module n° 2 – basic safety concepts safety management systems (sms) course

70
Module N Module N ° 2 – ° 2 – Basic safety Basic safety concepts concepts Safety Management Systems Safety Management Systems (SMS) Course (SMS) Course

Upload: ella-walker

Post on 28-Dec-2015

248 views

Category:

Documents


13 download

TRANSCRIPT

Page 1: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2 – Basic safety ° 2 – Basic safety conceptsconcepts

Safety Management Systems (SMS) CourseSafety Management Systems (SMS) Course

Page 2: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 2

Module 1SMS course introduction

Module 3Introduction to safety

management

Module 4Hazards

Module 5Risks

Module 6SMS regulation

Module 7Introduction to SMS

Module 8SMS planning

Module 9SMS operation

Module10 Phased approach to SMS

implementation

Module 2Basic safety concepts

Module 2Basic safety concepts

SafetySafety

ManagementManagement

SystemSystem

Building an SMS

Page 3: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 3

Objective

At the end of this module, participants will be able to

describe the limitations of traditional methods to

manage safety and describe new perspectives and

methods for managing safety.

At the end of this module, participants will be able to

describe the limitations of traditional methods to

manage safety and describe new perspectives and

methods for managing safety.

Page 4: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 4

Outline

Concept of safetyConcept of safety The evolution of safety thinkingThe evolution of safety thinking A concept of accident causation – Reason modelA concept of accident causation – Reason model The organizational accidentThe organizational accident People and safety – SHEL modelPeople and safety – SHEL model Errors and violationsErrors and violations Organizational cultureOrganizational culture Safety investigationSafety investigation Questions and answersQuestions and answers Points to rememberPoints to remember Exercise Nº 02/01Exercise Nº 02/01 – The Kargil City Airport accident (See – The Kargil City Airport accident (See

Handout N° 1)Handout N° 1)

Concept of safetyConcept of safety The evolution of safety thinkingThe evolution of safety thinking A concept of accident causation – Reason modelA concept of accident causation – Reason model The organizational accidentThe organizational accident People and safety – SHEL modelPeople and safety – SHEL model Errors and violationsErrors and violations Organizational cultureOrganizational culture Safety investigationSafety investigation Questions and answersQuestions and answers Points to rememberPoints to remember Exercise Nº 02/01Exercise Nº 02/01 – The Kargil City Airport accident (See – The Kargil City Airport accident (See

Handout N° 1)Handout N° 1)

Page 5: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 5

Concept of safety

What is safetyWhat is safety Zero accidents (or serious incidents)?Zero accidents (or serious incidents)? Freedom from danger or risks?Freedom from danger or risks? Error avoidanceError avoidance Regulatory compliance?Regulatory compliance? … … ??

What is safetyWhat is safety Zero accidents (or serious incidents)?Zero accidents (or serious incidents)? Freedom from danger or risks?Freedom from danger or risks? Error avoidanceError avoidance Regulatory compliance?Regulatory compliance? … … ??

Page 6: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 6

Concept of safety

ConsiderConsider The elimination of accidents (and serious incidents) The elimination of accidents (and serious incidents)

is unachievable. is unachievable. Failures will occur, in spite of the most Failures will occur, in spite of the most

accomplished prevention efforts.accomplished prevention efforts. No human endeavour or human-made system can No human endeavour or human-made system can

be free from risk and error. be free from risk and error. Controlled risk and error is acceptable in an Controlled risk and error is acceptable in an

inherently safe system.inherently safe system.

ConsiderConsider The elimination of accidents (and serious incidents) The elimination of accidents (and serious incidents)

is unachievable. is unachievable. Failures will occur, in spite of the most Failures will occur, in spite of the most

accomplished prevention efforts.accomplished prevention efforts. No human endeavour or human-made system can No human endeavour or human-made system can

be free from risk and error. be free from risk and error. Controlled risk and error is acceptable in an Controlled risk and error is acceptable in an

inherently safe system.inherently safe system.

