module n° 2 – basic safety concepts safety management systems (sms) course
TRANSCRIPT
Module NModule N° 2 – Basic safety ° 2 – Basic safety conceptsconcepts
Safety Management Systems (SMS) CourseSafety Management Systems (SMS) Course
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 2
Module 1SMS course introduction
Module 3Introduction to safety
management
Module 4Hazards
Module 5Risks
Module 6SMS regulation
Module 7Introduction to SMS
Module 8SMS planning
Module 9SMS operation
Module10 Phased approach to SMS
implementation
Module 2Basic safety concepts
Module 2Basic safety concepts
SafetySafety
ManagementManagement
SystemSystem
Building an SMS
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 3
Objective
At the end of this module, participants will be able to
describe the limitations of traditional methods to
manage safety and describe new perspectives and
methods for managing safety.
At the end of this module, participants will be able to
describe the limitations of traditional methods to
manage safety and describe new perspectives and
methods for managing safety.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 4
Outline
Concept of safetyConcept of safety The evolution of safety thinkingThe evolution of safety thinking A concept of accident causation – Reason modelA concept of accident causation – Reason model The organizational accidentThe organizational accident People and safety – SHEL modelPeople and safety – SHEL model Errors and violationsErrors and violations Organizational cultureOrganizational culture Safety investigationSafety investigation Questions and answersQuestions and answers Points to rememberPoints to remember Exercise Nº 02/01Exercise Nº 02/01 – The Kargil City Airport accident (See – The Kargil City Airport accident (See
Handout N° 1)Handout N° 1)
Concept of safetyConcept of safety The evolution of safety thinkingThe evolution of safety thinking A concept of accident causation – Reason modelA concept of accident causation – Reason model The organizational accidentThe organizational accident People and safety – SHEL modelPeople and safety – SHEL model Errors and violationsErrors and violations Organizational cultureOrganizational culture Safety investigationSafety investigation Questions and answersQuestions and answers Points to rememberPoints to remember Exercise Nº 02/01Exercise Nº 02/01 – The Kargil City Airport accident (See – The Kargil City Airport accident (See
Handout N° 1)Handout N° 1)
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 5
Concept of safety
What is safetyWhat is safety Zero accidents (or serious incidents)?Zero accidents (or serious incidents)? Freedom from danger or risks?Freedom from danger or risks? Error avoidanceError avoidance Regulatory compliance?Regulatory compliance? … … ??
What is safetyWhat is safety Zero accidents (or serious incidents)?Zero accidents (or serious incidents)? Freedom from danger or risks?Freedom from danger or risks? Error avoidanceError avoidance Regulatory compliance?Regulatory compliance? … … ??
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 6
Concept of safety
ConsiderConsider The elimination of accidents (and serious incidents) The elimination of accidents (and serious incidents)
is unachievable. is unachievable. Failures will occur, in spite of the most Failures will occur, in spite of the most
accomplished prevention efforts.accomplished prevention efforts. No human endeavour or human-made system can No human endeavour or human-made system can
be free from risk and error. be free from risk and error. Controlled risk and error is acceptable in an Controlled risk and error is acceptable in an
inherently safe system.inherently safe system.
ConsiderConsider The elimination of accidents (and serious incidents) The elimination of accidents (and serious incidents)
is unachievable. is unachievable. Failures will occur, in spite of the most Failures will occur, in spite of the most
accomplished prevention efforts.accomplished prevention efforts. No human endeavour or human-made system can No human endeavour or human-made system can
be free from risk and error. be free from risk and error. Controlled risk and error is acceptable in an Controlled risk and error is acceptable in an
inherently safe system.inherently safe system.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 7
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 8
SafetySafetyTraditional approach – Accident preventionTraditional approach – Accident prevention
Focus on outcomes (probable cause)Focus on outcomes (probable cause)Unsafe acts by operational personnelUnsafe acts by operational personnelAttach blame/punish for failures to “perform safely”Attach blame/punish for failures to “perform safely”Address identified safety concern exclusivelyAddress identified safety concern exclusivelyIdentifies:Identifies:
Traditional approach – Accident preventionTraditional approach – Accident preventionFocus on outcomes (probable cause)Focus on outcomes (probable cause)Unsafe acts by operational personnelUnsafe acts by operational personnelAttach blame/punish for failures to “perform safely”Attach blame/punish for failures to “perform safely”Address identified safety concern exclusivelyAddress identified safety concern exclusivelyIdentifies:Identifies:
WHAT?WHAT? WHO?WHO? WHEN?WHEN?
