Human Factors and Policy Deviation Risk Assessment for Aircraft Operations

Assessment Date: [DATE]

Assessor: [ASSESSOR NAME]

Department/Area: [DEPARTMENT/AREA]

Review Date: [REVIEW DATE]

1. Assessment Scope

This risk assessment covers human factors and policy deviation risks associated with aircraft operations, including flight crew decision-making, crew resource management, operational compliance, safety management system (SMS) interfaces, dispatch and operational control interactions, and documentation of safety controls used in routine and non-routine flight operations. The assessment includes normal operations, abnormal situations, and foreseeable non-standard conditions such as fatigue, time pressure, weather disruption, schedule changes, maintenance coordination, and operational interruptions. It excludes aircraft design certification, airport infrastructure design, and detailed maintenance task risk assessments except where maintenance-related human factors directly affect flight operations. The assessment is intended to support operational safety management, hazard identification, risk evaluation, mitigation planning, corrective action tracking, and compliance-oriented documentation. [3] [2]

2. Risk Assessment Methodology

This assessment uses a structured qualitative and semi-quantitative risk assessment approach based on task and hazard analysis. The process is to define the scope, break the operation into key activity areas, identify hazards from observation, incident history, operational feedback, and applicable requirements, then evaluate each hazard using a 5x5 likelihood-severity matrix. Risk is assessed as the combination of likelihood and severity, and controls are selected using the hierarchy of controls, with emphasis on elimination, substitution, engineering, administrative controls, and PPE where applicable. The assessment also considers normal and non-standard conditions, including fatigue, weather, night operations, and organizational change. Controls are then reviewed for effectiveness, documented, communicated to relevant personnel, and monitored over time. [2] [4] [4] [5]

3. Risk Matrix Reference

The following matrix is used to evaluate risk levels based on likelihood and severity:

		Likelihood
Rare	Unlikely	Possible	Likely	Almost Certain
Severity	Catastrophic	Low	Low	Low	Moderate	Moderate
Major	Low	Moderate	Moderate	High	High
Moderate	Low	Moderate	High	High	Extreme
Minor	Moderate	High	High	Extreme	Extreme
Negligible	Moderate	High	Extreme	Extreme	Extreme

4. Hazard Identification and Risk Evaluation

1. Crew fatigue leading to degraded attention, slower reaction time, reduced situational awareness, and impaired judgment during flight planning, taxi, takeoff, cruise, approach, and landing.

Potential Consequences: Fatigue can contribute to procedural errors, missed callouts, unstable approaches, runway excursions, altitude deviations, loss of separation, and increased likelihood of serious incidents or accidents. [9] [9]

Affected Persons: Flight crew, cabin crew, passengers, ground personnel, and other airspace users.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Likely	Major	High

Control Measures

• Eliminate avoidable fatigue exposure by redesigning schedules to reduce excessive duty periods and minimize circadian disruption.
• Substitute high-risk roster patterns with fatigue-managed pairings and more conservative duty planning where operationally feasible.
• Use engineering-style operational controls such as automated alerting, stabilized approach monitoring, and flight deck decision-support tools.
• Apply administrative controls including fatigue reporting procedures, fitness-for-duty checks, duty-time limits, rest protection, and no-penalty fatigue reporting.
• Require appropriate PPE only where relevant to ground-side support tasks; PPE does not control fatigue directly but remains mandatory for associated ramp activities.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Major	High

2. Policy deviation or intentional non-compliance with standard operating procedures, checklists, dispatch release conditions, or operational limitations.

Potential Consequences: Deviation from approved procedures can lead to loss of standardization, missed safety barriers, incorrect configuration, unstable flight profiles, regulatory breaches, and increased accident potential. [2] [4]

Affected Persons: Flight crew, dispatchers, maintenance personnel, passengers, and the operator.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Major	High

Control Measures

• Eliminate unnecessary procedural complexity and remove ambiguous steps from operating manuals where possible.
• Substitute unclear local practices with standardized, approved procedures and controlled documentation.
• Implement engineering and system controls such as electronic checklists, dispatch release validation, and configuration warnings where available.
• Use administrative controls including recurrent SOP training, line checks, compliance audits, just culture reporting, and supervisor intervention for repeated deviations.
• Use PPE only for supporting ground operations; PPE is not a primary control for policy deviation.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Unlikely	Major	Moderate

3. Breakdown in crew resource management, including ineffective communication, poor leadership, weak challenge-and-response behavior, and failure to cross-check critical actions.

Potential Consequences: Poor CRM can result in misunderstood instructions, omitted checklist items, delayed threat recognition, incorrect decisions, and escalation of manageable events into serious operational incidents.

Affected Persons: Flight crew, cabin crew, passengers, and air traffic service users.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Likely	Major	High

Control Measures

• Eliminate avoidable ambiguity by standardizing phraseology and task allocation.
• Substitute informal communication habits with disciplined CRM techniques and standardized briefings.
• Use engineering controls such as cockpit alerting, flight deck displays, and automation monitoring to support cross-checking.
• Apply administrative controls including CRM training, threat and error management, sterile cockpit discipline, and mandatory challenge of unsafe actions.
• PPE is not a meaningful control for this hazard except in related ground operations.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Moderate	Moderate

4. High workload, time pressure, and schedule disruption causing rushed decision-making and reduced compliance with operational controls.

