Skip to main content
PlaneConnection uses the standard ICAO 5x5 risk assessment matrix for evaluating safety risks. This matrix combines the severity of a hazard’s potential consequence with the likelihood of that consequence occurring to produce a risk index. The matrix is the primary tool for Safety Risk Management (SRM) under 14 CFR Part 5 Subpart C, specifically 14 CFR 5.55.

Severity Levels

Severity describes the worst credible outcome of a hazard if it were to result in an event.
LevelCategoryDescriptionExamples
5CatastrophicMultiple fatalities; aircraft destroyed.Hull loss, fatal crash, multiple fatalities.
4HazardousLarge reduction in safety margins; serious injury; major aircraft damage.Substantial aircraft damage, serious injury requiring hospitalization, significant reduction in ability to cope with adverse conditions.
3MajorSignificant reduction in safety margins; injury; minor aircraft damage.Emergency landing, minor injuries, physical distress to passengers or crew.
2MinorNuisance; slight reduction in safety margins; slight injury.Minor incident, bruises, operating limitations, use of emergency procedures.
1NegligibleNo safety effect; no injury; no damage.Near-miss with large margin, paperwork error, minor procedural deviation with no consequence.

Likelihood Levels

Likelihood describes how often the consequence is expected to occur, based on operational experience and available data.
LevelCategoryDescriptionQuantitative Guidance
EFrequentLikely to occur many times; has occurred repeatedly.Greater than 1 in 1,000 flight hours or cycles.
DProbableWill occur sometimes; has occurred infrequently.Between 1 in 1,000 and 1 in 10,000.
COccasionalUnlikely but possible; has occurred rarely.Between 1 in 10,000 and 1 in 100,000.
BRemoteVery unlikely; not known to have occurred but possible.Between 1 in 100,000 and 1 in 1,000,000.
AImprobableAlmost inconceivable that the event will occur.Less than 1 in 1,000,000.

Risk Matrix

Each cell shows the risk index (likelihood + severity) and its risk zone. Rows represent likelihood (top = most frequent); columns represent severity (left = least severe).
1 — Negligible2 — Minor3 — Major4 — Hazardous5 — Catastrophic
E — Frequent1E — Tolerable2E — Tolerable3E — Unacceptable4E — Unacceptable5E — Unacceptable
D — Probable1D — Acceptable2D — Tolerable3D — Tolerable4D — Unacceptable5D — Unacceptable
C — Occasional1C — Acceptable2C — Acceptable3C — Tolerable4C — Tolerable5C — Unacceptable
B — Remote1B — Acceptable2B — Acceptable3B — Acceptable4B — Tolerable5B — Tolerable
A — Improbable1A — Acceptable2A — Acceptable3A — Acceptable4A — Acceptable5A — Tolerable

Risk Zones

ZoneColorRisk IndicesRequired Action
AcceptableGreen1A, 1B, 1C, 1D, 2A, 2B, 2C, 3A, 3B, 4AAccept the risk. Document the rationale. No additional controls required, but monitoring continues under Safety Assurance (14 CFR 5.71).
Tolerable (ALARP)Yellow1E, 2D, 2E, 3C, 3D, 4B, 4C, 5A, 5BReduce risk As Low As Reasonably Practicable. Implement controls to reduce severity, likelihood, or both. Cost-benefit analysis may be applied. Management acceptance required.
UnacceptableRed3E, 4D, 4E, 5C, 5D, 5EDo not proceed without risk controls that reduce the risk to at least the Tolerable zone. Operations must be stopped or modified until controls are in place.

ALARP Principle

ALARP stands for As Low As Reasonably Practicable. When a risk falls in the Tolerable zone, the organization must reduce it unless the cost of further reduction is grossly disproportionate to the safety benefit gained.Demonstrating ALARP requires:
ComponentDescription
IdentificationAll reasonably practicable risk controls are identified.
EvaluationThe cost (financial, operational, practical) of each control is assessed.
ImplementationControls are applied unless the cost is grossly disproportionate to the risk reduction achieved.
DocumentationThe rationale for the final risk acceptance decision is recorded.
The burden of proof lies with the organization — it must be demonstrated that no further practicable reduction is possible, not merely that the current level is adequate.

Initial vs. Residual Risk

Every risk assessment in PlaneConnection includes two evaluations:
AssessmentDescription
Initial riskThe risk level before any controls are applied. Represents the inherent risk of the hazard.
Residual riskThe risk level after controls are applied. Represents the risk the organization is accepting.
If the residual risk remains in the Unacceptable zone after all reasonably practicable controls have been considered, the operation or activity must not proceed.

Risk Assessment Fields

FieldTypeDescription
hazardReferenceThe hazard being assessed.
severityInteger (1 — 5)Severity level of the worst credible outcome.
likelihoodEnum (A — E)Likelihood of the outcome occurring.
risk_indexComputedCombination of likelihood and severity (e.g., 3C).
risk_zoneComputedacceptable, tolerable, or unacceptable.
initial_riskObjectSeverity, likelihood, and risk index before controls.
residual_riskObjectSeverity, likelihood, and risk index after controls.
controlsArrayList of risk controls applied or proposed.
effectiveness_criteriaTextHow the organization will measure control effectiveness.
rationaleTextJustification for the risk acceptance decision.
assessed_byUser referenceThe person who performed the assessment.
assessed_atTimestampWhen the assessment was performed (UTC).
approved_byUser referenceThe person who approved the risk acceptance.
approved_atTimestampWhen the risk acceptance was approved (UTC).

Regulatory Alignment

RegulationSectionRequirementMatrix Component
14 CFR Part 55.55(a)Process to analyze safety riskSeverity and likelihood assessment
14 CFR Part 55.55(b)Acceptable level of safety riskRisk zones and acceptance criteria
14 CFR Part 55.55(c)Risk controls when risk is unacceptableControls and residual risk evaluation
14 CFR Part 55.97SMS recordsAssessment records retained as long as control remains relevant
AC 120-92DChapter 5SRM guidanceMatrix methodology and ALARP documentation
ICAO Doc 9859Chapter 5Safety Risk Management5x5 matrix framework, severity and likelihood definitions

Conduct a Risk Assessment

Perform a risk assessment.

Risk Management Concepts

Explanation of SRM principles and philosophy.

Your First Risk Assessment

Tutorial walkthrough of the risk assessment process.

MOC Workflow

How risk assessment integrates with Management of Change.
Last modified on April 11, 2026