Page 7: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 7

Page 8: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 8

SafetySafetyTraditional approach – Accident preventionTraditional approach – Accident prevention

Focus on outcomes (probable cause)Focus on outcomes (probable cause)Unsafe acts by operational personnelUnsafe acts by operational personnelAttach blame/punish for failures to “perform safely”Attach blame/punish for failures to “perform safely”Address identified safety concern exclusivelyAddress identified safety concern exclusivelyIdentifies:Identifies:

Traditional approach – Accident preventionTraditional approach – Accident preventionFocus on outcomes (probable cause)Focus on outcomes (probable cause)Unsafe acts by operational personnelUnsafe acts by operational personnelAttach blame/punish for failures to “perform safely”Attach blame/punish for failures to “perform safely”Address identified safety concern exclusivelyAddress identified safety concern exclusivelyIdentifies:Identifies:

WHAT?WHAT? WHO?WHO? WHEN?WHEN?

WHY?WHY? HOW?HOW?

But not always discloses:But not always discloses:

Page 9: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 9

The evolution of safety thinking

TECHNICAL FACTORSTECHNICAL FACTORS

HUMAN FACTORSHUMAN FACTORS

ORGANIZATIONAL ORGANIZATIONAL FACTORS FACTORS

TOD

AY

TOD

AY

1950s1950s 1970s1970s 1990s1990s 2000s2000s

Page 10: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 10

A concept of accident causation

DefensesDefenses AAcccciiddeenntt

OrganizationOrganization

ManagementManagementdecisions anddecisions and organizationalorganizational

processesprocesses

PeoplePeople

ErrorsErrorsand and

violationsviolations

Workplace Workplace

WorkingWorking

conditionsconditions

Latent conditions trajectoryLatent conditions trajectorySource: James Reason

Page 11: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 11

Organizational processes

Policy-makingPolicy-making PlanningPlanning Communication Communication Allocation of resourcesAllocation of resources SupervisionSupervision ……

Policy-makingPolicy-making PlanningPlanning Communication Communication Allocation of resourcesAllocation of resources SupervisionSupervision ……

Activities over which any organization has a Activities over which any organization has a reasonable degree of direct controlreasonable degree of direct control

Activities over which any organization has a Activities over which any organization has a reasonable degree of direct controlreasonable degree of direct control

The organizational accident

Page 12: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 12

The organizational accident

Organizational processes

Latentconditions

Inadequate hazard Inadequate hazard identification and risk identification and risk managementmanagement

Normalization of Normalization of deviancedeviance

Inadequate hazard Inadequate hazard identification and risk identification and risk managementmanagement

Normalization of Normalization of deviancedeviance

Conditions present in the system before the accident, Conditions present in the system before the accident, made evident by triggering factors. made evident by triggering factors.

Page 13: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 13

The organizational accident

Organizational processes

Latentconditions

Defences

Technology Technology RegulationsRegulationsTraining and checkingTraining and checking

Technology Technology RegulationsRegulationsTraining and checkingTraining and checking

Resources to protect against the risks that organizations Resources to protect against the risks that organizations involved in production activities must confront. involved in production activities must confront.

Page 14: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 14

The organizational accident

Organizational processes

Workplaceconditions

Factors that directly influence the efficiency of people in Factors that directly influence the efficiency of people in aviation workplaces.aviation workplaces.

Workforce stabilityWorkforce stabilityQualifications and Qualifications and

experienceexperienceMoraleMoraleCredibilityCredibilityErgonomicsErgonomics……

Workforce stabilityWorkforce stabilityQualifications and Qualifications and

experienceexperienceMoraleMoraleCredibilityCredibilityErgonomicsErgonomics……

Page 15: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 15

The organizational accident

Organizational processes

Workplaceconditions

Activefailures

Actions or inactions by people (pilots, controllers, Actions or inactions by people (pilots, controllers, maintenance engineers, aerodrome staff, etc.) that maintenance engineers, aerodrome staff, etc.) that have an immediate adverse effect. have an immediate adverse effect.