Potential Consequences: Time pressure can lead to omitted checks, poor fuel decisions, unstable approaches, incorrect configuration, and reduced ability to manage abnormal situations.

Affected Persons: Flight crew, dispatchers, cabin crew, and passengers.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Likely	Major	High

Control Measures

• Eliminate unnecessary schedule pressure by building realistic turnaround and contingency time into operations.
• Substitute rigid time-driven practices with risk-based decision gates that allow delay, diversion, or cancellation without penalty when safety is affected.
• Use engineering and system controls such as dispatch tools, performance calculators, and automated monitoring to reduce manual workload.
• Apply administrative controls including go/no-go authority, escalation pathways, workload management, and operational pause authority.
• PPE is not a primary control for this hazard.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Moderate	Moderate

5. Inadequate hazard identification and weak SMS reporting, resulting in latent risks not being recognized, analyzed, or corrected in time.

Potential Consequences: Unidentified hazards may persist across multiple flights, leading to repeated deviations, ineffective controls, recurring incidents, and missed opportunities for corrective action.

Affected Persons: Flight crew, safety personnel, management, passengers, and the wider operating environment.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Major	High

Control Measures

• Eliminate gaps in reporting by requiring mandatory reporting of hazards, near misses, and policy deviations.
• Substitute informal issue handling with a formal SMS process for hazard logging, investigation, corrective action, and closure verification.
• Use engineering-style data controls such as safety databases, trend dashboards, and event monitoring systems.
• Apply administrative controls including safety action review boards, root cause analysis, and management accountability for overdue actions.
• PPE is not applicable as a primary control.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Unlikely	Major	Moderate

6. Inadequate training, experience, or competency for specific aircraft type, route, airport, or abnormal procedure.

Potential Consequences: Insufficient competence can lead to incorrect aircraft handling, poor abnormal decision-making, checklist errors, and inability to recover from operational threats.

Affected Persons: Flight crew, cabin crew, passengers, and other airspace users.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Major	High

Control Measures

• Eliminate assignment of personnel to tasks beyond verified competency.
• Substitute ad hoc coaching with structured type-specific and scenario-based training.
• Use engineering controls such as training simulators, electronic performance support tools, and decision aids.
• Apply administrative controls including competency checks, line-oriented evaluation, recurrent training, and supervision for new or returning personnel.
• PPE is not a primary control for this hazard.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Unlikely	Moderate	Moderate

7. Poor management of organizational change, including changes to staffing, procedures, technology, or operational roles without adequate human factors review.

Potential Consequences: Uncontrolled change can introduce confusion, role overlap, missed responsibilities, degraded communication, and new failure modes in flight operations.

Affected Persons: Flight crew, dispatch, maintenance coordination staff, safety staff, and passengers.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Major	High

Control Measures

• Eliminate uncontrolled change by requiring formal change approval before implementation.
• Substitute informal rollout with phased implementation, validation, and user feedback before full deployment.
• Use engineering controls such as system testing, interface validation, and automation verification before operational use.
• Apply administrative controls including management of change review, human factors assessment, revised SOPs, and post-change monitoring.
• PPE is not a primary control for this hazard.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Unlikely	Moderate	Moderate

8. Adverse weather, night operations, and reduced visibility increasing the likelihood of human error and policy deviation.

Potential Consequences: Reduced visibility and environmental stressors can contribute to runway excursions, unstable approaches, navigation errors, missed cues, and delayed threat recognition.

Affected Persons: Flight crew, passengers, ground personnel, and other aircraft.

Initial Risk Assessment

Likelihood	Severity	Risk Rating
Likely	Major	High

Control Measures

• Eliminate exposure where possible by delaying, rerouting, or cancelling operations when weather exceeds safe limits.
• Substitute marginal operating practices with conservative weather minima and enhanced decision thresholds.
• Use engineering controls such as weather radar, enhanced vision systems, runway lighting, and approach monitoring aids.
• Apply administrative controls including weather briefings, night-operation procedures, stabilized approach criteria, and enhanced dispatch oversight.
• PPE is not a primary control for this hazard.

Residual Risk Assessment

Likelihood	Severity	Risk Rating
Possible	Major	High

5. General Control Measures

• Maintain a formal safety management system with clear hazard reporting, investigation, corrective action tracking, and management review.

Ensure all personnel can report hazards and deviations promptly, and verify that corrective actions are assigned, tracked, and closed with evidence of effectiveness. [4] [2]

• Use standardized operating procedures, checklists, and controlled documentation for all safety-critical flight operations.

Review procedures for clarity, remove ambiguity, and ensure revisions are communicated and trained before use. [2]

• Apply a just culture approach that distinguishes human error, at-risk behavior, and reckless behavior while still enforcing accountability.

