FAA ETOPS Requirements: Approval, Maintenance, and Penalties

The FAA’s ETOPS requirements are the conditions an airline must satisfy to fly a route where any point sits farther than the default single-engine diversion limit from an adequate airport. For twin-engine airplanes that default is 60 minutes under 14 CFR § 121.161; for passenger aircraft with more than two engines it is 180 minutes.¹ To exceed those thresholds, the airplane-engine combination must hold type design approval for Extended Operations, the carrier must run a dedicated ETOPS maintenance and reliability program, its crews and dispatchers must be trained on the specific operation, and the FAA must issue Operations Specification B342 stating the maximum diversion time authorized.²

Type Design Approval and Engine Reliability

The requirements start with the airplane itself. Before an airline can apply, the manufacturer must show that the airplane-engine combination meets the airworthiness standards in Appendix K to Part 25, demonstrating that hydraulics, electrical generation, pressurization, and fire suppression can sustain a prolonged single-engine diversion.³

The core reliability metric is the In-Flight Shutdown (IFSD) rate across the worldwide fleet. Higher approval tiers require lower rates:

Up to 120 minutes: no more than 0.05 shutdowns per 1,000 world-fleet engine-hours, with corrective actions projected to bring the rate to 0.02 or below.
Up to 180 minutes: no more than 0.02 per 1,000 engine-hours.
Beyond 180 minutes: no more than 0.01 per 1,000 engine-hours.

If an existing combination cannot hit the target rate through corrective actions already in place, the manufacturer must develop additional configuration, maintenance, and procedures (CMP) requirements and prove they will achieve compliance.⁴

The Airline’s ETOPS Maintenance Program

Type design approval only clears the airplane. The carrier still has to build a continuous airworthiness maintenance program dedicated to ETOPS under 14 CFR § 121.374. This is a separate program from routine maintenance, with its own manual, procedures, and oversight.⁵

The regulation requires each of these elements:

An ETOPS maintenance document accessible to every person involved in the operation.
A pre-departure service check verifying the condition of ETOPS Significant Systems, reviewing maintenance records, and inspecting engine and APU oil levels and consumption before each ETOPS flight.
Restrictions on dual maintenance. A single technician may not perform scheduled or unscheduled work on the same or substantially similar ETOPS Significant System during one maintenance visit when an improper task could cause a system failure. If dual maintenance is unavoidable, the work must be done by different technicians, or by the same technician under direct supervision of a second qualified person, followed by ground and any required flight verification testing.
Engine condition monitoring designed to catch deterioration early enough that engine-limit margins can still sustain a prolonged single-engine diversion at approved power levels.
Oil consumption monitoring to spot trends signaling mechanical issues.
Parts control ensuring components installed on ETOPS aircraft are properly identified and correctly configured.
A propulsion system monitoring and reliability program that tracks the operator’s IFSD rate for the specific airplane-engine combination and triggers action when rates exceed set thresholds.⁵

The dual-maintenance rule is the one that gives the program its reputation for rigor. If a single technician makes the same error on both hydraulic systems in one visit, redundancy is lost without anyone knowing. Requiring separate technicians or supervised verification catches that failure mode before pushback.

Training

Appendix P to Part 121 requires the carrier to train maintenance personnel, flight dispatchers, and flight crews on ETOPS procedures and on any differences between approval levels. When an operator moves from one diversion time authorization to another, differences training on the new operational requirements is specifically called for.⁶ Flight crews need to know diversion decision-making, fuel management during single-engine cruise, and the specific alternates on their routes. Dispatchers need to plan ETOPS flights and monitor alternate airport conditions throughout the flight.

How the FAA Grants Authorization

The airline submits a formal application package containing its ETOPS maintenance manual, operations procedures, training records, and reliability program documentation. FAA Principal Inspectors review the entire program against § 121.374 and Appendix P, and their recommendations go to the appropriate Flight Standards office. The FAA will not grant approval until the operator can demonstrate that the airplane-engine combination achieves and sustains the required propulsion system reliability.⁶

Advisory Circular 120-42B describes the process in detail, including validation flights over representative ETOPS routes to confirm the airline’s real-world capability before authorization is granted.⁷ When everything checks out, the FAA issues Operations Specification B342, which authorizes ETOPS flights and specifies the maximum diversion time for each approved airplane-engine combination.²

Diversion Time Levels the FAA Authorizes

Diversion time is the maximum single-engine flight time from any point on a route to the nearest adequate airport, calculated at the approved one-engine-inoperative cruise speed in still air. Appendix P sets the following authorization levels:

75 minutes, for Caribbean and Western Atlantic routes and certain other areas, with modest additional requirements over the baseline.
90 minutes, specific to Micronesian area routes.
120 minutes, the original ETOPS tier and the gateway for most North Atlantic operations.
138 minutes, available as a step-up for operators already holding 120- or 180-minute authority.
180 minutes, sufficient for nearly all North Atlantic crossings and many Pacific routes.
207 minutes, granted on an exception basis as an extension of 180-minute authority in the North Pacific.
240 minutes, covering the North Polar area, the Pacific north of the equator, and (as a standard authorization) South Atlantic, Indian Ocean, and South Pacific routes.
Beyond 240 minutes, authorized for specific city-pair routes in the most remote oceanic areas, including the South Polar region.⁸

Each step up tightens maintenance, reliability monitoring, and crew training obligations. The move from 180 to beyond-180 authority is the steepest: the required IFSD rate drops from 0.02 to 0.01 per 1,000 engine-hours, and additional system redundancy requirements apply.⁴

Per-Flight Requirements

Holding OpSpec B342 authorizes the operation in principle. Every individual flight still has to satisfy fuel, weather, and time-limited system rules.

