Auditing Techniques and Dealing with Non-Compliance within an EASA Environment

Presented by Sofema Online (SOL) www.sofemaonline.com

The ultimate goal of aviation auditing under EASA regulations is to ensure the highest levels of safety and compliance. This objective is best achieved through a collaborative approach that respects the expertise and operational realities of the auditee while steadfastly upholding regulatory standards. By focusing on demonstrable non-compliance, engaging in clear and constructive communication, and exploring collaborative solutions to contentious findings, auditors and auditees can work together effectively to enhance aviation safety.

Auditing, particularly in the context of aviation under the European Union Aviation Safety Agency (EASA) regulations, involves detailed and rigorous compliance-driven evaluation processes to ensure compliance with safety and operational standards.

A key aspect of this process is ensuring that any perceived findings of non-compliance are demonstrably in violation of the regulations and are accepted as such by the auditee. This approach underscores the importance of evidence-based auditing and the collaborative nature of the compliance process.

General Best Practices:

• • Develop and follow a structured audit program that aligns with EASA guidelines, ensuring all regulatory areas are covered comprehensively.
• • Auditors should receive training specific to the aviation sector and continuous education on the latest EASA regulations and auditing techniques.
• • Include leadership in the audit process, fostering a culture of transparency and mutual understanding of the importance of ensuring full compliance.

Establishing Clear and Demonstrable Findings:

• • The risk of subjective interpretation of regulations can lead to disagreements over whether a finding constitutes non-compliance.
• • Collecting incontrovertible evidence that demonstrates non-compliance can be challenging, especially for complex regulations or those that allow for interpretive leeway.
• • Ensure all findings are backed by thorough documentation, including references to specific regulatory requirements and evidence of how the observed situation deviates from those requirements.

Gaining Acceptance of Findings by the Auditee:

• • Resistance to Acknowledgement: Auditees may resist acknowledging findings due to concerns over reputation, financial implications, or operational impacts.
• • Communication Barriers: Miscommunication or technical jargon can hinder the auditee's understanding of the finding and its significance.
• • Present findings in a clear, understandable manner, focusing on facts and the implications of non-compliance. Avoid confrontational language to minimize defensiveness.
• • Engage the auditee in discussing potential corrective actions, emphasizing the goal of enhancing safety and compliance rather than penalizing the organization.
• • Clear Communication - Ensure that the reasons behind the findings and the importance of compliance are communicated clearly and constructively.

Alternatives to Imposing Findings:

• • A meeting or workshop with the auditee to discuss the evidence and interpretations of the regulation in question, possibly involving a neutral third-party expert.

 - Rather than focusing solely on the contention around a finding, work together to develop an action plan that addresses the underlying safety or compliance concerns.

• • In cases of significant disagreement, consulting with EASA or other regulatory bodies for clarification or mediation can provide an authoritative perspective on the issue.

Risk-Based Auditing

Risk-based auditing is a critical strategy for aviation organizations under EASA regulations to enhance safety, ensure regulatory compliance, and optimize the use of auditing resources. By focusing on the areas of highest risk, organizations can more effectively manage potential threats and contribute to the overall safety of the aviation industry.

• • Risk-based auditing involves identifying and assessing risks across various operational areas within an aviation organization.

Note the potential crossover to Safety System Auditing where risks can include security threats, safety hazards, as well as regulatory non-compliance to EASA regulations or Company documented Processes & Procedures.

The aim is to prioritize audit activities in areas with higher risks, ensuring that limited resources are used efficiently to mitigate the most significant threats to safety and compliance.

• • Risks can be identified through assessments as well as other various means, including internal safety reports, incident data, previous audit findings, and industry trends.
• • Based on the risk assessment, risks are prioritized to determine which areas require immediate attention and resources. Higher priority is given to areas with risks that have a high impact and a high likelihood of occurrence.
• • Audit activities are then planned based on prioritization, focusing on the highest-risk areas. This includes defining the scope of audits, scheduling, and allocating resources.

Next Steps

Sofema Aviation Services (www.sassofia.com) and Sofemaonline (www.sofemaonline.com) provide EASA Compliant Webinars, Classroom & Online training in over 50 Quality Assurance and Compliance Related Subjects – Please see the websites or email team@sassofia.com