Who should read this: Safety managers, risk officers, and SMS administrators who are
responsible for identifying, documenting, and tracking hazards. Investigators and auditors
who produce findings that generate new hazard entries will also find this guide useful.Required permission:
risk_assessments — read. Create and update permissions are
required to add or modify entries.Regulatory basis: 14 CFR 5.53 requires certificate holders to analyze systems and
identify hazards. 14 CFR 5.55 requires those hazards to be assessed for risk and controlled
when unacceptable. ICAO Annex 19 establishes the 5x5 matrix framework used throughout this
module.The Hazard Register List
Navigate to Safety > Hazards to see the full register. The page opens with four summary cards across the top:
Clicking a summary card filters the table to that zone. A pulsing animation on the
Unacceptable card indicates there are high-risk entries requiring immediate attention.
Status tabs
The tab bar above the table filters by lifecycle status:
Each tab shows a count badge that updates with the current filter state.
Table columns
The table is sortable by any column. Click a column header to sort ascending; click again to
sort descending. The default sort is risk score descending, placing the highest risks at the
top.
Filtering
Use the toolbar below the tabs to narrow results:- Search — matches against hazard title, description, or Risk ID
- Category — filters to a single operational category
- Risk Level — filters to one of the five ICAO levels (or a full zone via the summary cards)
Create a New Hazard Entry
View a Hazard Detail
Click any Risk ID or hazard title in the register table to open the detail page. The page shows the full hazard record and is divided into a main content area (left) and a sidebar (right).Main content panels
Hazard Description — The full rich-text description and category badge. A glossary tooltip is available on the “Hazard” label to display the regulatory definition. Risk Assessment — Severity and likelihood ratings displayed with their ICAO descriptions, the calculated risk score, zone label, and a mini 5x5 matrix showing the exact matrix position. If residual risk has been assessed, the mini matrix plots both the initial position (solid dot) and the residual position (dashed outline) for direct comparison. Existing Controls — The baseline controls documented during or after creation, displayed as a list. Proposed Controls — Each control card shows the description, control type badge, and implementation status (Proposed, In Progress, Implemented, or Rejected). If a control has a linked CPA, the CPA number appears as a link. Controls are sorted by the standard hierarchy: Engineering > Administrative > Procedure > Training > PPE. Residual Risk (Post-Mitigation) — Appears when residual severity and likelihood have been rated. Shows a side-by-side comparison of initial versus residual severity, likelihood, and risk level.Sidebar panels
Risk Assessment Summary — At-a-glance view of risk level, score, severity, likelihood, and — if assessed — residual level and S x L. Source — The source type (Safety Report, Investigation, Audit Finding, External Source, or Proactive Identification). If linked to a report or investigation, a card provides a direct link to that record. Review Schedule — Appears when a review date has been set. Shows the next review date and a countdown badge that turns amber within 7 days and red when overdue. Risk Accepted — Appears when a hazard has been formally accepted. Records the name of the person who accepted the risk and the acceptance date and time for audit purposes. Related CPAs — Links to any Corrective and Preventive Actions that trace back to controls on this hazard entry. Each CPA card links directly to the CPA detail page. Actions — Context-sensitive buttons depending on current status:
Metadata — Created date, last updated date, and created-by user.
Edit a Hazard Entry
Click Edit in the page header to open the edit form. All fields from creation are editable, including severity, likelihood, existing controls, and source linkage. Edits are saved immediately and the detail page reloads with the updated data.Hazard Status Lifecycle
Hazard entries move through five statuses. Status transitions are validated by the system and require appropriate role permissions.View the Risk Matrix
Click View Matrix in the top-right corner of the Hazard Register (or navigate to Safety > Hazards > Matrix) to open the interactive ICAO 5x5 risk matrix visualization. The matrix view shows:- All active hazard entries plotted by their severity (1—5) and likelihood (A—E) position
- Cell colors using the Okabe-Ito colorblind-safe palette: green (Acceptable), amber (Tolerable), red (Unacceptable)
- Pattern fills on each zone so the matrix is readable in grayscale and monochrome print
- Hazard counts per cell, with a bar chart breakdown by category alongside the matrix
Bowtie Analysis
For hazards where you need a structured barrier analysis, open the Bowtie view. Navigate to Safety > Hazards > Bowtie, or from a hazard detail page click View Bowtie. The bowtie diagram visualizes:- Threat pathways (left side) — causes or threats that could lead to the top event
- Top event (center) — the central hazardous event (the hazard)
- Consequence pathways (right side) — outcomes if the top event occurs
- Barriers — preventive controls (before the top event) and mitigating controls (after), shown as vertical bars across each pathway
Reading a Bowtie diagram
Barriers are color-coded by status: green (implemented), amber (in place, effectiveness not verified), red (absent or failed — control gap requiring action).
When to use Bowtie vs. the risk matrix
Use the ICAO 5x5 matrix for initial hazard assessment and routine risk register management. Use Bowtie when:- A hazard has multiple threat pathways or consequence branches that need separate tracking
- You need to present a hazard to the Safety Review Board with a structured barrier analysis
- A Management of Change request requires a formal control coverage review
Hazards in the SMS Workflow
The Hazard Register sits at the center of the four-pillar SMS cycle:- Hazard identification (14 CFR 5.53) — Reports, investigations, audits, and proactive analysis all feed into new hazard entries.
- Safety risk assessment (14 CFR 5.55) — Each hazard receives a severity and likelihood rating, producing an initial risk level and zone.
- Risk control (14 CFR 5.55) — Controls are documented on the hazard entry. High-zone hazards require controls before operations proceed. Controls that require formal tracking generate linked CPAs.
- Safety assurance (14 CFR 5.71) — Review dates, residual risk ratings, and control effectiveness assessments keep the register current and satisfy the periodic review requirement under 14 CFR 5.73.
Related
Conduct a Risk Assessment
Step-by-step guide to rating severity and likelihood, documenting controls, and assessing
residual risk for a hazard entry.
Manage Investigations
How investigation findings generate new hazard entries and link back to the register.
Create a CPA
Turning risk controls into tracked corrective and preventive actions.
Risk Matrix Reference
Complete reference for the ICAO 5x5 matrix, severity and likelihood definitions, zone
thresholds, and the colorblind-safe palette used in the matrix view.