WHY?WHY? HOW?HOW?
But not always discloses:But not always discloses:
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 9
The evolution of safety thinking
TECHNICAL FACTORSTECHNICAL FACTORS
HUMAN FACTORSHUMAN FACTORS
ORGANIZATIONAL ORGANIZATIONAL FACTORS FACTORS
TOD
AY
TOD
AY
1950s1950s 1970s1970s 1990s1990s 2000s2000s
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 10
A concept of accident causation
DefensesDefenses AAcccciiddeenntt
OrganizationOrganization
ManagementManagementdecisions anddecisions and organizationalorganizational
processesprocesses
PeoplePeople
ErrorsErrorsand and
violationsviolations
Workplace Workplace
WorkingWorking
conditionsconditions
Latent conditions trajectoryLatent conditions trajectorySource: James Reason
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 11
Organizational processes
Policy-makingPolicy-making PlanningPlanning Communication Communication Allocation of resourcesAllocation of resources SupervisionSupervision ……
Policy-makingPolicy-making PlanningPlanning Communication Communication Allocation of resourcesAllocation of resources SupervisionSupervision ……
Activities over which any organization has a Activities over which any organization has a reasonable degree of direct controlreasonable degree of direct control
Activities over which any organization has a Activities over which any organization has a reasonable degree of direct controlreasonable degree of direct control
The organizational accident
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 12
The organizational accident
Organizational processes
Latentconditions
Inadequate hazard Inadequate hazard identification and risk identification and risk managementmanagement
Normalization of Normalization of deviancedeviance
Inadequate hazard Inadequate hazard identification and risk identification and risk managementmanagement
Normalization of Normalization of deviancedeviance
Conditions present in the system before the accident, Conditions present in the system before the accident, made evident by triggering factors. made evident by triggering factors.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 13
The organizational accident
Organizational processes
Latentconditions
Defences
Technology Technology RegulationsRegulationsTraining and checkingTraining and checking
Technology Technology RegulationsRegulationsTraining and checkingTraining and checking
Resources to protect against the risks that organizations Resources to protect against the risks that organizations involved in production activities must confront. involved in production activities must confront.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 14
The organizational accident
Organizational processes
Workplaceconditions
Factors that directly influence the efficiency of people in Factors that directly influence the efficiency of people in aviation workplaces.aviation workplaces.
Workforce stabilityWorkforce stabilityQualifications and Qualifications and
experienceexperienceMoraleMoraleCredibilityCredibilityErgonomicsErgonomics……
Workforce stabilityWorkforce stabilityQualifications and Qualifications and
experienceexperienceMoraleMoraleCredibilityCredibilityErgonomicsErgonomics……
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 15
The organizational accident
Organizational processes
Workplaceconditions
Activefailures
Actions or inactions by people (pilots, controllers, Actions or inactions by people (pilots, controllers, maintenance engineers, aerodrome staff, etc.) that maintenance engineers, aerodrome staff, etc.) that have an immediate adverse effect. have an immediate adverse effect.
ErrorsErrors ViolationsViolations ErrorsErrors ViolationsViolations
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 16
The organizational accident
Organizational processes
Latentconditions
Workplaceconditions
DefencesActive
failures
Organizational processes
Latentconditions
Workplaceconditions
DefencesActive
failures
Improve IdentifyMonitor
Con
tain
Reinforce
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 17
People and safety
Aviation workplaces involve complex interrelationships among its many components.
To understand operational performance, we must understand how it may be affected by the interrelationships among the various components of the aviation work places.
Aviation workplaces involve complex interrelationships among its many components.
To understand operational performance, we must understand how it may be affected by the interrelationships among the various components of the aviation work places.
BB
AA
Understand Understand human performance human performance
within the within the operational context operational context where it takes placewhere it takes place
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 19
Processes and outcomes
Error: Error: causescauses and and
consequencesconsequences are not are not linearlinear in in their their magnitudemagnitude
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 20
People and safety – SHEL model
H
SSoftware
HHardware
EEnvironment
LLiveware
LLiveware, other persons
S
L L
E
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 21
SHELL
a) Software (S) (procedures, training, support, etc.);b) Hardware (H) (machines and equipment);c) Environment (E) (the operating circumstances in which the rest of the L-H-S system must function);andd) Liveware (L) (humans in the workplace).
