Example severity Level (from a proposed JAA standard Class I Catastrophic Unsurvivable accident with hull loss Class I Critical Survivable accident with less than full hull loss fatalities possible Class Ill: Marginal Equipment loss with possible injuries and no fatalities · ClassⅣV: Negligible Some loss of efficiency Procedures able to compensate, but controller workload likely to be high until overall system demand reduced Reportable incident events such as operational errors, pilot deviations, surface vehicle deviation Example likelihood Level User tasks and responsibilities LOW Insignificant or no change Medium: Minor change High: Significant change Potential for inappropriate human decision making LoW: Insignificant or no change Medium: Minor change Significant change Potential for user distraction or disengagement from prImal iry task LOW Insignificant or no change Medium: Minor change Significant change
c � Example Severity Level ������������������������ ����������������� (from a proposed JAA standard) Class I: Catastrophic Unsurvivable accident with hull loss. Class II: Critical Survivable accident with less than full hull loss; fatalities possible Class III: Marginal Equipment loss with possible injuries and no fatalities Class IV: Negligible Some loss of efficiency Procedures able to compensate, but controller workload likely to be high until overall system demand reduced. Reportable incident events such as operational errors, pilot deviations, surface vehicle deviation. c ������������������ ������������������������ Example Likelihood Level User tasks and responsibilities Low: Insignificant or no change Medium: Minor change High: Significant change Potential for inappropriate human decision making Low: Insignificant or no change Medium: Minor change High: Significant change Potential for user distraction or disengagement from primary task Low: Insignificant or no change Medium: Minor change High: Significant change
Example Likelihood Level(2) Safety margins LoW: Insignificant or no change Medium: Minor change High Significant change Potential for reducing situation awareness LoW- Insignificant or no change Medium: Minor change High Significant change Skills currently used and those necessary to backup and monitor new decision support tools LoW- Insignificant or no change Medium: Minor change High Significant change Introduction of new failure modes and hazard causes LoW New tools have same function and failure modes Is system components they are replacing Medium: Introduced but well understood and effective mitigation measures can be designed Introduced and cannot be classified under medium Effect of software on current system hazard mitigation measures LoW: Cannot render ineffective High: Can render ineffective Need for new system hazard mitigation measures LoW: Potential software errors will not require High: Potential software errors could require
c ������������������������ ������������������������ Example Likelihood Level (2) Safety margins Low: Insignificant or no change Medium: Minor change High: Significant change Potential for reducing situation awareness Low: Insignificant or no change Medium: Minor change High: Significant change Skills currently used and those necessary to backup and monitor new decision support tools Low: Insignificant or no change Medium: Minor change High: Significant change Introduction of new failure modes and hazard causes Low: New tools have same function and failure modes as system components they are replacing Medium: Introduced but well understood and effective mitigation measures can be designed High: Introduced and cannot be classified under medium Effect of software on current system hazard mitigation measures Low: Cannot render ineffective High: Can render ineffective Need for new system hazard mitigation measures Low: Potential software errors will not require High: Potential software errors could require