View source for ARP4754

{{Short description|Aerospace Practice}}
{{Infobox technology standard
| title               = Guidelines For Development Of Civil Aircraft and Systems 
| image               = SAE_International_logo.svg
| caption             = 
| status              = 
| year_started        = 1996
| version             = B
| versionDate         = {{Start date|2023|12}}
| preview             = 
| previewDate         = 
| organization        = [[SAE International]]
| related_standards   = 
| abbreviation        = ARP4754
| domain              = Aviation Safety
| website             = {{URL|https://www.sae.org/standards/content/arp4754b/}}
}}
'''ARP4754()''', [[SAE_International#Aerospace_industry_standards|Aerospace Recommended Practice]] (ARP) '''Guidelines for Development of Civil Aircraft and Systems''', is a published standard from [[SAE International]], dealing with the development processes which support [[Type certificate|certification]] of [[Avionics#Aircraft avionics|Aircraft systems]], addressing  "the complete aircraft development cycle, from systems requirements through systems verification."<ref name= Potter>{{cite conference |title= Complying with DO-178C and DO-331 using Model-Based Design |conference= SAE 2012 Aerospace Electronics and Avionics Systems Conference (12AEAS) |author= Bill Potter |publisher= [[MathWorks|MathWorks, Inc.]] |url= https://www.mathworks.com/tagteam/74250_Paper%20Number%2012AEAS-0090-finalweb.pdf |access-date= 2019-02-13 }}</ref> Since their joint release in 2002, compliance with the guidelines and methods described within ARP4754() and its companion [[ARP4761|ARP4761()]]<ref>{{cite book |author= Marc Ronell |chapter= Discussion of aviation software oversight improvement |date= November 18–20, 2020 |access-date= 2024-12-03 |chapter-url= https://dl.acm.org/doi/pdf/10.1145/3426428.3426926 |page= 128 |title= Proceedings of the 2020 ACM SIGPLAN International Symposium on New Ideas, New Paradigms, and Reflections on Programming and Software |doi= 10.1145/3426428.3426926 |isbn= 978-1-4503-8178-9 |quote= ARP4754 and ARP4761 describe guidelines and methods of performing a safety assessment for the certification of civil aircraft. }}</ref> have become mandatory for effectively all [[civil aviation]] world-wide.<ref>{{cite journal |title= The twin pillars of safety revisited: ARP4754B and ARP4761A |journal= Update |publisher= [[SAE International]] |page= 40 |quote= since then, compliance has become mandatory for 99% of the world's civil aircraft. |access-date= 2024-12-03 |date= December 2023 |url= https://www.nxtbook.com/smg/sae/23UPD12/index.php?startid=41#/p/40  }}</ref>

Revision A was released in December 2010. It was recognized by the FAA through [[Advisory circular|Advisory Circular]] AC 20-174 published November 2011.<ref>{{cite book|url= https://books.google.com/books?id=nAlEDwAAQBAJ |title= Developing Safety-Critical Software: A Practical Guide for Aviation Software and DO-178C Compliance |author= Leanna Rierson |isbn= 9781351834056 |orig-date= 7 January 2013 |date= 19 December 2017 |access-date= 2024-04-10 |publisher= [[CRC Press]] |page= 49 |quote= On September 30, 2011, the Federal Aviation Administration (FAA) published Advisory Circular (AC) 20–174, entitled Development of civil aircraft systems. AC 20–174 recognizes ARP4754A as 'an acceptable method for establishing a development assurance process.' }}</ref><ref>{{cite manual 
 |        last = S&ndash;18
 |       title = Guidelines for Development of Civil Aircraft and Systems
 |   publisher = [[SAE International]]
 |        year = 2010
 |         url = http://standards.sae.org/arp4754a
 |          id = ARP4754A
 }}
</ref> [[EUROCAE]] jointly issued the document as ED&ndash;79.

