Who should read this: Safety managers, risk officers, and SMS administrators who are
responsible for identifying, documenting, and tracking hazards. Investigators and auditors
who produce findings that generate new hazard entries will also find this guide useful.Required permission:
risk_assessments — read. Create and update permissions are
required to add or modify entries.Regulatory basis: 14 CFR 5.53 requires certificate holders to analyze systems and
identify hazards. 14 CFR 5.55 requires those hazards to be assessed for risk and controlled
when unacceptable. ICAO Annex 19 establishes the 5x5 matrix framework used throughout this
module.The Hazard Register List
Navigate to Safety > Hazards to see the full register. The page opens with four summary cards across the top:| Card | What it shows |
|---|---|
| Total | Count of all hazard entries in the register |
| Unacceptable | Hazards rated High — do not proceed without controls |
| Tolerable (ALARP) | Hazards rated Elevated or Moderate — reduce as low as reasonably practicable |
| Acceptable | Hazards rated Low or Minimal — document the decision and monitor |
Status tabs
The tab bar above the table filters by lifecycle status:| Tab | Meaning |
|---|---|
| All | Every entry regardless of status |
| Draft | Created but not yet reviewed or approved |
| Active | Identified and under active monitoring |
| Mitigated | Controls implemented and residual risk reassessed |
| Accepted | Formally accepted at the appropriate management level |
| Closed | Hazard no longer exists or has been fully resolved |
Table columns
| Column | Description |
|---|---|
| Risk ID | Auto-generated identifier (e.g. RSK-0042) — click to open the detail page |
| Hazard Title | Short title assigned during creation |
| Category | Operational area: Flight Ops, Ground Ops, Maintenance, Human Factors, etc. |
| S x L | Severity (1—5) and Likelihood (A—E) displayed as individual labeled chips |
| Risk Level | Calculated zone: Minimal, Low, Moderate, Elevated, or High |
| Status | Current lifecycle status |
| Controls | Count of proposed controls on the entry |
| Review | Next scheduled review date; shows an Overdue badge when past due |
Filtering
Use the toolbar below the tabs to narrow results:- Search — matches against hazard title, description, or Risk ID
- Category — filters to a single operational category
- Risk Level — filters to one of the five ICAO levels (or a full zone via the summary cards)
Create a New Hazard Entry
From the Hazard Register, create a new risk entry. You can also use
Cmd+K and select “New Risk Entry.”Every hazard entry must identify how the hazard was discovered. Choose the source that
best describes the origin:
If the source is a Safety Report or Investigation, an additional dropdown appears so you
can link the specific record. Linking establishes traceability from hazard identification
through risk treatment — a requirement of 14 CFR 5.53.
The title is a brief, factual label used throughout the register and in related records.
Write it as a noun phrase describing the condition, not the consequence.
“Worn runway centerline markings at KBDR” is a more useful title than “Runway marking issue.”
Specificity aids retrieval during safety committee reviews and audits.
Choose the category that best describes the operational area (Flight Operations, Ground Operations, Maintenance, Weather, Human Factors, Aircraft Systems, ATC/Airspace, Wildlife, Security, Environmental, Organizational, or Fatigue/CFIT).
Rate severity (1—5) based on the worst credible outcome — do not factor in existing controls. Rate likelihood (A—E) based on how likely the outcome is under current conditions. The form calculates the risk level and zone in real time.
For the complete severity, likelihood, and zone definitions, see the Risk
Matrix reference.
In the Existing Controls field, list the measures already in place that mitigate
this hazard. Enter each control on its own line. This establishes the baseline and
determines whether additional controls are required.
Controls are displayed in hierarchy order (Engineering first, PPE last) on the detail
page, reflecting the standard control effectiveness sequence.
Per 14 CFR 5.55, you must develop and implement risk controls when the initial assessment shows
the risk is unacceptable. High-zone entries (red) require controls before the associated operation
may proceed.