ErrorsErrors ViolationsViolations ErrorsErrors ViolationsViolations

Page 16: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 16

The organizational accident

Organizational processes

Latentconditions

Workplaceconditions

DefencesActive

failures

Organizational processes

Latentconditions

Workplaceconditions

DefencesActive

failures

Improve IdentifyMonitor

Con

tain

Reinforce

Page 17: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 17

People and safety

Aviation workplaces involve complex interrelationships among its many components.

To understand operational performance, we must understand how it may be affected by the interrelationships among the various components of the aviation work places.

Aviation workplaces involve complex interrelationships among its many components.

To understand operational performance, we must understand how it may be affected by the interrelationships among the various components of the aviation work places.

Page 18: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

BB

AA

Understand Understand human performance human performance

within the within the operational context operational context where it takes placewhere it takes place

Page 19: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 19

Processes and outcomes

Error: Error: causescauses and and

consequencesconsequences are not are not linearlinear in in their their magnitudemagnitude

Page 20: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 20

People and safety – SHEL model

H

SSoftware

HHardware

EEnvironment

LLiveware

LLiveware, other persons

S

L L

E

Page 21: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 21

SHELL

a) Software (S) (procedures, training, support, etc.);b) Hardware (H) (machines and equipment);c) Environment (E) (the operating circumstances in which the rest of the L-H-S system must function);andd) Liveware (L) (humans in the workplace).

Page 22: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 22

Operational performance and technology

In production-intensive In production-intensive industries like aviation, industries like aviation, technology is essential. technology is essential.

The operational The operational consequences of the consequences of the interactions between interactions between people and technology are people and technology are often overlooked, leading to often overlooked, leading to human errorhuman error..

In production-intensive In production-intensive industries like aviation, industries like aviation, technology is essential. technology is essential.

The operational The operational consequences of the consequences of the interactions between interactions between people and technology are people and technology are often overlooked, leading to often overlooked, leading to human errorhuman error..

Page 23: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 23

Understanding operational errors

Human error is considered Human error is considered contributing factor in most aviation contributing factor in most aviation occurrences. occurrences.

Even competent personnel commit Even competent personnel commit errors. errors.

Errors must be accepted as a Errors must be accepted as a normal component of any system normal component of any system where humans and technology where humans and technology interact.interact.

Human error is considered Human error is considered contributing factor in most aviation contributing factor in most aviation occurrences. occurrences.

Even competent personnel commit Even competent personnel commit errors. errors.

Errors must be accepted as a Errors must be accepted as a normal component of any system normal component of any system where humans and technology where humans and technology interact.interact.

Page 24: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 24

Errors and safety – A non linear relationship

Statistically, millions of Statistically, millions of operational operational errorserrors are made before a major are made before a major

safety breakdown occurssafety breakdown occurs

Statistically, millions of Statistically, millions of operational operational errorserrors are made before a major are made before a major

safety breakdown occurssafety breakdown occurs

Page 25: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 25

Accident investigation – Once in a million flights

ErrorError

FlapsFlapsomittedomitted

Degradation/Degradation/breakdownbreakdown

DeviationDeviation

ChecklistChecklistfailurefailure

AmplificationAmplification

Unheeded Unheeded warningwarning

Page 26: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 26

Safety management – On almost every flight

FlapsFlapsomittedomittedFlapsFlapsomittedomitted

ErrorError

AmplificationAmplification

EffectiveEffectivewarningwarning

NormalNormaloperationoperation

DeviationDeviation

Checklist Checklist worksworks

Page 27: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 27

Errors and consequences

Three strategies for the control of human error Error reduction strategies

intervene at the source of the error by reducing or eliminating the contributing factors. Human-centred design Ergonomic factorsTraining…

