> ## Documentation Index
> Fetch the complete documentation index at: https://docs.planeconnection.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Conduct Your First Risk Assessment
> Learn how to create a risk assessment in PlaneConnection -- identify a hazard, assess severity and likelihood using the 5x5 matrix, and document risk controls.
In this tutorial, you will create a formal risk assessment in PlaneConnection -- from identifying a hazard through rating its risk and documenting controls.
By the end of this tutorial, you will have a documented risk assessment with a hazard, a risk rating, and controls -- all stored in your SMS records.
**Who should do this tutorial?** Safety Managers who perform risk assessments as part of the SRM
process. Pilots and crew may also participate in risk assessment during safety meetings or as part
of pre-flight risk evaluation. You will need Safety Manager or Admin permissions to create risk
assessments.
## Before you start
Make sure you have:
* An active PlaneConnection account with **Safety Manager** or **Admin** role
* Familiarity with the SMS module navigation (see the [Quickstart](/en/tutorials/quickstart))
**When is a risk assessment required?** Per 14 CFR 5.51, you must apply Safety Risk Management
when designing new systems, making changes to existing systems, after identifying hazards through
safety assurance, when existing risk controls are found to be ineffective, or when external
changes affect your operations.
This tutorial uses the ICAO 5x5 risk matrix. If you are new to it, review the [Risk Assessment
Matrix](/en/reference/risk-matrix) before you start -- it covers severity levels, likelihood
categories, and risk zone definitions.
## Creating the risk assessment
### Navigate to the new risk assessment form
1. In the Safety module sidebar, click **Hazards**.
2. On the Hazards page, click the **New Risk Assessment** button.
You are now on the risk assessment form.
### Identify the source
Every risk assessment should be traceable to a trigger -- the event or condition that prompted the assessment. The form asks you to identify the source:
Select the source type that best describes what triggered this risk assessment, then select the linked record if applicable.
### Describe the hazard
A hazard is a condition that could foreseeably cause or contribute to an aircraft accident (per 14 CFR 5.5).
**Hazard description:** Write a clear, specific description of the hazard. Include:
* What the hazard is
* Where it exists (physical location, phase of flight, system, or process)
* How it could lead to an undesirable outcome
Example: "Accumulation of ice on wing leading edges during flight in forecast light-to-moderate icing conditions without functioning de-icing boots."
**Hazard category:** Classify the hazard. Common categories include:
* Flight Operations
* Ground Operations
* Maintenance
* Aircraft Systems
* Human Factors
* Weather / Environment
* ATC / Airspace
A well-defined hazard is specific enough that someone unfamiliar with the situation can understand
the risk. Avoid vague descriptions like "weather risk." Instead, describe the specific
weather-related condition and how it affects safety.
### Assess severity
Select the severity level that best represents the worst credible outcome. The form shows a label and short description for each level. See the [Risk Assessment Matrix](/en/reference/risk-matrix) for full definitions.
Assess the **worst credible** outcome, not the worst conceivable or most likely outcome. The worst
credible outcome is the most severe consequence that could reasonably occur, given the nature of
the hazard and your operating environment.
### Assess likelihood
Select the likelihood level. The form shows a label and short description for each level. See the [Risk Assessment Matrix](/en/reference/risk-matrix) for full definitions.
After selecting both severity and likelihood, the form displays the resulting risk rating on the 5x5 matrix. The cell is highlighted to show you the risk zone (green, yellow, or red).
### Document existing controls
Before adding new controls, document what controls already exist for this hazard. Existing controls are the safeguards, procedures, or equipment currently in place.
1. In the **Existing Controls** section, list the controls already mitigating this risk. For example:
* "Pilots check weather forecasts for icing conditions during pre-flight planning"
* "Aircraft equipped with de-icing boots (when functional)"
* "Company SOP requires diversion when icing exceeds aircraft certification"
2. Evaluate whether existing controls are sufficient. If the risk rating is in the green zone, existing controls may be adequate. If the risk is yellow or red, you need additional controls.
### Add new risk controls (if needed)
If the risk is in the yellow (Tolerable) or red (Unacceptable) zone, you must develop additional controls to reduce the risk.
1. Click **Add Control**.
2. For each new control, provide:
* **Control description:** What is the control? Be specific. Example: "Implement mandatory pre-flight icing risk briefing using company icing decision matrix."
* **Control type:** Classify the control:
* **Engineering** -- physical or system changes (e.g., equipment upgrades)
* **Administrative** -- procedures, training, or policies (e.g., new SOP)
* **Personal Protective** -- protective equipment or individual measures
3. Add as many controls as needed to reduce the risk to an acceptable level.
The goal is to reduce risk to **ALARP (As Low As Reasonably Practicable)**. This means
implementing every control that is reasonable given your resources, operational constraints, and
the severity of the risk. You must be able to justify why any remaining risk is acceptable.
### Assess the residual risk
After adding controls, reassess the risk with the controls in place:
1. Consider how the new controls change the severity and/or likelihood
2. Note the new risk level -- this is the **residual risk** after controls are applied
3. The residual risk should be in the green (Acceptable) zone, or in the yellow (Tolerable) zone with documented justification for why further reduction is not practicable
### Submit the risk assessment
Review all sections of the form:
* Source and trigger
* Hazard description and category
* Severity and likelihood ratings
* Existing controls
* New controls (if applicable)
* Residual risk level
When everything is complete, click **Save** to create the risk assessment.
The risk assessment is now stored in your SMS records and visible on the **Hazards** list and the **Risk Matrix** view.
## Viewing your risk assessments
After creating a risk assessment, you can find it in two places:
**Hazards list:** Navigate to **Hazards** in the sidebar to see all risk assessments in a table view. You can filter by category, risk level, and status.
**Risk Matrix view:** Navigate to **Hazards > Risk Matrix** to see all assessed risks plotted on the 5x5 matrix. This view gives you an at-a-glance picture of your organization's risk landscape -- where risks are concentrated and whether they are trending toward acceptable levels.
## Risk assessment records
Per 14 CFR 5.97, risk assessment outputs must be maintained as long as the risk control remains relevant. PlaneConnection stores all risk assessments with full history, including:
* The original hazard description
* All severity and likelihood ratings (initial and residual)
* All controls documented
* The date of assessment and the person who performed it
* Any linked reports, investigations, or CPAs
These records are available for FAA surveillance and audit purposes.
## Next steps
See the full reference for the 5x5 risk matrix, including all risk zone definitions.
Learn the theory behind Safety Risk Management and how it fits into your SMS.