Skip to content
LAW

Aviation LawLesson 10 of 11

LAW 010

Safety management

Safety and security

Two definitions to know apart.

AviationSafety

The state in which risks associated with aviation activities, related to, or in direct support of the operation of aircraft, are reduced and controlled to an acceptable level.

AviationSecurity

A combination of measures and human and material resources intended to safeguard civil aviation against acts of unlawful interference.

The aim of working with safety

Three steps, taken before an accident occurs.

  1. Identify

    Potential system weaknesses which could contribute to an accident, before an accident occurs.

  2. Estimate

    The risk of possible accidents occurring.

  3. Mitigate

    Implement risk mitigation measures to reduce risk, where unacceptable levels of risk have been identified.

Safety-I and Safety-II

Two ways of looking at safety, from Professor Erik Hollnagel.

−3−2−10123Safety-IIProactiveThings that go rightSafety-IReactiveThings that go wrong
Safety-I looks at the few things that go wrong. Safety-II looks at all of it, and most things go right.
Safety-ISafety-II
Definition of safetyAs few things as possible go wrong.As many things as possible go right.
Safety management principleReactive: respond when something happens, or is categorised as an unacceptable risk.Proactive: continuously trying to anticipate developments and events.
View of the human factor in safety managementHumans are predominantly seen as a liability or hazard.Humans are seen as a resource necessary for system flexibility and resilience.
Accident investigationAccidents are caused by failures and malfunctions. The purpose of an investigation is to identify the causes.Things basically happen in the same way, regardless of the outcome. The purpose of an investigation is to understand how things usually go right, as a basis for explaining how things occasionally go wrong.
Risk assessmentThe purpose of risk assessment is to identify and determine the likelihood of hazards, in order to eliminate or contain them.To understand the conditions where performance variability can become difficult or impossible to monitor and control.

Work-as-imagined and work-as-done

What should happen, against what actually happens.

ChangingconditionsChangingconditionsWork-as-imaginedWork-as-done
Work-as-imagined ignores the changing conditions. Work-as-done adjusts to them.
Safety-IWork-as-imagined (WAI)

An idealistic view of the formal task that disregards how task performance must be adjusted to match the constantly changing conditions of work and of the world.

WAI describes what should happen under nominal working conditions.

Safety-IIWork-as-done (WAD)

Describes what actually happens, and how it unfolds over time in a concrete situation.

WAD reflects the reality people have to deal with on a daily basis.

Safety regulation layers

Three layers, each one inside the one above it.

ICAOInternational Civil Aviation Organization
Global

International regulatory arrangements and requirements.

EASA and the EUEuropean Union Aviation Safety Agency, and the European Union
Regional

Regional regulatory arrangements and requirements.

NSANational Supervisory Authority
National

National regulatory arrangements and requirements.

Safety management system

Four components, and the elements under each.

Safety management system (SMS) A systematic approach to managing safety, including the necessary organisational structures, accountability, responsibility, policies and procedures.

Framework for a safety management system

Safety management system
  1. 1Safety policy and objectives
    • Management commitment and responsibilities
    • Safety accountabilities
    • Appointment of key safety personnel
    • Coordination of emergency response planning
    • SMS documentation
  2. 2Safety risk management
    • Hazard identification
    • Safety risk assessment and mitigation
  3. 3Safety assurance
    • Safety performance monitoring and measurement
    • The management of change
    • Continuous improvement of the SMS
  4. 4Safety promotion
    • Training and education
    • Safety communication

Accountability and responsibility

Who the safety manager answers to, and what the role does.

Managing directorSafety managerLine manager ** Assessment and investigationsafety officers
The safety manager answers straight to the managing director, beside the line manager.

Safety manager

Creates and maintains the SMSIn accordance with rules and regulations from ICAO, the EU and the NSA.
Develops processes and documentsRelated to safety activities.
Is the point of contact with the NSA

Hazard identification

Three ways to find hazards, from before anything happens to after it has.

  1. Before anything happens
    ProactiveSafety risk assessment
  2. During daily operation
    ActiveMonitoring and surveys
  3. After an occurrence
    ReactiveReporting and investigation

Severity classification scheme in ATM

Five classes, from the most severe down.

More severe
  1. 1Accident
  2. 2Serious incident
  3. 3Major incident
  4. 4Significant incident
  5. 5No immediate effect on safety

Risk regions

How much risk is tolerated, and how much effort it takes to reduce it.

Intolerable regionTolerableEffort required to reduce risksIncreasing individual risksBasic limitBroadly acceptableregion
The higher the risk, the wider the band, and the more effort reducing it takes. Above the basic limit, risk is intolerable.
Safety starts with YOU.

Reading material