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 22
Operational performance and technology
In production-intensive In production-intensive industries like aviation, industries like aviation, technology is essential. technology is essential.
The operational The operational consequences of the consequences of the interactions between interactions between people and technology are people and technology are often overlooked, leading to often overlooked, leading to human errorhuman error..
In production-intensive In production-intensive industries like aviation, industries like aviation, technology is essential. technology is essential.
The operational The operational consequences of the consequences of the interactions between interactions between people and technology are people and technology are often overlooked, leading to often overlooked, leading to human errorhuman error..
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 23
Understanding operational errors
Human error is considered Human error is considered contributing factor in most aviation contributing factor in most aviation occurrences. occurrences.
Even competent personnel commit Even competent personnel commit errors. errors.
Errors must be accepted as a Errors must be accepted as a normal component of any system normal component of any system where humans and technology where humans and technology interact.interact.
Human error is considered Human error is considered contributing factor in most aviation contributing factor in most aviation occurrences. occurrences.
Even competent personnel commit Even competent personnel commit errors. errors.
Errors must be accepted as a Errors must be accepted as a normal component of any system normal component of any system where humans and technology where humans and technology interact.interact.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 24
Errors and safety – A non linear relationship
Statistically, millions of Statistically, millions of operational operational errorserrors are made before a major are made before a major
safety breakdown occurssafety breakdown occurs
Statistically, millions of Statistically, millions of operational operational errorserrors are made before a major are made before a major
safety breakdown occurssafety breakdown occurs
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 25
Accident investigation – Once in a million flights
ErrorError
FlapsFlapsomittedomitted
Degradation/Degradation/breakdownbreakdown
DeviationDeviation
ChecklistChecklistfailurefailure
AmplificationAmplification
Unheeded Unheeded warningwarning
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 26
Safety management – On almost every flight
FlapsFlapsomittedomittedFlapsFlapsomittedomitted
ErrorError
AmplificationAmplification
EffectiveEffectivewarningwarning
NormalNormaloperationoperation
DeviationDeviation
Checklist Checklist worksworks
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 27
Errors and consequences
Three strategies for the control of human error Error reduction strategies
intervene at the source of the error by reducing or eliminating the contributing factors. Human-centred design Ergonomic factorsTraining…
Three strategies for the control of human error Error reduction strategies
intervene at the source of the error by reducing or eliminating the contributing factors. Human-centred design Ergonomic factorsTraining…
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 28
Errors and consequences
Three strategies for the control of human errorError capturing strategies
intervene once the error has already been made, capturing the error before it generates adverse consequences. ChecklistsTask cardsFlight strips…
Three strategies for the control of human errorError capturing strategies
intervene once the error has already been made, capturing the error before it generates adverse consequences. ChecklistsTask cardsFlight strips…
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 29
Errors and consequences
Three strategies for the control of human errorError tolerance strategies
intervene to increase the ability of a system to accept errors without serious consequence.System redundanciesStructural inspections…
Three strategies for the control of human errorError tolerance strategies
intervene to increase the ability of a system to accept errors without serious consequence.System redundanciesStructural inspections…
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 30
Understanding violations – Are we ready?
IncidentIncident AccidentAccident Production objective(s)Production objective(s)
ProceduresProcedures
PeoplePeople
ViolationsViolations
System outputSystem outputMaxMax
RiskRisk
HigherHigher
TrainingTraining
MinMin
MinMin
SafetySafetyspacespace
TechnologyTechnology
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 31
Culture
Culture binds people together as members of groups and
provides clues as to how to behave in both normal and
unusual situations.
Culture influences the values, beliefs and behaviours that
people share with other members of various social
groups.
Culture binds people together as members of groups and
provides clues as to how to behave in both normal and
unusual situations.
Culture influences the values, beliefs and behaviours that
people share with other members of various social
groups.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 32
Three cultures
OrganizationalOrganizational
ProfessionalProfessional
NationalNational
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 33
Three distinct cultures
National cultureNational culture encompasses the value system of particular nations.
