Skip to main content
By following this guide, you will create a risk assessment — from identifying a hazard through rating severity and likelihood, defining controls, and submitting the entry for tracking.
Who should read this: Safety managers and admins who create and review risk assessments. Investigators and report reviewers also benefit from understanding how risk entries are created from their findings.Prerequisites: Safety manager or admin role. Familiarity with your organization’s acceptable risk criteria and the Risk Matrix reference.

Create a Risk Entry

1
Step 1: Open the new risk form
2
In the Safety sidebar, navigate to Hazards and create a new risk. You can also use Cmd+K and select “New Risk Entry.”
4
If the risk was identified from a safety report or investigation, link it for traceability. Leave blank for hazards identified through audits, operational experience, or industry data.
5
Step 3: Describe the hazard
6
State the condition or situation clearly and factually. Include what the hazard is, where it exists in your operations, and what systems or processes are affected.
7
Write hazard descriptions as factual conditions, not opinions. “Runway surface contamination at KHPN during winter operations” is more useful than “Slippery runway.”
8
Step 4: Select a hazard category
9
Choose the category that best describes the hazard — Flight Operations, Maintenance, Ground Handling, Cabin Safety, Airspace/ATC, Weather, Human Factors, or Organizational.
10
Step 5: Rate severity and likelihood
11
Rate severity (1—5) based on the worst credible outcome, and likelihood (A—E) based on how likely the outcome is. The risk matrix calculates the resulting zone automatically.
12
For the complete severity, likelihood, and zone definitions, see the Risk Matrix reference.
13
If the calculated risk is in the red (Unacceptable) zone, you must define risk controls before the associated operation can proceed (14 CFR 5.55).
14
Step 6: Document existing controls
15
Describe any measures already in place to mitigate this hazard. This establishes the baseline for determining whether additional controls are needed.
16
Step 7: Add new controls (if needed)
17
If the initial risk level falls in the yellow or red zone, add a control with a description and control type (engineering, administrative, procedural, or PPE).
18
Step 8: Assess residual risk
19
After defining controls, rate the residual severity and likelihood. The matrix recalculates to show the new zone.
20
If residual risk remains yellow (ALARP), document your justification that further reduction is not practical given the costs and benefits.
21
Step 9: Submit the risk entry
22
Review the summary panel and submit the assessment.

View the Risk Matrix

Navigate to Hazards > Matrix to see all active risks plotted on the 5x5 ICAO risk matrix. This view helps you:
  • Identify concentrations of risk across categories
  • Prioritize mitigation efforts toward the highest-risk quadrant
  • Compare initial risk ratings with residual ratings after controls

After Submission

Risk entries move through five statuses: Draft, Active, Mitigated, Accepted, and Closed. Review risks regularly during safety assurance activities and safety committee meetings. For the full lifecycle reference, see Risk Matrix.

Risk Matrix

Complete reference for the ICAO 5x5 matrix, severity and likelihood definitions, and risk zones.

Submit a Safety Report

Reporting hazards that feed into risk assessments.

Create a CPA

Implementing controls identified during risk assessment.

Track Compliance

How risk management contributes to Part 5 Subpart C compliance.
Last modified on April 11, 2026