ATS safety management Safety Management System Seminar for

ATS safety management Safety Management System Seminar for NAM/CAR/SAM Regions Mexico City, 14– 16 March 2006 International Civil Aviation Organization North American, Central American and Caribbean Regional Office

ATS safety management ñICAO purposes, strategic objetives ñStates responsability ñICAO requirements, Annex 11 (ATS) ñATS safety management programs ñQuality Assurance programme ñRisk measure ñSafety culture ñNext steps ñATM performance

ICAO purposes ñ ñ Safety has always been the most important issue in all aviation activities. This is reflected in the aims and objectives of ICAO as stated in Article 44 of the Convention on International Civil Aviation (Doc 7300), which charges ICAO with ensuring the safe and orderly growth of international civil aviation throughout the world.

ICAO STRATEGIC OBJECTIVES (for the period 2005 -2010) Adopted by Council on 17 December 2004 ñICAO works to achieve its vision of safe, secure and sustainable development of civil aviation through cooperation amongst its member States. ñTo implement this vision, the Organization has established the following Strategic Objectives for the period 2005 -2010: ñA: Safety - Enhance global civil aviation safety ñB: Security - Enhance global civil aviation security ñC: Environmental Protection - Minimize the adverse effect of global civil aviation on the environment ñD: Efficiency - Enhance the efficiency of aviation operations ñE: Continuity - Maintain the continuity of aviation operations ñF: Rule of Law - Strengthen law governing international civil aviation

The State responsibility ñ The State, as the signatory to the Chicago Convention, is responsible for providing a regulatory safety framework for implementation of ICAO SARPS within the airspace and at aerodromes for which it has responsibility in accordance with the basis of the safety management requirements ñ Where a State is also an ATM service provider: ñIt is important keep clear distinction between the regulatory functions and the service provision functions ñThe regulatory division must maintain effective safety oversight of the ATM service provisions

ICAO Requirements ATS Safety Management ñ ñ In 2001 provisions relating to safety management were introduced in Annex 11 contains provisions regarding the establishment of ATS safety management programms, and includes a requirement to establish objetives and acceptable level of safety. Complementary procedures also were introduced in the Doc 4444, PANS-ATM. (November 2003) Additionally, new Standards and Recommended Practices (SARPS) related to Safety Management System will be introduced accordingly.

ATS Safety Management ñ ñ Implementation of ATS safety management programs refers to the day to day keep safety oversight management by the ATS service providers States shall establish systemic and suitable ATS safety management programs with defined levels and objectives As appropriate, target levels of safety (TLS) will be established through regional air navigation agreement Prior to any significant change to the safety-related ATC system, a safety assessment will be carried out, proving that an acceptable safety level may be obtained

ATS Safety Management ñ The acceptable level of safety may be specified in qualitative or quantitative terms. a) a maximum probability of an undesirable event, such as collision, loss of separation or runway incursion; b) a maximum number of accidents per flight hour; c) a maximum number of incidents per aircraft movement; d) a maximum number of valid short-term conflict alerts (STCA) per aircraft movement.

ATS safety management programme Shall: ñ ñ ñ identify actual and potential hazards and determine the need for remedial action; ensure that remedial action necessary to maintain an acceptable level of safety is implemented; and provide continuous monitoring and regular assessment of the safety level achieved.

ATS Safety Management… Monitoring of safety levels ñ ñ actual or potential safety hazards or deficiencies related to the provision of ATS, procedures, communications, navigation and surveillance systems and other safety significant systems and equipment as well as controller work loads ñ Collection and evaluation of safety-related data ñ Review of incidents and ñ Other safety-related reports

ATS Safety Management… Safety reviews ñ ñ training, experience and expertise; full understanding of SARPs, PANS, safe operating practices and Human Factors principles Regulatory, operational and technical framework

ATS … Safety Assessment ñ ñ ñ Safety Assessment calculates the risk of accidents index Required full commitment of States, ATS providers and users as well as Operators If safety meets expected levels then change is feasible

ATS … Safety Assessment ñ The safety assessment is a systematic approach, as whole criteria to evaluate the acceptability of the risk and severity: the safety assessment process needs to address both factors. ñ If the initial assessment of the risk indicates that it does not satisfy the safety assessment criteria, requiring the introduction of mitigation measures, it will be necessary to re-evaluate the risk in order to determine the mitigation measures for the desired effect. ñ It means that some of the previous steps should be repeated; the process may, in fact, need to be repeated more than once, until a satisfactory combination of mitigation measures is found.