Organizational/corporate cultureOrganizational/corporate culture differentiates the values and behaviours of particular organizations (e.g. government vs. private organizations).
Professional cultureProfessional culture differentiates the values and behaviours of particular professional groups (e.g. pilots, air traffic controllers, maintenance engineers, aerodrome staff, etc.).
No human endeavour is culture-free
National cultureNational culture encompasses the value system of particular nations.
Organizational/corporate cultureOrganizational/corporate culture differentiates the values and behaviours of particular organizations (e.g. government vs. private organizations).
Professional cultureProfessional culture differentiates the values and behaviours of particular professional groups (e.g. pilots, air traffic controllers, maintenance engineers, aerodrome staff, etc.).
No human endeavour is culture-free
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 34
Organizational/corporate culture
Sets the boundaries for acceptable behaviour in the acceptable behaviour in the
workplaceworkplace by establishing norms and limits.
Provides a frame work for managerial and employee
decision-making
““This is how we do things here, and how we This is how we do things here, and how we
talk about the way we do things here”talk about the way we do things here” .
Sets the boundaries for acceptable behaviour in the acceptable behaviour in the
workplaceworkplace by establishing norms and limits.
Provides a frame work for managerial and employee
decision-making
““This is how we do things here, and how we This is how we do things here, and how we
talk about the way we do things here”talk about the way we do things here” .
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 35
Safety culture
A construct An outcome, not a process The introduction of safety management concepts lays
the foundation upon which to build a safety culture Safety culture cannot be “mandated” or Safety culture cannot be “mandated” or
“designed”, it evolves.“designed”, it evolves. It is generated “top-down”It is generated “top-down”
A construct An outcome, not a process The introduction of safety management concepts lays
the foundation upon which to build a safety culture Safety culture cannot be “mandated” or Safety culture cannot be “mandated” or
“designed”, it evolves.“designed”, it evolves. It is generated “top-down”It is generated “top-down”
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 36
Positive culture
Positiveculture
Flexible culturePeople can adapt
organizational processes when facing high
temporary operations or certain kinds of danger,
shifting from the conventional hierarchical mode to a flatter mode.
Learning culturePeople have the willingness
and the competence to draw conclusions from
safety information systems and the will to implement
major reforms.
Informed culturePeople are knowledgeable about the human, technical,
organizational and environmental factors that determine the safety of the system as a whole.
Reporting culturePeople are prepared to report their errors and
experiences
Just culturePeople are encouraged (even rewarded) for providing
essential safety-related information. However, there is a clear line that differentiates between acceptable and
unacceptable behaviour.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 37
Three options
Organizations and the management of Organizations and the management of
informationinformation
PathologicalPathological – Hide the information– Hide the information
BureaucraticBureaucratic – Restraint the information– Restraint the information
GenerativeGenerative – Value the information– Value the information
Organizations and the management of Organizations and the management of
informationinformation
PathologicalPathological – Hide the information– Hide the information
BureaucraticBureaucratic – Restraint the information– Restraint the information
GenerativeGenerative – Value the information– Value the information
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 38
Three possible organizational cultures
Hidden Ignored Sought
Shouted Tolerated Trained
Shirked Boxed Shared
Discouraged Allowed Rewarded
Covered up Merciful Scrutinized
Crushed Problematic Welcomed
ConflictedConflictedorganizationorganization
““Red tape” Red tape” organizationorganization
ReliableReliableorganizationorganization
Pathological Bureaucratic Generative
Information
Messengers
Responsibilities
Reports
Failures
New ideas
Resulting organization
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 39
Safety investigation
For “funereal” purposesFor “funereal” purposesTo put losses behindTo reassert trust and faith in the systemTo resume normal activitiesTo fulfill political purposes
For improved system reliabilityFor improved system reliabilityTo learn about system vulnerabilityTo develop strategies for changeTo prioritize investment of resources
For “funereal” purposesFor “funereal” purposesTo put losses behindTo reassert trust and faith in the systemTo resume normal activitiesTo fulfill political purposes
For improved system reliabilityFor improved system reliabilityTo learn about system vulnerabilityTo develop strategies for changeTo prioritize investment of resources
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 40
The facts The facts An old generation four engine turboprop freighter flies
into severe icing conditions. Engines 2 and 3 flameout as consequence of ice
accretion, and seven minutes later engine 4 fails. The flight crew manages to re-start engine number 2. Electrical load shedding is not possible, and the
electrical system reverts to battery power.
