Are you a Part 121, 133 or 135 operator and undertaking a risk assessment of your business?
Are you finding developing a scalable and fit-for-purpose safety management system challenging? Don’t worry, you’re not alone.
For smaller operators, starting a safety risk analysis from scratch can be daunting.
In aviation safety management, several risk analysis models can be used to identify hazards and determine the likelihood and severity of risk associated with that hazard. So many models that it can become confusing. You might have heard phrases like ‘Swiss cheese’, ‘5M’ and ‘JSA’ bounce around, for instance.
One model is the bowtie. It looks exactly what it sounds like – a formal bowtie. Like the Swiss cheese accident causation model, it prescribes various layers (known as barriers) to stop hazards getting through and causing an accident.
CASA has consulted with industry and has developed a series of risk analysis bowties around ICAO’s High-risk Categories of Occurrence (HRCs), with a focus on the regulatory controls as the barriers that you can use to develop a workable SMS for your organisation. The categories are:
- loss of control inflight
- controlled flight into terrain
- mid-air collision
- runway incursion
- runway excursion.
Human performance, technical and organisational factor bowties have also been developed in support these categories.
The bowtie model has an interesting origin story. First formally used in course notes in 1979 at the University of Queensland to analyse hazards within the chemical industry, the model was soon adopted by large companies like the Shell Oil Group.
The ease of using the bowtie model became so influential that it began to expand outside the petrochemical industry and into other operational sectors such as aviation, maritime and healthcare.
But enough about its history. Here’s how they work.
Atop the bowtie model sits an identified hazard, for instance, flying an aeroplane.
Extending from the hazard is a top event. In this context, the top event describes when control is lost over the hazard, which could be several things, like an onboard fire, aircraft losing altitude, pilot incapacitation or a dangerous goods leak in the hold.
From there, the bowtie extends out to the left-hand side with a series of threats associated with the top event, for instance, the inhalation of smoke, loss of control or pilot drifting into a microsleep.
Extending to the right-hand side are a series of consequences related to the top event, such as asphyxiation, injuries to passengers or crashing the aircraft.
Each threat and consequence can be extended into a series of barriers, preventative or recovery. These are mitigating factors that prevent the top event and consequences occurring. Barriers are the ‘Swiss cheese’ of the bowtie model.
Once the bowtie is fully extended, the diagram records the results of the analysis by forming a comprehensive picture on a page of all the factors that could lead to damage or loss.
Bowtie models are designed to be dynamic and interactive, and can be built using platforms such as BowTieXP and BowTie Pro. The software allows you to expand and retract the individual levels of the bowtie, so you can include as much or as little detail as you like.
To get you started, download the bowties for Part 121, 135 and 133 operators from the CASA website.
CASA will be releasing further bowties for aerial firefighting, aerodromes, business aviation, ballooning and parachuting in the coming months.
To learn more about risk analysis bowties and safety risk management, visit the CASA website.
Comments are closed.