Three strategies for the control of human error Error reduction strategies

intervene at the source of the error by reducing or eliminating the contributing factors. Human-centred design Ergonomic factorsTraining…

Page 28: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 28

Errors and consequences

Three strategies for the control of human errorError capturing strategies

intervene once the error has already been made, capturing the error before it generates adverse consequences. ChecklistsTask cardsFlight strips…

Three strategies for the control of human errorError capturing strategies

intervene once the error has already been made, capturing the error before it generates adverse consequences. ChecklistsTask cardsFlight strips…

Page 29: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 29

Errors and consequences

Three strategies for the control of human errorError tolerance strategies

intervene to increase the ability of a system to accept errors without serious consequence.System redundanciesStructural inspections…

Three strategies for the control of human errorError tolerance strategies

intervene to increase the ability of a system to accept errors without serious consequence.System redundanciesStructural inspections…

Page 30: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 30

Understanding violations – Are we ready?

IncidentIncident AccidentAccident Production objective(s)Production objective(s)

ProceduresProcedures

PeoplePeople

ViolationsViolations

System outputSystem outputMaxMax

RiskRisk

HigherHigher

TrainingTraining

MinMin

MinMin

SafetySafetyspacespace

TechnologyTechnology

Page 31: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 31

Culture

Culture binds people together as members of groups and

provides clues as to how to behave in both normal and

unusual situations.

Culture influences the values, beliefs and behaviours that

people share with other members of various social

groups.

Culture binds people together as members of groups and

provides clues as to how to behave in both normal and

unusual situations.

Culture influences the values, beliefs and behaviours that

people share with other members of various social

groups.

Page 32: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 32

Three cultures

OrganizationalOrganizational

ProfessionalProfessional

NationalNational

Page 33: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 33

Three distinct cultures

National cultureNational culture encompasses the value system of particular nations.

Organizational/corporate cultureOrganizational/corporate culture differentiates the values and behaviours of particular organizations (e.g. government vs. private organizations).

Professional cultureProfessional culture differentiates the values and behaviours of particular professional groups (e.g. pilots, air traffic controllers, maintenance engineers, aerodrome staff, etc.).

No human endeavour is culture-free

National cultureNational culture encompasses the value system of particular nations.

Organizational/corporate cultureOrganizational/corporate culture differentiates the values and behaviours of particular organizations (e.g. government vs. private organizations).

Professional cultureProfessional culture differentiates the values and behaviours of particular professional groups (e.g. pilots, air traffic controllers, maintenance engineers, aerodrome staff, etc.).

No human endeavour is culture-free

Page 34: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 34

Organizational/corporate culture

Sets the boundaries for acceptable behaviour in the acceptable behaviour in the

workplaceworkplace by establishing norms and limits.

Provides a frame work for managerial and employee

decision-making

““This is how we do things here, and how we This is how we do things here, and how we

talk about the way we do things here”talk about the way we do things here” .

Sets the boundaries for acceptable behaviour in the acceptable behaviour in the

workplaceworkplace by establishing norms and limits.

Provides a frame work for managerial and employee

decision-making

““This is how we do things here, and how we This is how we do things here, and how we

talk about the way we do things here”talk about the way we do things here” .

Page 35: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 35

Safety culture

A construct An outcome, not a process The introduction of safety management concepts lays

the foundation upon which to build a safety culture Safety culture cannot be “mandated” or Safety culture cannot be “mandated” or

“designed”, it evolves.“designed”, it evolves. It is generated “top-down”It is generated “top-down”

A construct An outcome, not a process The introduction of safety management concepts lays

the foundation upon which to build a safety culture Safety culture cannot be “mandated” or Safety culture cannot be “mandated” or

“designed”, it evolves.“designed”, it evolves. It is generated “top-down”It is generated “top-down”

Page 36: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 36

Positive culture

Positiveculture

Flexible culturePeople can adapt

organizational processes when facing high

temporary operations or certain kinds of danger,

shifting from the conventional hierarchical mode to a flatter mode.