The facts The facts An old generation four engine turboprop freighter flies
into severe icing conditions. Engines 2 and 3 flameout as consequence of ice
accretion, and seven minutes later engine 4 fails. The flight crew manages to re-start engine number 2. Electrical load shedding is not possible, and the
electrical system reverts to battery power.
Investigation Investigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 41
The facts The facts While attempting to conduct an emergency landing,
all electrical power is lost. All that is left to the flight crew is the self-powered
standby gyro, a flashlight and the self-powered engine instruments.
The flight crew is unable to maintain controlled flight, and the aircraft crashes out of control.
The facts The facts While attempting to conduct an emergency landing,
all electrical power is lost. All that is left to the flight crew is the self-powered
standby gyro, a flashlight and the self-powered engine instruments.
The flight crew is unable to maintain controlled flight, and the aircraft crashes out of control.
Investigation Investigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 42
FindingsFindingsCrew did not use the weather radar.Crew did not consult the emergency check-list.Demanding situation requiring decisive thinking and
clear action.Conditions exceeded certification condition for the
engines.Did not request diversion to a closer aerodrome.
FindingsFindingsCrew did not use the weather radar.Crew did not consult the emergency check-list.Demanding situation requiring decisive thinking and
clear action.Conditions exceeded certification condition for the
engines.Did not request diversion to a closer aerodrome.
Investigation Investigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 43
FindingsFindings……Crew did not use correct phraseology to declare
emergency.Poor crew resource management (CRM).Mismanagement of aircraft systems.Emergency checklist – presentation and visual
information.Flight operations internal quality assurance
procedures.
FindingsFindings……Crew did not use correct phraseology to declare
emergency.Poor crew resource management (CRM).Mismanagement of aircraft systems.Emergency checklist – presentation and visual
information.Flight operations internal quality assurance
procedures.
Investigation Investigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 44
CausesCausesMultiple engine failuresIncomplete performance of emergency drillsCrew actions in securing and re-starting enginesDrag from unfeathered propellersWeight of icePoor CRMLack of contingency plansLoss of situational awareness
CausesCausesMultiple engine failuresIncomplete performance of emergency drillsCrew actions in securing and re-starting enginesDrag from unfeathered propellersWeight of icePoor CRMLack of contingency plansLoss of situational awareness
Investigation Investigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 45
Safety recommendationsSafety recommendationsAuthority should remind pilots to use correct
phraseology.Authority should research into most effective form of
presentation of emergency reference material.
Safety recommendationsSafety recommendationsAuthority should remind pilots to use correct
phraseology.Authority should research into most effective form of
presentation of emergency reference material.
Investigation Investigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 46
The factsThe factsAn old generation two engine turboprop commuter
aircraft engaged in a regular passenger transport operation is conducting a non-precision approach in marginal weather conditions in an uncontrolled, non-radar, remote airfield.
The flight crew conducts a straight-in approach, not following the published approach procedure. …
The factsThe factsAn old generation two engine turboprop commuter
aircraft engaged in a regular passenger transport operation is conducting a non-precision approach in marginal weather conditions in an uncontrolled, non-radar, remote airfield.
The flight crew conducts a straight-in approach, not following the published approach procedure. …
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 47
The factsThe factsUpon reaching MDA, the flight crew does not acquire
visual references. The flight crew abandons MDA without having acquired
visual references to pursue the landing. The aircraft crashes into terrain short of the runway.
The factsThe factsUpon reaching MDA, the flight crew does not acquire
visual references. The flight crew abandons MDA without having acquired
visual references to pursue the landing. The aircraft crashes into terrain short of the runway.
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 48
FindingsFindings The crew made numerous mistakes.
ButButCrew composition legal but unfavorable in view of
demanding flight conditions.According to company practice, pilot made a direct
approach, which was against regulations. …
FindingsFindings The crew made numerous mistakes.
ButButCrew composition legal but unfavorable in view of
demanding flight conditions.According to company practice, pilot made a direct
approach, which was against regulations. …
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 49
……
The company had consistently misinterpreted regulations.
