Continued airworthiness
ICA package review for the instructions an installed article must carry
An ICA package review checks that the Instructions for Continued Airworthiness an installed article must carry are complete, derived from the design, and usable by the operator who will follow them. It serves avionics and equipment suppliers whose article goes onto an aircraft under an installation approval and who owe the maintenance instructions that keep it airworthy. It is run before the package is delivered, or after a finding questions whether its limitations and tasks trace to the substantiation. The review reads the airworthiness limitations section, the scheduled and unscheduled tasks, the intervals and their basis, the format against the accepted structure, and the distribution path to the operator. You receive a section-by-section assessment of completeness and traceability, and a list of tasks or limitations that lack a derivation or conflict with the design data.
When this review is needed
- An installed article is approaching its installation approval and the ICA package has to be delivered with it.
- A finding asks whether the airworthiness limitations and tasks trace back to the design substantiation.
- The design changed and the existing ICA has to be brought current with the new configuration.
- An operator reports that the instructions are ambiguous or cannot be performed as written.
The problem
ICA is written last, by a different team than the one that ran the analysis, and it is treated as documentation rather than as evidence. Tasks get copied from a similar program, intervals arrive without a stated basis, and the airworthiness limitations section omits a limitation the safety assessment actually drove. The package reads cleanly, but a task with no derivation cannot be defended when a reviewer asks why the interval is what it is, and a limitation that never reached the limitations section is a gap that surfaces in service.
What gets reviewed
- The airworthiness limitations section and whether it captures every limitation the substantiation drove
- Scheduled and unscheduled maintenance tasks and their derivation from the design
- Maintenance intervals and the stated basis behind each one
- The format and structure against the accepted ICA arrangement
- Servicing, removal, installation, and test instructions for usability by the operator
- The distribution path and revision control that gets updates to the operator
What gets validated
- Every limitation the safety assessment drove appears in the airworthiness limitations section
- Each maintenance task traces to the design feature or failure mode it addresses
- Each interval has a stated basis rather than an unsupported number
- The package follows the accepted ICA structure and section arrangement
- Removal, installation, servicing, and test steps are performable as written
- A revision and distribution mechanism reaches the operators that hold the article
Evidence normally required
- The draft or current ICA package and its airworthiness limitations section
- The reliability and maintainability substantiation behind the tasks and intervals
- The safety assessment that drives the limitations
- The design and configuration data the instructions describe
- The distribution and revision-control record for the package
Common discrepancies
- A limitation present in the safety assessment but absent from the limitations section
- A maintenance task with no derivation from a design feature or failure mode
- An interval stated without a basis the supplier can defend
- Instructions describing a configuration the current design has moved past
- A removal or test step that cannot be performed as written
- No revision mechanism to get an ICA update to the operators flying the article
What is at stake
An ICA gap does not stay with the supplier. The operator inherits a maintenance program built on instructions that cannot be substantiated, and a limitation missing from the package can leave a required inspection unperformed. A finding against the ICA can hold the installation approval, and a reissue ripples into every operator already flying the article.
Move from findings to resolution
Identify gaps against the means of compliance.
How the work runs
Read the limitations
Check the airworthiness limitations section against the safety assessment so no mandatory limitation is missing.
Trace the tasks
Tie each scheduled and unscheduled task and its interval back to the design feature, failure mode, and stated basis.
Test usability
Walk the procedural instructions an operator must follow to confirm they are performable as written.
Report by consequence
Deliver a section assessment and a closure list ordered by airworthiness consequence.
What the buyer receives
- A section-by-section assessment of completeness and traceability
- A list of tasks or limitations that lack a derivation or conflict with the design data
- A usability assessment of the procedural instructions an operator must follow
- A closure list ordered by the airworthiness consequence of each gap
Who uses the output
- Certification leads delivering the ICA with the installation approval
- Continued-airworthiness engineers correcting derivations and limitations
- Technical publications teams reconciling the package against the design data
How the work fits into the transaction or program
This review treats the ICA as evidence the installed design depends on rather than as closing documentation. It reads the package against the safety assessment and the reliability substantiation that should have driven it, and it complements an evidence review that reads the substantiation itself.
Start with a single asset
Confirm requirements trace through verification.
Aircraft-specific considerations
Where the article is installed across more than one aircraft type, the review checks that the tasks and intervals account for the installation environment of each type rather than assuming one set of instructions transfers unchanged.
Regulatory limits
Endeavor Elements reviews the applicant's ICA for completeness, derivation, and usability. It does not approve the instructions, set airworthiness limitations on an authority's behalf, or determine that the package satisfies the rule.
What this review does not cover
- Approving the ICA or setting its airworthiness limitations
- Determining that the package satisfies the continued-airworthiness rule
- Authoring the missing analysis behind an undefended interval
Specific to this review
- The airworthiness limitations section is the part of an ICA an authority scrutinizes hardest, because a missing mandatory limitation can leave a required inspection unperformed in service.
- A maintenance interval is only defensible with a stated basis, so an interval copied from a similar program without its own derivation is a recurring finding.
- ICA is usually authored by a publications team after the analysis is finished, which is how a limitation the safety assessment drove can fail to reach the limitations section.
- Because operators inherit the ICA, a gap in distribution and revision control means a corrected instruction may never reach the aircraft already flying the article.
Sources
U.S. Government (eCFR). Type certificates, STCs (Subpart E), TSO authorizations (Subpart O), PMA (Subpart K), and export airworthiness approvals (Subpart L).
Federal Aviation Administration. FAA guidance on making and keeping maintenance records and acceptable recordkeeping practices.
U.S. Government (eCFR). Maintenance recordkeeping content and approval-for-return-to-service requirements, including 43.9, 43.11, and Appendix B.
European Union / EASA. Continuing airworthiness, maintenance records, CAMO responsibilities, and the airworthiness review process in the EASA system.
Frequently asked questions
Does the review cover the airworthiness limitations section specifically?
Yes. The limitations section gets the closest read in the package, because a mandatory limitation that the safety assessment drove but the section omits is the gap with the most direct airworthiness consequence.
Can you review an ICA after the article is already in service?
Yes. A common engagement reconciles an in-service ICA against the current design and substantiation, then sequences the corrections and confirms the revision path reaches the operators holding the article.
Relevant glossary terms
Related pages
Where this fits
Talk to an engineer who has done this work
We will walk through your current state, the records or evidence involved, and a scoped first engagement.
Walk through your situation with an engineer who has done this work.