Revision B was released in December 2023 and inherits the "mandates" conferred through FAA [[advisory circular]]s [[AC 25.1309-1]] and AC 20-174 as acceptable means of demonstrating compliance with 14&nbsp;CFR&nbsp;25.1309 in the U.S. [[Federal Aviation Administration]] (FAA) [[airworthiness]] regulations for [[transport category]] [[aircraft]]. This revision also harmonizes with international airworthiness regulations such as [[European Union Aviation Safety Agency]] (EASA) CS&ndash;25.1309. 
* ARP4754 Revision B is an interim release meant to expedite consistency with ARP4761 Revision A, "''Safety Assessment Process''", which was also released in December 2023. 
* While the general principles of FDAL/IDAL assignment and safety assessment process were retained in ARP4754B/ED-79B, the details of these activities and process were transferred to ARP4761A/ED-135. 
* Pending major adjustments to ARP4754 are deferred to a future Revision C.<ref>{{cite web |author= Anastasiia Balashova |website= DMD Solutions |title= Release of ARP4754B: Exploring the updates  |date= March 12, 2024 |url=  https://dmd.solutions/blog/2024/03/12/arp4754b-updates/ |access-date= 2024-09-04 |quote= All of these [advisory circulars] elevates it from a ‘guideline’ to a ‘mandatory’ status, which the new version ARP4754B inherits. ... '''ARP4754B primarily focuses on alignment with the recently released ARP4761A''', indicating that there are no significant changes in development principles compared to ARP4754A. The core of the development process remains consistent, and we expect some big changes in the forthcoming version, ARP4754C. }}</ref><ref>{{cite web |author= |website= oviss.jp |title= SAE ARP4754, Revision B, 2023: Guidelines for Development of Civil Aircraft and Systems   |url= https://www.oviss.jp/view/item/000000001889  |access-date= 2024-09-04 |quote= Revision B is primarily focused on the necessary updates to align its contents with ARP4761A/ED-135. There were extensive discussions within S-18/WG-63 on the need to limit scope of this revision versus expanding its contents to include emerging system development techniques in use by the industry. Given the timeframe of ARP4761A/ED-135 publication, and the necessity to maintain consistency between both ARP4754B/ED-79B and ARP4761A/ED-135, the first option, limiting the scope, was chosen and suggested changes that would further expand ARP4754/ED-79 contents were deferred for a new Revision C. As a result, while the general principles of FDAL/IDAL assignment were retained in ARP4754B/ED-79B, the details of FDAL/IDAL assignment activities were transferred to ARP4761A/ED-135. The same approach was adopted for all safety assessment process contents in ARP4754B/ED-79B. }}</ref>

==Objectives of the document==
Emphasizing safety aspects, the Aerospace Recommended Practice (ARP) is a guideline for development of civil aircraft and systems. Revision A was a substantial rewrite of the document which describes the safety process as a part of an Integrated Development Process. A significant new section is devoted to the process of determining Development Assurance Level (DAL) which determines the assurance rigor of development and verification activities for complex hardware and software aspects of airborne systems.

ARP4754 is intended to be used in conjunction with the safety assessment process defined in SAE [[ARP4761]] (updated to Revision A in December 2023) and is supported by other aviation standards such as [[RTCA, Incorporated|RTCA]] [[DO-178C]]/[[DO-178B]] and [[DO-254]].

This guideline addresses Functional Safety and design assurance processes. DAL allocation pertaining to functional failure conditions and hazard severity are assigned to help mitigate risks. Functional Hazard Analyses / Assessments are central to determining hazards and assigning DAL, in addition to requirements based testing and other verification methods. This guideline concerns itself with Physical (item) DAL and Functional (software/systems integration behavior) DAL and the Safety aspects of systems for the whole life-cycle for systems that implement [[Avionics#Aircraft avionics|aircraft functions]].

==History==
ARP4754 was defined in the context of [[Type certificate|aircraft certification]], in particular Part&nbsp;25 Sections 1301 and 1309 of harmonized [[civil aviation]] regulations for [[transport category]] [[airplane]]s. These are found in the U.S. [[Federal Aviation Administration|FAA]] [[Federal Aviation Regulations]] (FAR) at 14&nbsp;CFR&nbsp;25.1309 and the corresponding European [[Joint Aviation Authorities|JAA]] [[Joint Aviation Requirements]] (JAR), which have been replaced by [[European Union Aviation Safety Agency|EASA]] certification standards. FAA Advisory Circular [[AC 25.1309-1]]A, ''System Design and Analysis'', explained certification methodology for Part&nbsp;25 Section&nbsp;1309.<ref>{{cite manual 
 |     author = ANM-110
 |      title = System Design and Analysis
 |  publisher = [[Federal Aviation Administration]]
 |       year = 1988
 |        url = http://www.faa.gov/documentLibrary/media/Advisory_Circular/AC%2025.1309-1A.pdf
 |         id = Advisory Circular AC&nbsp;25.1309-1A
 | accessdate = 2011-02-20
 }}</ref>

In May 1996, the FAA Aviation Rulemaking Advisory Committee (ARAC) was tasked with a review of harmonized FAR/JAR&nbsp;25.1309, AC&nbsp;1309-1A, and related documents, and to consider revision to AC&nbsp;1309-1A incorporating recent practice, increasing complex integration between aircraft functions and the systems that implement them,<ref>ARP4754A, p. 7</ref> and the implications of new technology. This task was published in the Federal Register as 61 FR 26246-26247 (1996-05-24). The focus was to be on safety assessment and fault-tolerant critical systems.