Learning culturePeople have the willingness

and the competence to draw conclusions from

safety information systems and the will to implement

major reforms.

Informed culturePeople are knowledgeable about the human, technical,

organizational and environmental factors that determine the safety of the system as a whole.

Reporting culturePeople are prepared to report their errors and

experiences

Just culturePeople are encouraged (even rewarded) for providing

essential safety-related information. However, there is a clear line that differentiates between acceptable and

unacceptable behaviour.

Page 37: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 37

Three options

Organizations and the management of Organizations and the management of

informationinformation

PathologicalPathological – Hide the information– Hide the information

BureaucraticBureaucratic – Restraint the information– Restraint the information

GenerativeGenerative – Value the information– Value the information

Organizations and the management of Organizations and the management of

informationinformation

PathologicalPathological – Hide the information– Hide the information

BureaucraticBureaucratic – Restraint the information– Restraint the information

GenerativeGenerative – Value the information– Value the information

Page 38: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 38

Three possible organizational cultures

Hidden Ignored Sought

Shouted Tolerated Trained

Shirked Boxed Shared

Discouraged Allowed Rewarded

Covered up Merciful Scrutinized

Crushed Problematic Welcomed

ConflictedConflictedorganizationorganization

““Red tape” Red tape” organizationorganization

ReliableReliableorganizationorganization

Pathological Bureaucratic Generative

Information

Messengers

Responsibilities

Reports

Failures

New ideas

Resulting organization

Page 39: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 39

Safety investigation

For “funereal” purposesFor “funereal” purposesTo put losses behindTo reassert trust and faith in the systemTo resume normal activitiesTo fulfill political purposes

For improved system reliabilityFor improved system reliabilityTo learn about system vulnerabilityTo develop strategies for changeTo prioritize investment of resources

For “funereal” purposesFor “funereal” purposesTo put losses behindTo reassert trust and faith in the systemTo resume normal activitiesTo fulfill political purposes

For improved system reliabilityFor improved system reliabilityTo learn about system vulnerabilityTo develop strategies for changeTo prioritize investment of resources

Page 40: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 40

The facts The facts An old generation four engine turboprop freighter flies

into severe icing conditions. Engines 2 and 3 flameout as consequence of ice

accretion, and seven minutes later engine 4 fails. The flight crew manages to re-start engine number 2. Electrical load shedding is not possible, and the

electrical system reverts to battery power.

The facts The facts An old generation four engine turboprop freighter flies

into severe icing conditions. Engines 2 and 3 flameout as consequence of ice

accretion, and seven minutes later engine 4 fails. The flight crew manages to re-start engine number 2. Electrical load shedding is not possible, and the

electrical system reverts to battery power.

Investigation Investigation

Page 41: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 41

The facts The facts While attempting to conduct an emergency landing,

all electrical power is lost. All that is left to the flight crew is the self-powered

standby gyro, a flashlight and the self-powered engine instruments.

The flight crew is unable to maintain controlled flight, and the aircraft crashes out of control.

The facts The facts While attempting to conduct an emergency landing,

all electrical power is lost. All that is left to the flight crew is the self-powered

standby gyro, a flashlight and the self-powered engine instruments.

The flight crew is unable to maintain controlled flight, and the aircraft crashes out of control.

Investigation Investigation

Page 42: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 42

FindingsFindingsCrew did not use the weather radar.Crew did not consult the emergency check-list.Demanding situation requiring decisive thinking and

clear action.Conditions exceeded certification condition for the

engines.Did not request diversion to a closer aerodrome.

FindingsFindingsCrew did not use the weather radar.Crew did not consult the emergency check-list.Demanding situation requiring decisive thinking and

clear action.Conditions exceeded certification condition for the

engines.Did not request diversion to a closer aerodrome.

Investigation Investigation

Page 43: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 43

FindingsFindings……Crew did not use correct phraseology to declare

emergency.Poor crew resource management (CRM).Mismanagement of aircraft systems.Emergency checklist – presentation and visual

information.Flight operations internal quality assurance

procedures.

