Frequently Asked Questions
Q: How can I obtain the QICP Application form?
A: Click on "QICP Application" on the left side of this QICP Web page.
Q: Where do I send a QICP application?
A: It can be sent electronically via the "QICP Application" on the left side of this QICP Web page, or mailed to:
Federal Aviation Administration
Attn: Operations Planning - NAS Weather Policy and Requirements Group, AJP-B1
800 Independence Avenue, S.W.
Washington, DC 20591
Q: Who is the QICP Contact at AJP-B1?
A: Steven Albersheim, FAA Aerospace Weather Policy Staff, AJP-B1 at 202-385-7185.
Q: What information is needed to apply for QICP status?
A: The application form includes the following: Service Description, Security Plan, Capability Demonstration Plan, Ongoing Maintenance Plan, Quality Assurance Plan, Quality of Service Agreement and Warning Label.
Q: How long will it take to become QICP certified?
A: An application typically takes up to 60 days for review followed by a 3-month capability demonstration. If the application is lacking in some way, it will be returned with revision suggestions
Q: How much does it cost to apply?
A: Nothing, it is a matter of submitting application materials to AJP-B1.
Q: How long is the Capability Demonstration phase?
A: Usually 3 months. An alternate capability demonstration method may be accepted upon request of the applicant (e.g., documentation of prior Internet site performance).
Q: Where do I find a copy of the Advisory Circular?
A: Click here, or on "Advisory Circular" on the left side of this QICP Web page to download a copy of the Advisory Circular or write to:
Federal Aviation Administration
Attn: Operations Planning - NAS Weather Policy and Requirements Group, AJP-B1
Aerospace Weather Policy & Standards
800 Independence Avenue, S.W.
Washington, DC 20591
Q: What are the minimum guidelines for accessibility, security and reliability for a QICP?
A: Please refer to Sections 2 of the Advisory Circular.
Q: Can the vulnerability assessments, risk assessments and security tests specified in the Security Plan be conducted internally by the applicant?
A: Yes, there is no requirement for them to be conducted by an independent organization.
Q: Is the application given to FAA AJP-B1 like a standard contract with the FAA?
A: No. It is the documentation used by AJP-B1 in reviewing the request for QICP status in accordance with the Advisory Circular.
Q: What security protocol or protocols will be in place to protect a user or QICP?
A: The provider should implement security technology such as server digital certificate technology (such as X.509) and Secure Sockets Layer protocol consistent with current accepted Internet standards if using the hypertext transfer protocol, and equally secure technology if using an alternative Internet application protocol. In addition, the provider should establish and implement security practices to prevent unauthorized access to or modification of provider data, software and hardware.
Q: How long does a QICP have to store the server logs and transaction data?
A: It is recommended to store Internet server log files and transaction data for no less than 15 days after the transaction. In the event they are requested by the FAA, National Transportation Safety Board (NTSB), or police agencies, the applicable logs and data should be retained indefinitely, or until such time that the destruction of the data is authorized by law.
Q: How long does a QICP have to retain performance statistics?
A: QICP performance statistics must be kept and provided to AJP-B1 every 6 months to review for continued conformance with the Advisory Circular with regard to reliability, accessibility, and security. After QICP status has been extended for 6 months, the performance statistics may be discarded.
Q: Does the FAA enforce the Quality of Service Agreement?
A: AJP-B1 reviews QOS complaints to determine whether the QICP is in conformance with the Advisory Circular with regard to reliability, accessibility, and security. If not, AJP-B1 requests the QICP to provide performance documentation showing the identified deficiency does not exist or has been corrected. Failure to do so may result in rescission of QICP status. QOS complaints on considerations other than reliability, accessibility, and security (e.g., billing or administrative issues) must be worked between the QICP and user.
Q: What contact information is required for the QICP application?
A: The names, telephone numbers, and e-mail addresses are required for the QICP applicant's responsible official, point of contact, and for the capability demonstration points of contacts. The names, titles, and resumes of personnel responsible for ongoing maintenance are also required, along with descriptions of their duties and responsibilities.>
Q: What if a QICP application is incomplete or rejected?
A: The application is returned to the applicant with suggestions for revision according to what may be missing or needed. If there are further questions, the applicant may contact AJP-B1 by e-mail or letter.
Q:Does AJP-B1 participate in any way in the Capability Demonstration?
A: AJP-B1 participates during the Capability Demonstration by performing a series of transactions with the candidate Internet site to verify the site meets QICP performance provisions of accessibility and security. In addition, AJP-B1 reviews performance statistics gathered and provided by the applicant during and after the Capability Demonstration to verify the site meets QICP performance provisions of reliability, accessibility and security.
Q: What if a QICP applicant fails the Capability Demonstration Phase?
A: The QICP applicant will be sent a Letter of Denial and asked to remedy whatever part of the reliability, access or security guidelines they did not meet. The terms of any subsequent re-application will be defined in the Letter of Denial.
Q: How long does QICP status last?
A: It will begin upon approval of QICP status and and last for 6 months, at which time AJP-B1 reviews QICP performance statistics for the preceding 6 months. If the statistics show the QICP is in conformance with the Advisory Circular with regard to reliability, accessibility, and security, AJP-B1 extends QICP status for another 6 months. This process is repeated semiannually.
Q: How long does a QICP have to correct a problem?
A: After AJP-B1 becomes aware that a listed QICP may not be adequately maintaining Internet service in conformance with the Advisory Circular, AJP-B1 requests the QICP to provide documentation that the deficiency does not exist or has been corrected. If satisfactory documentation is not received, QICP status may be rescinded.
Q: After receiving QICP status, are there service standards that must be maintained?
A: The service guidelines a QICP must maintain are outlined in the Advisory Circular. AJP-B1 checks the QICPs server logs every six months and takes complaints from users to assure compliance to the service standards.
For the user:
Q: Where do I find a list of CURRENT QICPs?
A: Click on "Approved QICPs" on the left or write to:
Federal Aviation Administration
Attn: Operations Planning - NAS Weather Policy and Requirements Group, AJP-B1
Aerospace Weather Policy & Standards
800 Independence Avenue, S.W.
Washington, DC 20591
Q: Is the FAA certifying the aviation weather products?
A: No, the FAA is certifying that QICP has met the minimum requirements to transmit aviation weather products via the public Internet.