View a Hazard Detail
Click any Risk ID or hazard title in the register table to open the detail page. The page shows the full hazard record and is divided into a main content area (left) and a sidebar (right).Main content panels
Hazard Description — The full rich-text description and category badge. A glossary tooltip is available on the “Hazard” label to display the regulatory definition. Risk Assessment — Severity and likelihood ratings displayed with their ICAO descriptions, the calculated risk score, zone label, and a mini 5x5 matrix showing the exact matrix position. If residual risk has been assessed, the mini matrix plots both the initial position (solid dot) and the residual position (dashed outline) for direct comparison. Existing Controls — The baseline controls documented during or after creation, displayed as a list. Proposed Controls — Each control card shows the description, control type badge, and implementation status (Proposed, In Progress, Implemented, or Rejected). If a control has a linked CPA, the CPA number appears as a link. Controls are sorted by the standard hierarchy: Engineering > Administrative > Procedure > Training > PPE. Residual Risk (Post-Mitigation) — Appears when residual severity and likelihood have been rated. Shows a side-by-side comparison of initial versus residual severity, likelihood, and risk level.Sidebar panels
Risk Assessment Summary — At-a-glance view of risk level, score, severity, likelihood, and — if assessed — residual level and S x L. Source — The source type (Safety Report, Investigation, Audit Finding, External Source, or Proactive Identification). If linked to a report or investigation, a card provides a direct link to that record. Review Schedule — Appears when a review date has been set. Shows the next review date and a countdown badge that turns amber within 7 days and red when overdue. Risk Accepted — Appears when a hazard has been formally accepted. Records the name of the person who accepted the risk and the acceptance date and time for audit purposes. Related CPAs — Links to any Corrective and Preventive Actions that trace back to controls on this hazard entry. Each CPA card links directly to the CPA detail page. Actions — Context-sensitive buttons depending on current status:| Button | Available When | Result |
|---|---|---|
| Accept Risk | Status is Active | Opens confirmation dialog; records acceptor identity per 14 CFR 5.55 and 14 CFR 5.97 |
| Add Control | Always | Opens dialog to add a control with description and type |
| Schedule Review | Always | Sets the next review date per 14 CFR 5.73 |
| Close Risk | Status is not Closed | Opens confirmation dialog with 2-second delay; sets status to Closed |
Edit a Hazard Entry
Click Edit in the page header to open the edit form. All fields from creation are editable, including severity, likelihood, existing controls, and source linkage. Edits are saved immediately and the detail page reloads with the updated data.Hazard Status Lifecycle
Hazard entries move through five statuses. Status transitions are validated by the system and require appropriate role permissions.| Status | Color | Description |
|---|---|---|
| Draft | Grey | Created but not yet reviewed. May occur when an entry is created offline or via import. |
| Active | Blue | Hazard identified and under active monitoring. Controls may be in development. |
| Mitigated | Green | Controls implemented; residual risk reassessed and within acceptable levels. |
| Accepted | Amber | Formally accepted at the appropriate management level with recorded rationale. |
| Closed | Green | The hazard no longer exists or has been fully resolved. Record is preserved for audit. |
View the Risk Matrix
Click View Matrix in the top-right corner of the Hazard Register (or navigate to Safety > Hazards > Matrix) to open the interactive ICAO 5x5 risk matrix visualization. The matrix view shows:- All active hazard entries plotted by their severity (1—5) and likelihood (A—E) position
- Cell colors using the Okabe-Ito colorblind-safe palette: green (Acceptable), amber (Tolerable), red (Unacceptable)
- Pattern fills on each zone so the matrix is readable in grayscale and monochrome print
- Hazard counts per cell, with a bar chart breakdown by category alongside the matrix
Bowtie Analysis
For hazards where you need a structured barrier analysis, open the Bowtie view. Navigate to Safety > Hazards > Bowtie, or from a hazard detail page click View Bowtie. The bowtie diagram visualizes:- Threat pathways (left side) — causes or threats that could lead to the top event
- Top event (center) — the central hazardous event (the hazard)
- Consequence pathways (right side) — outcomes if the top event occurs
- Barriers — preventive controls (before the top event) and mitigating controls (after), shown as vertical bars across each pathway
Reading a Bowtie diagram
| Element | What it represents |
|---|---|
| Threat | A cause that could trigger the top event |
| Preventive barrier | A control that blocks the threat from reaching the top event |
| Top event | The hazard — the undesired state |
| Mitigating barrier | A control that limits the severity of a consequence |
| Consequence | The adverse outcome if controls fail |
When to use Bowtie vs. the risk matrix
Use the ICAO 5x5 matrix for initial hazard assessment and routine risk register management. Use Bowtie when:- A hazard has multiple threat pathways or consequence branches that need separate tracking
- You need to present a hazard to the Safety Review Board with a structured barrier analysis
- A Management of Change request requires a formal control coverage review
Hazards in the SMS Workflow
The Hazard Register sits at the center of the four-pillar SMS cycle:- Hazard identification (14 CFR 5.53) — Reports, investigations, audits, and proactive analysis all feed into new hazard entries.
- Safety risk assessment (14 CFR 5.55) — Each hazard receives a severity and likelihood rating, producing an initial risk level and zone.
- Risk control (14 CFR 5.55) — Controls are documented on the hazard entry. High-zone hazards require controls before operations proceed. Controls that require formal tracking generate linked CPAs.
- Safety assurance (14 CFR 5.71) — Review dates, residual risk ratings, and control effectiveness assessments keep the register current and satisfy the periodic review requirement under 14 CFR 5.73.
Related
Conduct a Risk Assessment
Step-by-step guide to rating severity and likelihood, documenting controls, and assessing
residual risk for a hazard entry.
Manage Investigations
How investigation findings generate new hazard entries and link back to the register.
Create a CPA
Turning risk controls into tracked corrective and preventive actions.
Risk Matrix Reference
Complete reference for the ICAO 5x5 matrix, severity and likelihood definitions, zone
thresholds, and the colorblind-safe palette used in the matrix view.