FindingsFindings……Crew did not use correct phraseology to declare

emergency.Poor crew resource management (CRM).Mismanagement of aircraft systems.Emergency checklist – presentation and visual

information.Flight operations internal quality assurance

procedures.

Investigation Investigation

Page 44: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 44

CausesCausesMultiple engine failuresIncomplete performance of emergency drillsCrew actions in securing and re-starting enginesDrag from unfeathered propellersWeight of icePoor CRMLack of contingency plansLoss of situational awareness

CausesCausesMultiple engine failuresIncomplete performance of emergency drillsCrew actions in securing and re-starting enginesDrag from unfeathered propellersWeight of icePoor CRMLack of contingency plansLoss of situational awareness

Investigation Investigation

Page 45: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 45

Safety recommendationsSafety recommendationsAuthority should remind pilots to use correct

phraseology.Authority should research into most effective form of

presentation of emergency reference material.

Safety recommendationsSafety recommendationsAuthority should remind pilots to use correct

phraseology.Authority should research into most effective form of

presentation of emergency reference material.

Investigation Investigation

Page 46: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 46

The factsThe factsAn old generation two engine turboprop commuter

aircraft engaged in a regular passenger transport operation is conducting a non-precision approach in marginal weather conditions in an uncontrolled, non-radar, remote airfield.

The flight crew conducts a straight-in approach, not following the published approach procedure. …

The factsThe factsAn old generation two engine turboprop commuter

aircraft engaged in a regular passenger transport operation is conducting a non-precision approach in marginal weather conditions in an uncontrolled, non-radar, remote airfield.

The flight crew conducts a straight-in approach, not following the published approach procedure. …

InvestigationInvestigation

Page 47: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 47

The factsThe factsUpon reaching MDA, the flight crew does not acquire

visual references. The flight crew abandons MDA without having acquired

visual references to pursue the landing. The aircraft crashes into terrain short of the runway.

The factsThe factsUpon reaching MDA, the flight crew does not acquire

visual references. The flight crew abandons MDA without having acquired

visual references to pursue the landing. The aircraft crashes into terrain short of the runway.

InvestigationInvestigation

Page 48: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 48

FindingsFindings The crew made numerous mistakes.

ButButCrew composition legal but unfavorable in view of

demanding flight conditions.According to company practice, pilot made a direct

approach, which was against regulations. …

FindingsFindings The crew made numerous mistakes.

ButButCrew composition legal but unfavorable in view of

demanding flight conditions.According to company practice, pilot made a direct

approach, which was against regulations. …

InvestigationInvestigation

Page 49: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 49

……

The company had consistently misinterpreted regulations.

Level of safety was not commensurate with the Level of safety was not commensurate with the

requirements of a scheduled passenger operation.requirements of a scheduled passenger operation.

Aerodrome operator had neither the staff nor the Aerodrome operator had neither the staff nor the

resources to ensure regularity of operations.resources to ensure regularity of operations.

……

The company had consistently misinterpreted regulations.

Level of safety was not commensurate with the Level of safety was not commensurate with the

requirements of a scheduled passenger operation.requirements of a scheduled passenger operation.

Aerodrome operator had neither the staff nor the Aerodrome operator had neither the staff nor the

resources to ensure regularity of operations.resources to ensure regularity of operations.

InvestigationInvestigation

Page 50: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 50

……

Lack of standards for commuter operations.Lack of standards for commuter operations.

Lack of supervision of air traffic facilities.Lack of supervision of air traffic facilities.

Authorities’ disregard of previous safety violationsAuthorities’ disregard of previous safety violations.

Legislation out of date.Legislation out of date.

……

……

Lack of standards for commuter operations.Lack of standards for commuter operations.

Lack of supervision of air traffic facilities.Lack of supervision of air traffic facilities.

Authorities’ disregard of previous safety violationsAuthorities’ disregard of previous safety violations.