ATS Quality Assurance Program ñ Have proved to be an efficient tool fostering the establishment of diverse complementary programmes for the assessment of ATS performance (units, ATCOs) such as; ñverification and training for ATC proficiency ñincident reporting and investigation ñverification on the use of aeronautical phraseology ñincident prevention measures ñQuality improvements ñSafety management ñ evolutes to systemic approach of ATM performance

Risk measures ñ ñ Risk measure expressed in terms of fatal aircraft accidents are indicators of individual risk, since they do not take account of the number of people affected. A risk measure expressed in terms of number of fatalities would be more appropriate for expressing societal risk. Acceptability is usually based on comparison with a severity/probability matrix An acceptable limit expressed in terms of incidents would be significantly different from a limit expressed in terms of fatal aircraft accidents.

RISK CLASSIFICATION SCHEME Probability of Occurrence Extremely improbable Severity Reasonably probable Extremely remote Remote Frequent Review Unacceptable Unacceptable Acceptable Review Acceptable Review Catastrophic Hazardous Major Minor

Classification of safety occurrences and causal factors ñ It is much easier if events and causal factors are classified using a standard scheme and the classified data, called a taxonomy, is comprised of a hierarchy of classes of events. ñ ICAO has, maintained a global data base of accidents and serious incidents notified by States through the Aircraft Accident Data Reporting System (ADREP), which, contains a greatly expanded taxonomy of ATSrelated categories (http: //eccairs-www. jrc. it/) ñ Taxonomies should be used for classification of ATSrelated safety occurrence data for internal investigation and analysis purposes, as well as for reporting accident and incident data to ADREP. ñ Sharing information online for the classification of risk

Positive safety culture a) Senior management place strong emphasis on safety as part of the strategy of controlling risks; b) Decision-makers and operational personnel hold a realistic view of the short- and long-term hazards involved in the organization’s activities; c) Those in senior positions: ñ 1) Foster a climate in which there is a positive attitude towards criticisms, comments and feedback from lower levels of the organization on safety matters; ñ 2) Do not influence /force their views on subordinates; and ñ 3) Implement measures to contain the

Positive safety culture d) Senior management promote a non-punitive working environment (not immunity); e) There is an awareness of the importance of communicating relevant safety information at all levels of the organization (within and outside); f) There are realistic and workable rules relating to hazards, to safety and to potential sources of damage; g) Personnel are well trained and understand the consequences of unsafe acts. h) There is a low incidence of risk-taking behaviour, and a safety ethic which discourages such behaviour

Characteristics of different safety cultures Safety Culture: Characteristics Poor Bureaucratic Positive Hazard information is: Suppressed Ignored Actively sought Safety messengers are: Discouraged or punished Tolerated Trained and encouraged Responsibility for safety is: Avoided Fragmented Shared Dissemination of safety information Failures leadis: to: Discourage Allowed but discouraged Rewarded Cover ups Local fixes Inquiries and systemic reform New ideas are: Crushed New problems (not opportunities) Welcomed

Next steps… ñ ñ ñ Uniform system safety approach in accordance with the AN-conf/11 outcomes Globally standardized implementation of safety management processes and practices ñAvoids unnecessary duplication ñCollect right data to monitor level of safety Broader view of ATM system expectations

ATM community (Doc 9854) ñ ñ Aerodrome community Airspace providers Airspace users ATM service providers ña) State agencies; ñb) State-owned self-financing corporations; ñc) privatized ATM service providers; ñd) regional ATM service providers; and ñe) independent private sector ATM service providers of ground and space-based CNS/ATM services ñ ñ ATM support industry International Civil Aviation Organization (ICAO) Regulatory authorities States

ATM Performance ñ ñ When the ATM system delivered trajectory equals the user preferred trajectory, the ATM system is operating well Value is created when the ATM system consistently and cost-effectively delivers User Preferred Trajectory

ATM Performance framework. . ñ Future ATM system must be based on Performance indicators and user expectations: ñSafety ñCapacity ñEfficiency ñRegularity ñFlexibility Enhancements to safety, finances and the efficiency through the adoption of collaborative decisions towards the evolution of a holistic and cooperation environment should be facilitated to fulfill the expectations of the ATM community, as well as to improve safety of all the system in a balanced manner

ATM performance metrics ñ New guidance material on measuring performance and productivity includes an approach to development of performance metrics in the areas of safety, delay, flight efficiency, productivity and cost-effectiveness. ñ Comparing different organization’s performance might be benefit to understand performance drivers and shortfalls and thus establishing best practices. ñ ATM Requirements and Performance Panel (ATMRPP) is working to finalize a set of ATM system requirements that will guide development of technical SARPs for ATM research, development, and implementation planning activities.