Hazard Analysis Template

AST Hazard Risk before Mitigation Measures Risk After Mitigation Measures
AST Team
Hazard Source, AST Risk Elimination or AST AST AST AST
# System Member AST Verification Data to Submit to AST
Description Mechanism, & Severity Likelihood AST Likelihood (before MM) Risk Hazard Index RHI Mitigation Measures Concurrence with MM Severity Severity Likelihood Likelihood Risk Hazard Index RHI
Assignment Severity (before MM)
Outcome (before MM) (after MM) (after MM) (after MM)

1. Test 001 showing the switch activates

1. “Dead Man” switch activates TTS when when open circuit
released (open circuit) 2. Test 002 showing sound and lights warning
2. Activation sound and light warnings activate
EXAMPLE

Flight Safety System
Failure of TTS to I C I E
prompt backup actions if absent 3. Test 003 showing automated ABORT issued
respond to manual 4 12
3. Backup ABORT input in case of loss of manual trigger
trigger effort Catastrophic Occasional Catastrophic Extremely Unlikely
4. Telemetry ABORT verification 4. Test 004 showing automated ABORT issued
5. Backup ABORT using transmitter power in case of loss of telemetry
off 5. Test 005 showing automated ABORT issued
when loss of power

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

Reference Advisory Circular 437.55-1, Hazard Analyses for the Launch or Reentry of a Reusable Suborbital Rocket under an Experimental Permit
 Hazard Analysis Template
D1: Hazard Description should include:
1. Source of potential harm
2. Mechanism by which the harm may be caused
3. Worst credible outcome assuming no mitigation measures employed.
See AC 437.55-1.
F2: The severity of the worst credible effect without any mitigation measures. See AC 437.55-1.
H2: The probability of occurance of the hazard or failure mode without any mitigation measures. See AC 437.55-1.
J2: Combination of severity and probability to determine qualitative risk to the public. Red indicates unacceptable risk. If red, elimination or mitigation actions must be taken to reduce the risk. See AC 437.55-1.

L1: Measures taken to reduce the risk to the public. (Reducing either the severity or probability). Typically design changes, safety devices, warning devices, procedures and training. See AC 437.55-1

N2: The severity of the worst credible effect or consequence assuming all mitigation measures are employed. See AC 437.55-1
P2: The probability of occurrence of the hazard or failure mode, assuming all mitigation measures are employed.
See AC 437.55-1
R2: Combination of severity and probability to determine qualitative risk to the public. Red indicates unacceptable risk. If red, further elimination or mitigation actions must be taken to reduce the risk.
See AC 437.55-1.

Reference Advisory Circular 437.55-1, Hazard Analyses for the Launch or Reentry of a Reusable Suborbital Rocket under an Experimental Permit
 Risk Acceptability Matrix

Description Category Hazard Severity

Catastrophic I Death or serious injury to the public.

Major property damage to the public, major safety-critical

Critical II system damage or reduced capability, significant reduction in
safety margins, or significant increase in crew workload.

Marginal III Minor injury to the public or minor safety-critical damage.

Not serious enough to cause injury to the public or safety-

Negligible IV
critical system damage.

Description Level Individual Item

Likely to occur often in the life of an item, with a likelihood of

Frequent A
occurrence greater than 10-2 in any one mission.

Will occur several times in the life of an item, with a likelihood

Probable B of occurrence less than 10-2 but greater than 10-3 in any one
mission.

Likely to occur sometime in the life of an item, with a likelihood

Occasional C of occurrence less than 10-3 but greater than 10-5 in any one
mission.

Unlikely but possible to occur in the life of an item, with a

Remote D likelihood of occurrence less than 10-5 but greater than 10-6 in
any one mission.

So unlikely, it can be assumed occurrence may not be

Extremely Remote E experienced, with a likelihood of occurrence less than 10-6 in
any one mission.

Category 1 - High (1-6,8). Elimination or mitigation actions must be taken to reduce the risk.

Category 2 - Low (7,9-20). Risk is acceptable.

Risk hazard Index

I II III IV
A 1 3 7 13
B 2 5 9 16
C 4 6 11 18
D 8 10 14 19
E 12 15 17 20