Level of safety was not commensurate with the Level of safety was not commensurate with the
requirements of a scheduled passenger operation.requirements of a scheduled passenger operation.
Aerodrome operator had neither the staff nor the Aerodrome operator had neither the staff nor the
resources to ensure regularity of operations.resources to ensure regularity of operations.
…
……
The company had consistently misinterpreted regulations.
Level of safety was not commensurate with the Level of safety was not commensurate with the
requirements of a scheduled passenger operation.requirements of a scheduled passenger operation.
Aerodrome operator had neither the staff nor the Aerodrome operator had neither the staff nor the
resources to ensure regularity of operations.resources to ensure regularity of operations.
…
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 50
……
Lack of standards for commuter operations.Lack of standards for commuter operations.
Lack of supervision of air traffic facilities.Lack of supervision of air traffic facilities.
Authorities’ disregard of previous safety violationsAuthorities’ disregard of previous safety violations.
Legislation out of date.Legislation out of date.
……
……
Lack of standards for commuter operations.Lack of standards for commuter operations.
Lack of supervision of air traffic facilities.Lack of supervision of air traffic facilities.
Authorities’ disregard of previous safety violationsAuthorities’ disregard of previous safety violations.
Legislation out of date.Legislation out of date.
……
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 51
……
Conflicting goals within the authority.Conflicting goals within the authority.
Lack of resources within the authority.Lack of resources within the authority.
Lack of aviation policy to support the authority.Lack of aviation policy to support the authority.
Deficiencies in the training system.Deficiencies in the training system.
……
Conflicting goals within the authority.Conflicting goals within the authority.
Lack of resources within the authority.Lack of resources within the authority.
Lack of aviation policy to support the authority.Lack of aviation policy to support the authority.
Deficiencies in the training system.Deficiencies in the training system.
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 52
CausesCauses
Decision to continue approach below MDA without
visual contact.
Performance pressures.
Airline’s poor safety culture.
CausesCauses
Decision to continue approach below MDA without
visual contact.
Performance pressures.
Airline’s poor safety culture.
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 53
Safety recommendationsSafety recommendations
““Tip-of-the-arrow” recommendations.Tip-of-the-arrow” recommendations.
ButButReview the process of granting AOC.Review the process of granting AOC.Review the training system.Review the training system.Define an aviation policy which provides support to Define an aviation policy which provides support to
the task of the aviation administration. the task of the aviation administration. ……
Safety recommendationsSafety recommendations
““Tip-of-the-arrow” recommendations.Tip-of-the-arrow” recommendations.
ButButReview the process of granting AOC.Review the process of granting AOC.Review the training system.Review the training system.Define an aviation policy which provides support to Define an aviation policy which provides support to
the task of the aviation administration. the task of the aviation administration. ……
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 54
… … Safety recommendationsSafety recommendations
Reform aviation legislation.Reform aviation legislation.
Reinforce existing legislation as interim measure.Reinforce existing legislation as interim measure.
Improve both accident investigation and aircraft and Improve both accident investigation and aircraft and
airways inspection processes.airways inspection processes.
… … Safety recommendationsSafety recommendations
Reform aviation legislation.Reform aviation legislation.
Reinforce existing legislation as interim measure.Reinforce existing legislation as interim measure.
Improve both accident investigation and aircraft and Improve both accident investigation and aircraft and
airways inspection processes.airways inspection processes.
InvestigationInvestigation
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 55
Errors ...Errors ...
… … are like mosquitoes …are like mosquitoes …
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 56
... drain their breeding swamps.... drain their breeding swamps.
To fight them …
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 58
Q&A
Q:Q: How is safety defined in document 9859?
A: ?A: ?
Q:Q: How is safety defined in document 9859?
A: ?A: ?
Slide number:
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 59
Q&A
Q:Q: Enumerate the five building blocks of the Reason Model.
A: ?A: ?
Q:Q: Enumerate the five building blocks of the Reason Model.
A: ?A: ?
Slide number:
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 60
Q&A
Q:Q: Explain the components of the SHEL(L) Model A:A: ?
Q:Q: Explain the components of the SHEL(L) Model A:A: ?
Slide number:
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 61
Q&A
Q:Q: Enumerate at least three factors of a positive culture A:A: ? ?
Q:Q: Enumerate at least three factors of a positive culture A:A: ? ?