Legislation out of date.Legislation out of date.

……

InvestigationInvestigation

Page 51: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 51

……

Conflicting goals within the authority.Conflicting goals within the authority.

Lack of resources within the authority.Lack of resources within the authority.

Lack of aviation policy to support the authority.Lack of aviation policy to support the authority.

Deficiencies in the training system.Deficiencies in the training system.

……

Conflicting goals within the authority.Conflicting goals within the authority.

Lack of resources within the authority.Lack of resources within the authority.

Lack of aviation policy to support the authority.Lack of aviation policy to support the authority.

Deficiencies in the training system.Deficiencies in the training system.

InvestigationInvestigation

Page 52: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 52

CausesCauses

Decision to continue approach below MDA without

visual contact.

Performance pressures.

Airline’s poor safety culture.

CausesCauses

Decision to continue approach below MDA without

visual contact.

Performance pressures.

Airline’s poor safety culture.

InvestigationInvestigation

Page 53: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 53

Safety recommendationsSafety recommendations

““Tip-of-the-arrow” recommendations.Tip-of-the-arrow” recommendations.

ButButReview the process of granting AOC.Review the process of granting AOC.Review the training system.Review the training system.Define an aviation policy which provides support to Define an aviation policy which provides support to

the task of the aviation administration. the task of the aviation administration. ……

Safety recommendationsSafety recommendations

““Tip-of-the-arrow” recommendations.Tip-of-the-arrow” recommendations.

ButButReview the process of granting AOC.Review the process of granting AOC.Review the training system.Review the training system.Define an aviation policy which provides support to Define an aviation policy which provides support to

the task of the aviation administration. the task of the aviation administration. ……

InvestigationInvestigation

Page 54: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 54

… … Safety recommendationsSafety recommendations

Reform aviation legislation.Reform aviation legislation.

Reinforce existing legislation as interim measure.Reinforce existing legislation as interim measure.

Improve both accident investigation and aircraft and Improve both accident investigation and aircraft and

airways inspection processes.airways inspection processes.

… … Safety recommendationsSafety recommendations

Reform aviation legislation.Reform aviation legislation.

Reinforce existing legislation as interim measure.Reinforce existing legislation as interim measure.

Improve both accident investigation and aircraft and Improve both accident investigation and aircraft and

airways inspection processes.airways inspection processes.

InvestigationInvestigation

Page 55: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 55

Errors ...Errors ...

… … are like mosquitoes …are like mosquitoes …

Page 56: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 56

... drain their breeding swamps.... drain their breeding swamps.

To fight them …

Page 57: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course
Page 58: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 58

Q&A

Q:Q: How is safety defined in document 9859?

A: ?A: ?

Q:Q: How is safety defined in document 9859?

A: ?A: ?

Slide number:

Page 59: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 59

Q&A

Q:Q: Enumerate the five building blocks of the Reason Model.

A: ?A: ?

Q:Q: Enumerate the five building blocks of the Reason Model.

A: ?A: ?

Slide number:

Page 60: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 60

Q&A

Q:Q: Explain the components of the SHEL(L) Model A:A: ?

Q:Q: Explain the components of the SHEL(L) Model A:A: ?

Slide number:

Page 61: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 61

Q&A

Q:Q: Enumerate at least three factors of a positive culture A:A: ? ?

Q:Q: Enumerate at least three factors of a positive culture A:A: ? ?

Slide number:

Page 62: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 62

Q&A

Q:Q: How can organizations be characterized, depending How can organizations be characterized, depending

upon their management of safety information? upon their management of safety information?

A: ?A: ?

Q:Q: How can organizations be characterized, depending How can organizations be characterized, depending

upon their management of safety information? upon their management of safety information?

A: ?A: ?

Slide number:

Page 63: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 63

Points to remember

1. The organizational accident.2. Operational contexts and human performance3. Errors and violations.4. Organizational culture and safety.5. The management of safety information and safety

culture.

