Skip to main content
PlaneConnection uses the standard 5x5 ICAO risk assessment matrix for evaluating safety risks. This matrix combines the severity of a hazard’s potential consequence with the likelihood of that consequence occurring to produce a risk rating. The matrix is the primary tool for Safety Risk Management (SRM) under 14 CFR Part 5 Subpart C.

Severity Levels

Severity describes the worst credible outcome of a hazard if it were to result in an event.
LevelCategoryDescriptionExamples
5CatastrophicMultiple fatalities; aircraft destroyed.Hull loss, fatal crash, multiple fatalities.
4HazardousLarge reduction in safety margins; serious injury; major aircraft damage.Substantial aircraft damage, serious injury requiring hospitalization, significant reduction in ability to cope with adverse conditions.
3MajorSignificant reduction in safety margins; injury; minor aircraft damage.Emergency landing, minor injuries, physical distress to passengers or crew.
2MinorNuisance; slight reduction in safety margins; slight injury.Minor incident, bruises, operating limitations, use of emergency procedures.
1NegligibleNo safety effect; no injury; no damage.Near-miss with large margin, paperwork error, minor procedural deviation with no consequence.

Likelihood Levels

Likelihood describes how often the consequence is expected to occur.
LevelCategoryDescriptionQuantitative Guidance
EFrequentLikely to occur many times; has occurred repeatedly.Greater than 1 in 1,000 flight hours/cycles.
DProbableWill occur sometimes; has occurred infrequently.Between 1 in 1,000 and 1 in 10,000.
COccasionalUnlikely but possible; has occurred rarely.Between 1 in 10,000 and 1 in 100,000.
BRemoteVery unlikely; not known to have occurred but possible.Between 1 in 100,000 and 1 in 1,000,000.
AImprobableAlmost inconceivable that the event will occur.Less than 1 in 1,000,000.

Risk Matrix

Each cell shows the risk index (severity + likelihood) and its risk zone.
1 - Negligible2 - Minor3 - Major4 - Hazardous5 - Catastrophic
E - Frequent1E - Tolerable2E - Tolerable3E - Unacceptable4E - Unacceptable5E - Unacceptable
D - Probable1D - Acceptable2D - Tolerable3D - Tolerable4D - Unacceptable5D - Unacceptable
C - Occasional1C - Acceptable2C - Acceptable3C - Tolerable4C - Tolerable5C - Unacceptable
B - Remote1B - Acceptable2B - Acceptable3B - Acceptable4B - Tolerable5B - Tolerable
A - Improbable1A - Acceptable2A - Acceptable3A - Acceptable4A - Acceptable5A - Tolerable

Risk Zones

ZoneColorRisk IndicesRequired Action
AcceptableGreen1A, 1B, 1C, 1D, 2A, 2B, 2C, 3A, 3B, 4AAccept the risk. Document the rationale. No additional controls required, but monitoring continues.
Tolerable (ALARP)Yellow1E, 2D, 2E, 3C, 3D, 4B, 4C, 5A, 5BReduce risk As Low As Reasonably Practicable. Implement controls to reduce severity, likelihood, or both. Cost-benefit analysis may be applied. Management acceptance required.
UnacceptableRed3E, 4D, 4E, 5C, 5D, 5EDo not proceed without risk controls that reduce the risk to at least the Tolerable zone. Operations must be stopped or modified until controls are in place.

ALARP Principle

ALARP stands for As Low As Reasonably Practicable. When a risk falls in the Tolerable zone, the organization must reduce it unless the cost of further reduction is grossly disproportionate to the safety benefit gained. Demonstrating ALARP requires:
  • Identifying all reasonably practicable risk controls.
  • Evaluating the cost (financial, operational, practical) of each control.
  • Implementing controls unless the cost is grossly disproportionate to the risk reduction achieved.
  • Documenting the rationale for the final risk acceptance decision.

Risk Assessment Fields

Each risk assessment in PlaneConnection records the following:
FieldTypeDescription
hazardReferenceThe hazard being assessed.
severityInteger (1-5)Severity level of the worst credible outcome.
likelihoodEnum (A-E)Likelihood of the outcome occurring.
risk_indexComputedCombination of severity and likelihood (e.g., 3C).
risk_zoneComputedacceptable, tolerable, or unacceptable.
initial_riskObjectRisk assessment before controls are applied.
residual_riskObjectRisk assessment after controls are applied.
controlsArrayList of risk controls applied or proposed.
rationaleTextJustification for the risk acceptance decision.
assessed_byUser referenceThe person who performed the assessment.
assessed_atTimestampWhen the assessment was performed (UTC).
approved_byUser referenceThe person who approved the risk acceptance.

Initial vs. Residual Risk

Every risk assessment includes two evaluations:
  • Initial risk: The risk level before any controls are applied. This represents the inherent risk of the hazard.
  • Residual risk: The risk level after controls are applied. This represents the risk the organization is accepting.
If the residual risk remains in the Unacceptable zone after all reasonably practicable controls have been considered, the operation or activity must not proceed.

Regulatory Alignment

Part 5 SectionRequirementMatrix Component
5.55(a)Process to analyze safety riskSeverity and likelihood assessment
5.55(b)Acceptable level of safety riskRisk zones and acceptance criteria
5.55(c)Risk controls when risk is unacceptableControls and residual risk
5.97SMS recordsAssessment records retained as long as control remains relevant

References

  • ICAO Doc 9859 (Safety Management Manual), Chapter 5: Safety Risk Management.
  • FAA AC 120-92D, Chapter 5: Safety Risk Management.
  • 14 CFR Part 5, Subpart C: Safety Risk Management.