Slide number:
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 62
Q&A
Q:Q: How can organizations be characterized, depending How can organizations be characterized, depending
upon their management of safety information? upon their management of safety information?
A: ?A: ?
Q:Q: How can organizations be characterized, depending How can organizations be characterized, depending
upon their management of safety information? upon their management of safety information?
A: ?A: ?
Slide number:
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 63
Points to remember
1. The organizational accident.2. Operational contexts and human performance3. Errors and violations.4. Organizational culture and safety.5. The management of safety information and safety
culture.
Reference: Doc 9859, Chapters 1, 2 and 4
1. The organizational accident.2. Operational contexts and human performance3. Errors and violations.4. Organizational culture and safety.5. The management of safety information and safety
culture.
Reference: Doc 9859, Chapters 1, 2 and 4
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 65
Handout Nº 1 – Exercise 02/01
In the late hours of a summer Friday evening, while landing on a runway heavily contaminated with water, a twin-engine jet transport aircraft with four crew members and 65 passengers on board overran the westerly end of the runway at Kargil City airport.
The aircraft came to rest in the mud a short distance beyond the end of the runway.
There were no injuries to crew or passengers, and there was no apparent damage to the aircraft as a consequence of the overrun. However, a fire started and subsequently destroyed the aircraft.
In the late hours of a summer Friday evening, while landing on a runway heavily contaminated with water, a twin-engine jet transport aircraft with four crew members and 65 passengers on board overran the westerly end of the runway at Kargil City airport.
The aircraft came to rest in the mud a short distance beyond the end of the runway.
There were no injuries to crew or passengers, and there was no apparent damage to the aircraft as a consequence of the overrun. However, a fire started and subsequently destroyed the aircraft.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 66
The Kargil City Airport accident
Group activity: A facilitator will be appointed, who will coordinate the A facilitator will be appointed, who will coordinate the
discussion. discussion. A summary of the discussion will be written on flip A summary of the discussion will be written on flip
charts, and a member of the group will brief on their charts, and a member of the group will brief on their findings in a plenary session. findings in a plenary session.
Required task:Read the text related to the accident of the twin-
engined jet transport at Kargil City Airport. ……
Group activity: A facilitator will be appointed, who will coordinate the A facilitator will be appointed, who will coordinate the
discussion. discussion. A summary of the discussion will be written on flip A summary of the discussion will be written on flip
charts, and a member of the group will brief on their charts, and a member of the group will brief on their findings in a plenary session. findings in a plenary session.
Required task:Read the text related to the accident of the twin-
engined jet transport at Kargil City Airport. ……
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 67
The Kargil City Airport accident
… required task: From the investigation report of the above accident,
you should identify: Organizational processesOrganizational processes that influenced the
operation and which felt under the responsibility of senior management (i.e. those accountable for the allocation of resources);
Latent conditionsLatent conditions in the system safety which became precursors of active failures;
DefencesDefences which failed to perform due to weaknesses, inadequacies or plain absence; ……
… required task: From the investigation report of the above accident,
you should identify: Organizational processesOrganizational processes that influenced the
operation and which felt under the responsibility of senior management (i.e. those accountable for the allocation of resources);
Latent conditionsLatent conditions in the system safety which became precursors of active failures;
DefencesDefences which failed to perform due to weaknesses, inadequacies or plain absence; ……
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 68
The Kargil City Airport accident
… required task:
WorkplaceWorkplace conditionsconditions, which may have
influenced operational personnel actions; and
Active failuresActive failures, including errors and violations
When you have concluded the above, your task is to
complete the Table 02/01 – Analysis (Handout N° 1)
classifying your findings according to the Reason
Model.
… required task:
WorkplaceWorkplace conditionsconditions, which may have
influenced operational personnel actions; and
Active failuresActive failures, including errors and violations
When you have concluded the above, your task is to
complete the Table 02/01 – Analysis (Handout N° 1)
classifying your findings according to the Reason
Model.
Module NModule N° 2° 2 ICAO Safety Management Systems (SMS) Course 69
The organizational accident
Organizational processes
Latentconditions
Workplaceconditions
DefencesActive
failures
Source: James Reason
Module NModule N° 2 – Basic ° 2 – Basic safety conceptssafety concepts
Safety Management Systems (SMS) CourseSafety Management Systems (SMS) Course