Use this approach to encourage reporting and learning without weakening compliance expectations.

• Integrate human factors review into operational changes, incident investigations, and procedure revisions.

Assess staffing, workload, fatigue, communication, interface design, and task complexity before implementing changes. [8]

• Verify control effectiveness through routine audits, line observations, trend analysis, and review of safety performance indicators.

Escalate repeated deviations or deteriorating trends to management for corrective action and revalidation of controls. [1]

6. Emergency Preparedness

• Establish clear escalation procedures for fatigue-related fitness-for-duty concerns, including immediate removal from duty when a crew member is not fit to operate safely. [9]
• Define response actions for serious procedural deviations, including operational pause, notification of flight operations management, safety reporting, and post-event review. [7]
• Maintain abnormal and emergency checklists that are readily accessible, current, and trained for use under high workload conditions.
• Ensure dispatch, flight operations, and safety personnel can coordinate rapidly during weather disruption, diversion, or route change events.
• Conduct periodic emergency drills and scenario-based exercises that include communication failures, fatigue events, and organizational change failures. [7]

7. Training Requirements

• Crew Resource Management (CRM) Training: Provide recurrent CRM training focused on communication, leadership, assertiveness, workload management, situational awareness, and cross-checking. Training should include practical scenarios that demonstrate how human factors contribute to operational error and how crews should intervene early.
  • Standard phraseology and closed-loop communication
  • Threat and error management
  • Challenge-and-response expectations
  • Sterile cockpit discipline
  • Decision-making under pressure
• Fatigue Risk Management Training: Train flight and operational personnel to recognize fatigue symptoms, understand circadian disruption, report fatigue without fear of reprisal, and apply fatigue mitigation strategies before and during duty. [9]
  • Sleep opportunity and rest protection
  • Effects of night work and long duty periods
  • Self-assessment and peer intervention
  • Reporting pathways for fatigue concerns
• SOP and Policy Compliance Training: Provide training on the importance of following approved procedures, using current manuals, and escalating uncertainty rather than improvising. Emphasize that policy deviation must be reported and corrected through the SMS.
  • Use of current controlled documents
  • Checklist discipline
  • Deviation reporting requirements
  • Supervisor escalation for ambiguous situations
• Human Factors and Change Management Training: Train managers, supervisors, and operational staff to identify human factors risks introduced by staffing changes, technology changes, revised procedures, and organizational restructuring. Include the need for formal review before implementation and follow-up after change. [8]
  • Workload and staffing assessment
  • Interface and automation considerations
  • Procedure usability review
  • Post-change monitoring and feedback
• Emergency and Abnormal Situation Training: Provide scenario-based training for weather diversion, unstable approach recovery, communication breakdowns, and operational interruptions so crews can respond consistently under stress.
  • Abnormal checklist use
  • Go-around and diversion decision-making
  • Coordination with dispatch and ATC
  • Post-event reporting and debriefing

8. Monitoring and Review

Review Frequency: Annually and after any significant incident, major operational change, regulatory change, or trend indicating control failure.

Monitoring Type	Frequency	Responsible Party	Description
Regular Inspection	Daily and per shift	Flight operations supervisors and line managers	Monitor duty readiness, procedural compliance, and any signs of fatigue, distraction, or workload overload before release to duty and during operations.
Performance Indicator Review	Monthly	Safety manager and flight operations management	Review safety reports, deviation trends, unstable approach data, fatigue reports, and repeat findings to identify emerging human factors risks.
Audit	Quarterly	SMS audit team or quality assurance function	Audit SOP compliance, training completion, corrective action closure, and the effectiveness of controls applied to high-risk operational tasks.
Management of Change Review	Before implementation and after implementation	Operations management with safety and human factors support	Assess staffing, workload, communication, and procedure impacts before changes are introduced, then verify that the change did not create new hazards or increase existing risks.
Trend Analysis	Continuous with formal review each quarter	Safety data analyst and safety manager	Analyze incident reports, near misses, policy deviations, and fatigue-related events to determine whether controls remain effective or require revision. [1] [1]

9. Special Circumstances

• Night operations and early-morning departures increase fatigue risk, reduce visibility, and may degrade decision-making and monitoring performance. [9]
• Adverse weather, turbulence, icing, thunderstorms, and low-visibility conditions increase workload and the likelihood of procedural deviation. [2]
• Lone work, reduced crew complement, or limited support during irregular operations can weaken cross-checking and escalation pathways. [6]
• Schedule disruptions, extended duty periods, and rapid roster changes can increase fatigue and reduce compliance with standard procedures. [9]
• Organizational change, new technology, or revised procedures may temporarily increase error likelihood until personnel are trained and controls are stabilized. [8]

Approval and Sign-off

This risk assessment has been reviewed and approved by:

Assessor: _________________________ Date: __________

Manager/Supervisor: _________________________ Date: __________

Safety Representative: _________________________ Date: __________

This risk assessment must be reviewed annually and after any significant incident, major operational change, regulatory change, or trend indicating control failure. or when significant changes occur.

Safety powered by SALUS