Time-Limited Systems and Fire Suppression

Cargo compartment fire suppression often drives ETOPS planning more than engine reliability, because the suppressant supply is finite. For ETOPS up to 180 minutes, a carrier cannot list an airport as an ETOPS alternate if the single-engine flight time to reach it exceeds the airplane’s most limiting ETOPS Significant System time (including fire suppression) minus 15 minutes. The buffer ensures the airplane can still reach the airport after the suppressant is exhausted.⁹

Beyond 180 minutes, the calculation splits. Fire suppression time is measured against all-engines-operating cruise speed (corrected for wind and temperature), while the other ETOPS Significant System limits are measured against single-engine cruise speed. Both still subtract 15 minutes from the system’s capacity.⁹ When actual fire suppression capability falls short of what was originally certified, the FAA has directed operators to restrict maximum diversion time to the actual capability minus 15 minutes or the existing ETOPS authority, whichever is less.¹⁰

Fuel

Carriers must load the greater of standard reserves or enough fuel to handle worst-case diversion scenarios, including:

Rapid decompression: fuel to descend to a safe altitude and reach an alternate while meeting supplemental oxygen requirements.
Engine failure: fuel to fly the full diversion at single-engine cruise speed after losing an engine at the most critical point on the route.
Holding and approach: fuel to hold at 1,500 feet above the alternate for 15 minutes and then fly an instrument approach.
Wind and icing reserves: a 5 percent wind-speed factor applied to forecast headwinds or tailwinds, plus fuel for airframe icing during at least 10 percent of the forecast icing time.
APU fuel where the APU is a required power source.
A 5 percent performance deterioration buffer for airframe aging, unless the carrier monitors actual cruise fuel burn.¹¹

Calculations run per flight using actual forecast conditions, with the most critical point on the route setting the worst-case load.

Weather at ETOPS Alternates

The flight cannot proceed past the ETOPS entry point unless weather at each required ETOPS alternate is forecast to be at or above the operating minimums in the airline’s operations specifications for the entire window during which the alternate might be needed. That window runs from the earliest to latest possible landing time.¹²

All ETOPS alternates within the authorized diversion time must be reviewed while the flight is airborne, and crews advised of any changes since dispatch. If weather at a required alternate drops below minimums, the dispatch or flight release can be amended to substitute another alternate that stays within the authorized diversion time and meets the weather rules.¹²

Penalties for Falling Short

FAA enforcement responses to ETOPS violations range from informal corrective action to certificate revocation. Under 49 U.S.C. § 46301, the statutory maximum civil penalty for a regulatory violation by an air carrier is $75,000 per violation, with each day the violation continues or each flight involved counted as a separate occurrence.¹³ That per-day and per-flight compounding is how systemic maintenance failures can reach into the millions.

Beyond monetary penalties, a carrier that cannot demonstrate sustained compliance risks losing its ETOPS operational specification. Because the framework depends on every link in the maintenance chain performing exactly as certified, a lapse in engine condition monitoring or a missed pre-departure service check on an ETOPS-configured airplane undermines the reliability data that justified the diversion time in the first place. Losing OpSpec B342 can ground entire fleets of twin-engine widebodies from their most profitable long-haul routes.

1
eCFR. 14 CFR 121.161 – Airplane Limitations: Operation
2
Federal Aviation Administration. FAA Notice N 8900.543 – OpSpec B342, Extended Operations (ETOPS) with Two-Engine Airplanes
3
Federal Aviation Administration. 14 CFR Appendix K to Part 25 – Extended Operations (ETOPS)
4
GovInfo. 14 CFR Part 25, Appendix K
5
eCFR. 14 CFR 121.374 – Continuous Airworthiness Maintenance Program (CAMP) for Two-Engine ETOPS
6
Legal Information Institute. 14 CFR Appendix P to Part 121 – Requirements for ETOPS and Polar Operations
7
Federal Aviation Administration. Advisory Circular 120-42B – Extended Operations (ETOPS and Polar Operations)
8
eCFR. 14 CFR Part 121, Appendix P – Requirements for ETOPS and Polar Operations
9
eCFR. 14 CFR 121.633 – ETOPS Time-Limited Systems
10
Federal Aviation Administration. Boeing 777 Extended Operations (ETOPS) Restrictions due to Cargo Fire Suppression System Shortfall
11
Federal Aviation Administration. Advisory Circular 135-42 – Extended Operations (ETOPS) and Operations in the North Polar Area
12
eCFR. 14 CFR 121.631 – Original Dispatch or Flight Release, Redispatch, or Amendment of Dispatch or Flight Release
13
Office of the Law Revision Counsel. 49 USC 46301 – Civil Penalties