← Back to Human FactorsSection 9.9 Notes Mind map Quiz
Safety Management
Workplace hazards and emergencies, occurrence reporting, safety and just culture, and risk assessment.
Safety management, summary notes
Main ideas
- Common hangar and ramp hazards include slips/trips, working at height, moving ground equipment, jet blast and intake suction, fuel vapour, and electrical hazards on energised aircraft.
- Hazard recognition is proactive: reporting a spill, a missing guard rail or a damaged tool before it causes an injury, rather than reacting after an incident.
- Foreign object debris (FOD) is both a workplace hazard (loose tools, hardware) and an airworthiness hazard if left on or in the aircraft, FOD control (tool accountability, clean-as-you-go) addresses both.
- Every maintenance facility should have clear, known procedures for dealing with emergencies (fire, fuel spill, injury, evacuation) so response does not depend on individual improvisation under stress.
- Personal protective equipment (PPE), hearing protection, eye protection, high-visibility clothing, is a control of last resort, used after eliminating or reducing the hazard itself where possible.
- ⚠ Exam trap: PPE is the LAST line of defence, not the first, eliminate or engineer out the hazard before relying on it; and a missing tool stops the release to service.
- Occurrence reporting is the backbone of safety management. Anything that did, or could, affect the safe operation of the aircraft is reported, whether or not it caused damage: a tool left in a bay, a part fitted the wrong way round, a procedure that could not be followed as written. Reports feed the organisation's hazard log and the wider industry picture, so the same event is not repeated elsewhere. An occurrence that is not reported cannot be analysed, and the organisation keeps the risk without knowing it holds it.
- Safety culture is the shared attitude that makes reporting normal rather than risky. A just culture is the part of it that decides how the organisation responds: honest mistakes, slips and lapses are treated as information and are not punished, while wilful violations and reckless behaviour still carry consequences. The line sits at intent, not at outcome, so two engineers who make the same error are treated the same whether or not it happened to cause damage. Without that line, people conceal errors and the organisation loses the data it needs.
- Risk assessment is how a hazard is turned into a decision. Each hazard is judged on the severity of what could happen and the likelihood of it happening, and the two together set the priority for action. A generic assessment covers a task the organisation carries out routinely; a task-specific assessment is raised where the job, the aircraft or the environment differs from the norm. Controls are then applied in order: eliminate the hazard, engineer it out, apply procedures and training, and only then rely on personal protective equipment.
- Health and safety responsibilities are shared. The maintenance organisation holds a health and safety policy, provides safe equipment, systems of work and training, and assesses the risks its people are exposed to. The individual is required to work to those procedures, use the protection provided, and report hazards, defects and occurrences. Neither side discharges the other: an engineer who follows an unsafe instruction, and an organisation that lets one stand, both carry the failure.
Solved examples
A dropped socket cannot be found at the end of a task on an engine bay. What is the correct immediate action?
Stop and account for all tools before closing up (tool control / FOD procedure), the aircraft must not be released to service until the missing item is located or the task is otherwise proven safe, since an ungoverned FOD item in an engine bay is a direct airworthiness hazard.
Safety management concept map
Safety Management
Safety management quiz
Safety Management, quiz
Ref 9.98 of 16Pass 75%
1. Under a just culture, the line between an acceptable error and an unacceptable act is drawn at:
The intent behind the act, not the damage it happened to causeThe amount of damage caused, since a costly error is the serious oneWhether the engineer reported it before the next shift handover2. An occurrence that caused no damage and was noticed immediately should be:
Reported, because the hazard exists whether or not it caused harmRecorded locally but not reported, as nothing was actually damagedReported only if the same occurrence has happened before on type3. In a risk assessment, the priority given to a hazard is set by:
The severity of the possible outcome together with its likelihoodThe severity of the possible outcome, taken on its ownThe cost of the controls needed to remove the hazard4. A task-specific risk assessment is raised when:
The job, aircraft or environment differs from the routine caseThe task is carried out by a newly qualified member of staffThe generic assessment for the task is more than a year old5. The maintenance organisation's health and safety duties include:
A safety policy, safe systems of work, training and risk assessmentSupplying personal protective equipment, which discharges its dutyReporting hazards, which is the individual's duty passed upward6. Concealing errors within a maintenance organisation is damaging chiefly because:
It removes the data the organisation needs to manage its risksIt makes the individual engineer personally liable for any damageIt breaches the organisation's duty to supply protective equipment7. A dropped socket that cannot be located at the end of an engine-bay task requires:
Stopping to account for all tools before release to serviceLogging it for the next scheduled inspectionNo action if the engine runs normally on the next test8. Hazard recognition in a maintenance environment is best described as:
Proactive, reporting hazards before they cause an injuryReactive, acting only after an incident occursThe sole responsibility of the safety department