In a parallel effort, SAE published ARP4754 in November 1996. In 2002 ARAC submitted to the FAA a draft Notice of Proposed Rulemaking (NPRM) and draft revision AC&nbsp;1309-1B (the draft ARSENAL version) recognizing the role of ARP4754 in complex system certification.<ref>
{{cite manual
 |author       = ARAC Systems Design and Analysis Harmonization Working Group
 |title        = Task 2 – System Design and Analysis Harmonization and Technology Update
 |publisher    = [[Federal Aviation Administration]]
 |year         = 2002
 |url          = http://www.faa.gov/regulations_policies/rulemaking/committees/arac/media/tae/TAE_SDA_T2.pdf
 |accessdate   = 2011-02-20
 |archive-url  = https://web.archive.org/web/20061005133248/http://www.faa.gov/regulations_policies/rulemaking/committees/arac/media/tae/TAE_SDA_T2.pdf
 |archive-date = 2006-10-05
 |url-status     = dead
}}
</ref> Draft B of AC 25.1309-1 remains unreleased, but ARP4754 became broadly recognized as an appropriate standard for aircraft system development and certification and aircraft have been certified under the AC 25.1309-1B-Arsenal draft. The corresponding EASA Acceptable Means of Compliance AMC 25.1309 (included as a section of CS-25) does recognize ARP4754/ED&ndash;79.

The FAA and EASA have both subsequently recognized ARP4754/ED&ndash;79 as valid for certification of other aircraft categories, and for specific systems such as avionic databuses. ARP4754A and ED79A were released by SAE and EUROCAE in December 2010 with the document title changed to ''Guidelines For Development Of Civil Aircraft and Systems''. ARP4754A recognizes AMC&nbsp;25.1309 (published in 2003) and AC&nbsp;25.1309-1B-Arsenal draft.<ref name= Spitzer3rd >Cary Spitzer, Uma Ferrell, Thomas Ferrell [https://books.google.com/books?id=kvjRBQAAQBAJ ''Digital Avionics Handbook''], 3rd ed., CRC Press, Boca Raton, FL. 2015, p. 9-10. "At this writing, that AC[25.1309-1B-Arsenal draft] has not been adopted, but is considered to exist as a rather mature draft referred to as the ''arsenal version''. The FAA has accepted proposals by applicants to use arsenal on recent development programs, while EASE has incorporated similar guidance within CS-25, ...."</ref> This revision expands the design assurance concept for application at the aircraft and system level and standardizes on the use of the term development assurance. As a consequence, Functional Development Assurance Level (FDAL) is introduced for aircraft and systems concerns and the term Design Assurance Level has been renamed Item Development Assurance Level (IDAL).<ref>ARP4754A, pp. 7-8</ref>  Furthermore, there is acknowledgement that the terms ''Error'', ''Failure'', and ''Failure Condition'' come from AMC&nbsp;25.1309.<ref>ARP4754A, pp. 11</ref>  The qualitative and quantitative classification of failure conditions by severity and probability now used by ARP4754A<ref>ARP4754A, p. 34</ref> and ARP4761<ref>{{cite manual | last = S&ndash;18 | title = Guidelines and methods for conducting the safety assessment process on civil airborne systems and equipment  | publisher = [[Society of Automotive Engineers]] | year = 1996 | url = http://www.sae.org/technical/standards/ARP4761 | id = ARP4761 | page=9 }}</ref> are defined in AMC&nbsp;25.1309/AC&nbsp;25.1309&ndash;1B-Arsenal draft.

==See also==
*[[AC 25.1309-1]]
*[[DO-254]]
*[[DO-178C]] and [[DO-178B]]
*[[ARP4761]]
*[[ISO 26262]]
*[[Hazard analysis]]
*[[Safety engineering]]
*[[Avionics]]
*[[Type certificate]]

== References ==
{{Reflist}}

==External links==
* [http://standards.sae.org/arp4754a/ ARP4754A page on SAE website]
* [https://www.ibm.com/support/knowledgecenter/SSB2MU_9.0.1/com.ibm.rhp.oem.pdf.doc/pdf/btc/Rhapsody%20Kit%20for%20DO-178B-C%20Overview.pdf IBM Engineering Rhapsody Workflow kit for DO178 ]
{{SAE International}}

[[Category:Handbooks and manuals]]
[[Category:Engineering literature]]
[[Category:Avionics]]