Understanding DO-178C Certification Testing for Avionics Software
DO-178C (Software Considerations in Airborne Systems and Equipment Certification) is the internationally recognized standard governing the development and verification of safety-critical avionics software. Published by RTCA in collaboration with EUROCAE, it is referenced by the FAA, EASA, and Transport Canada as the basis for airworthiness approval of software-based systems.
Certification to DO-178C requires rigorous verification and validation activities scaled to the software’s Design Assurance Level (DAL), from Level E (no safety effect) to Level A (catastrophic failure conditions). Meeting these objectives typically demands specialized testing infrastructure, qualified tools, and deep regulatory expertise — capabilities concentrated in dedicated certification labs and independent V&V providers.
What DO-178C Certification Labs Provide
- Structural Coverage Analysis
- Statement, decision, and MC/DC coverage measurement to satisfy DAL A–C objectives, often using qualified instrumentation tools.
- Tool Qualification (TQL 1–5)
- Qualification of development and verification tools per DO-330, including test generation, static analysis, and code coverage tools.
- Requirements-Based Testing
- Low-level and high-level requirements testing with full traceability to system requirements per ARP 4754A.
- Independent V&V (IV&V)
- Third-party review and testing to satisfy independence requirements at higher DALs, including transition criteria audits and conformity reviews.
- DER/CVE Support
- Access to FAA Designated Engineering Representatives or EASA Compliance Verification Engineers authorized to approve certification artifacts.
Key Selection Criteria
| Factor | Why It Matters |
|---|---|
| DAL experience | DAL A projects impose MC/DC coverage and independence requirements that not all labs can fulfill |
| Authority relationships | Labs with established FAA ACO/BASOO or EASA DOA relationships streamline Stage of Involvement audits |
| Tool ecosystem | Pre-qualified tool suites (LDRA, Rapita RVS, VectorCAST) reduce project-level qualification effort |
| DO-330 capability | Tool qualification is increasingly the bottleneck — labs with DO-330 experience accelerate timelines |
| Multicore expertise | CAST-32A and AMC 20-193 compliance for multicore avionics requires specialized interference analysis |
Regulatory Landscape
While DO-178C itself does not mandate the use of external labs, the practical complexity of meeting its objectives — particularly at DAL A and B — drives most avionics OEMs to engage specialized providers. The FAA’s continued emphasis on software aspects of certification (via Issue Papers and SOI audits) and EASA’s evolving guidance on multicore processors have further increased demand for labs with current regulatory experience.