Hazard Analysis Template

Risk before Mitigation Measures

EXAMPLE

System

Flight
Safety
System

Hazard Description

Severity

I
Failure of TTS to respond to
manual trigger effort

Catastrophi
c

Likelihood

Risk
Hazard
Index

C
4
Occasional

Risk After Mitigation Measures

Risk Elimination or
Mitigation Measures

Severity

1. Dead Man switch activates TTS

when released (open circuit)
2. Activation sound and light warnings
I
prompt backup actions if absent
3. Backup ABORT input
Catastrophic
4. Telemetry ABORT verification
5. Backup ABORT using transmitter
power off

Likelihood

Risk Hazard
Index

E
Extremely
Unlikely

12

Verification Data to Submit to AST

1. Test 001 showing the switch

activates when open circuit
2. Test 002 showing sound and lights
warning activate
3. Test 003 showing automated ABORT
issued in case of loss of manual trigger
4. Test 004 showing automated ABORT
issued in case of loss of telemetry
5. Test 005 showing automated ABORT
issued when loss of power

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

Reference Advisory Circular 437.55-1, Hazard Analyses for the Launch or Reentry of a Reusable Suborbital Rocket under an Experimental Permit

Hazard Analysis Template

D1:

Hazard Description should include:

1. Source of potential harm
2. Mechanism by which the harm may be caused
3. Worst credible outcome assuming no mitigation measures employed.
See AC 437.55-1.

F2:

The severity of the worst credible effect without any mitigation measures. See AC 437.55-1.

H2:

The probability of occurance of the hazard or failure mode without any mitigation measures. See AC 437.55-1.

J2:

Combination of severity and probability to determine qualitative risk to the public.

actions must be taken to reduce the risk. See AC 437.55-1.

L1:

Measures taken to reduce the risk to the public. (Reducing either the severity or probability). Typically design changes, safety devices, warning devices,
procedures and training. See AC 437.55-1

N2:

The severity of the worst credible effect or consequence assuming all mitigation measures are employed. See AC 437.55-1

P2:

The probability of occurrence of the hazard or failure mode, assuming all mitigation measures are employed.
See AC 437.55-1

R2:

Combination of severity and probability to determine qualitative risk to the public.

mitigation actions must be taken to reduce the risk.
See AC 437.55-1.

Red indicates unacceptable risk. If red, elimination or mitigation

Red indicates unacceptable risk. If red, further elimination or

Reference Advisory Circular 437.55-1, Hazard Analyses for the Launch or Reentry of a Reusable Suborbital Rocket under an Experimental Permit

Risk Acceptability Matrix

Description

Category

Hazard Severity

Catastrophic

Death or serious injury to the public.

Critical

II

Major property damage to the public, major safety-critical

system damage or reduced capability, significant reduction in
safety margins, or significant increase in crew workload.

Marginal

III

Minor injury to the public or minor safety-critical damage.

Negligible

IV

Not serious enough to cause injury to the public or safetycritical system damage.

Description

Level

Individual Item

Frequent

Likely to occur often in the life of an item, with a likelihood of

occurrence greater than 10-2 in any one mission.

Probable

Will occur several times in the life of an item, with a likelihood

of occurrence less than 10-2 but greater than 10-3 in any one
mission.

Occasional

Likely to occur sometime in the life of an item, with a likelihood

of occurrence less than 10-3 but greater than 10-5 in any one
mission.

Remote

Unlikely but possible to occur in the life of an item, with a

likelihood of occurrence less than 10-5 but greater than 10-6 in
any one mission.

Extremely Remote

So unlikely, it can be assumed occurrence may not be

experienced, with a likelihood of occurrence less than 10 -6 in
any one mission.

Category 1 - High (1-6,8). Elimination or mitigation actions must be taken to reduce the risk.
Category 2 - Low (7,9-20). Risk is acceptable.

A
B
C
D
E

I
1
2
4
8
12

Risk hazard Index

II
3
5
6
10
15

III
7
9
11
14
17

IV
13
16
18
19
20