Reference: Doc 9859, Chapters 1, 2 and 4

1. The organizational accident.2. Operational contexts and human performance3. Errors and violations.4. Organizational culture and safety.5. The management of safety information and safety

culture.

Reference: Doc 9859, Chapters 1, 2 and 4

Page 64: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course
Page 65: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 65

Handout Nº 1 – Exercise 02/01

In the late hours of a summer Friday evening, while landing on a runway heavily contaminated with water, a twin-engine jet transport aircraft with four crew members and 65 passengers on board overran the westerly end of the runway at Kargil City airport.

The aircraft came to rest in the mud a short distance beyond the end of the runway.

There were no injuries to crew or passengers, and there was no apparent damage to the aircraft as a consequence of the overrun. However, a fire started and subsequently destroyed the aircraft.

In the late hours of a summer Friday evening, while landing on a runway heavily contaminated with water, a twin-engine jet transport aircraft with four crew members and 65 passengers on board overran the westerly end of the runway at Kargil City airport.

The aircraft came to rest in the mud a short distance beyond the end of the runway.

There were no injuries to crew or passengers, and there was no apparent damage to the aircraft as a consequence of the overrun. However, a fire started and subsequently destroyed the aircraft.

Page 66: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 66

The Kargil City Airport accident

Group activity: A facilitator will be appointed, who will coordinate the A facilitator will be appointed, who will coordinate the

discussion. discussion. A summary of the discussion will be written on flip A summary of the discussion will be written on flip

charts, and a member of the group will brief on their charts, and a member of the group will brief on their findings in a plenary session. findings in a plenary session.

Required task:Read the text related to the accident of the twin-

engined jet transport at Kargil City Airport. ……

Group activity: A facilitator will be appointed, who will coordinate the A facilitator will be appointed, who will coordinate the

discussion. discussion. A summary of the discussion will be written on flip A summary of the discussion will be written on flip

charts, and a member of the group will brief on their charts, and a member of the group will brief on their findings in a plenary session. findings in a plenary session.

Required task:Read the text related to the accident of the twin-

engined jet transport at Kargil City Airport. ……

Page 67: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 67

The Kargil City Airport accident

… required task: From the investigation report of the above accident,

you should identify: Organizational processesOrganizational processes that influenced the

operation and which felt under the responsibility of senior management (i.e. those accountable for the allocation of resources);

Latent conditionsLatent conditions in the system safety which became precursors of active failures;

DefencesDefences which failed to perform due to weaknesses, inadequacies or plain absence; ……

… required task: From the investigation report of the above accident,

you should identify: Organizational processesOrganizational processes that influenced the

operation and which felt under the responsibility of senior management (i.e. those accountable for the allocation of resources);

Latent conditionsLatent conditions in the system safety which became precursors of active failures;

DefencesDefences which failed to perform due to weaknesses, inadequacies or plain absence; ……

Page 68: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 68

The Kargil City Airport accident

… required task:

WorkplaceWorkplace conditionsconditions, which may have

influenced operational personnel actions; and

Active failuresActive failures, including errors and violations

When you have concluded the above, your task is to

complete the Table 02/01 – Analysis (Handout N° 1)

classifying your findings according to the Reason

Model.

… required task:

WorkplaceWorkplace conditionsconditions, which may have

influenced operational personnel actions; and

Active failuresActive failures, including errors and violations

When you have concluded the above, your task is to

complete the Table 02/01 – Analysis (Handout N° 1)

classifying your findings according to the Reason

Model.

Page 69: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 69

The organizational accident

Organizational processes

Latentconditions

Workplaceconditions

DefencesActive

failures

Source: James Reason

Page 70: Module N° 2 – Basic safety concepts Safety Management Systems (SMS) Course

Module NModule N° 2 – Basic ° 2 – Basic safety conceptssafety concepts

Safety Management Systems (SMS) CourseSafety Management Systems (SMS) Course