the credit taken from its output, so that its errors cannot go undetected.
- DO-330
- The RTCA guidance on software tool qualification, describing how to show that a tool used to develop or verify airborne software or hardware can be trusted for the credit taken from it.
Tell us what you're after and leave your email: we'll connect you with the right person on the Hub.