Title: Corporate Safety
1Corporate Safety
- Threat Error Management
- (TEM)
2INTRODUCTION
- The common goal of preventing incidents and
accidents defines the point of intersection
between safety, operations, and training.
3We Need to understand how a Human mind works!!!
- Once information is sensed, it passes along
various neural pathways to the brain. - Each Person obtains Information differently.
- The Human mind is like a map.
-
4Humans are Limited..
- Limited memory capacity
- Limited processing capacity
- multi-tasking capability
- Limits imposed by stressors
- tunnel vision
- Limits imposed by fatigue and other physiological
factors - Poor group dynamics
- Cultural influences
5BACKGROUND
- TEM Model as
- Licensing tool (ICAO)
- Training tool (Numerous airlines)
- Safety management tool (IATA)
- Research tool (Boeing)
6Definitions
- Threats
- Threats are factors or events whether expected or
unexpected that will increase the operational
complexity of an employee or organization and can
lead to errors, threats are expected to be
managed by the employee.
Tip Threats must be managed during normal,
everyday operations.
7Threats Are the Context
Distractions
Passenger events
ATC
Cabin Crew
Terrain
Weather
Similar call signs
Maintenance
Time pressures
Ground Crew
Flight diversions
Heavy traffic
System malfunctions
Unfamiliar airports
Automation events
Missed approaches
8Definitions
- Errors
- Are actions or inactions by the employee that
prevent the management of threats or the
accomplishment of tasks, and increase the
probability of accidents or incidents.
?? ??? ??? ????? ? ??? ???????? ????????
??? ???? ?????? ? ??????
9Definitions
- Contributing Factors
- Are conditions that can lead to errors and are
not expected to be managed solely by the
employee..
Fact Performance Demands Stable Technology
successful Management Human Error Management
10Threat and Error Management (TEM)
Threats
Threat Mgmt
Errors
Contributing Factors
Contributing Factors
Error Mgmt
Outcome
11There are five types of errors
- Intentional non-compliance errors
- Procedural errors
- Communication errors
- Proficiency errors
- Operational decision errors
-
12Response to Error
- Trap
-
- Exacerbate
-
- Fail to Respond
-
Human error has posed threats to safety since
humans began to deal with technology
13Error outcome
- Inconsequential
- The error has no effect on safety.
- Undesired state
- Risk or unsafe operational conditions increased.
- Additional error
- The error case a chain reaction of other errors.
14Error Model
15Error Management Results
- Error Responses Most errors are undetected
- 64 Undetected
- 31 Detected and effectively managed
- 5 Detected and mismanaged
- Error Outcomes Most errors are inconsequential
- Inconsequential 77
- Additional Errors 6 (Error Chains)
- Undesired Aircraft States 17
The results of research project absorbing 3
airlines conducted by HF Department University Of
Texas.
16Clarification (Relationship) between Threats,
Errors and Outcomes
- Errors originated by any person, organization,
culture, and/or environment other than the
concern person is a threat. - Example
- A/C operation Aircraft B is taxing to the stand
and told to hold short of the active runway. The
hold-short lines are poorly painted and very
faint. Aircraft B passes over the hold short
lines. A runway incursion incident results. - In this example
- The Threat is the poorly painted hold-short
lines. - The Error is committed by the flight crew of A/C
B when they taxi onto the active runway. - The Outcome is a runway incursion.
-
17 Threat Error Relationships
Threats
Managed Unmanaged Consequential
Task Accomplished (uneventful)
Error
Contributing Factors
Undesired Process State
Loss Event
Managing threat and error requires data
18Managed vs. Mismanaged
- Managed an active response to a potential threat
or error that may appear on a daily bases and
could leads to an undesired error state or
additional error state. - Mismanaged inactive or lack of response to a
threat or error that appears on a daily bases
which led to undesired error state or additional
error state.
19 Decision Process Model Plan-Do-Check-Act
(PDCA)
Plan
Do
Act
Check
20 PDCA Inputs and Outputs
Targets
Plan
Tasks
Changes
Do
Act
Understanding
Outcome
Check
21 Latency in PDCA Processs
DELAY I
Plan
DELAY II
DELAY V
Do
Act
DELAY IV
DELAY III
Check
22 Decision Error 1
Targets
Plan
Tasks
Changes
Do
Act
Outcome
Understanding
Check
Benefit Speed Risk Unknown Side Effects
23 Decision Error 2
Targets
Plan
Tasks
Changes
Do
Act
Understanding
Outcome
Check
Benefit Stability Risk Inflexible Processes
24 Decision Error 3
Targets
Plan
Tasks
Changes
Do
Act
Understanding
Outcome
Check
Benefit Quality Data Risk Unaligned Activities
25 Simplified Error Model
Loss Event
Procedural
Procedural
Error 1
Error 2
Contributing
Contributing
Contributing
Contributing
Contributing
Factor 1
Factor 2
Factor 1
Factor 2
Factor 3
Recommendation
Recommendation
Recommendation
Recommendation
1
2
1
2
26 Conflicting Goals Model
Production Loss
Conflicting
Conflicting
Goal 1
Goal 2
Contributing
Contributing
Contributing
Contributing
Contributing
Factor 1
Factor 2
Factor 1
Factor 2
Factor 3
Recommendation
Recommendation
Recommendation
Recommendation
1
2
1
2
27The Root Cause of Errors
- In the real world, most production losses are due
to procedural errors. - Errors are usually the result of the tension
between risks to safety and risks to production.
- This tension leads to conflicting goals.
Identifying the source of an error is an
important step towards taking effective
protective measures.
28Data for a Safety Culture
- How do airlines monitor safety?
- ALL Kinds of reports (CSR, ASR,)
- Accident investigation
- Incident reports
- Data slanted to events resulting from system and
flight crew failures - Line checks
- Data show crew proficiency and procedural
knowledge - Flight Data Recorders FOQA
- Data show what happened in terms of flight
parameters - Observing normal flights Line Operations Safety
Audit (LOSA) - Gives data on why things happen and how they are
managed - Provides a more realistic baseline of safety
29Cultural Approaches to Error
- Moral/Legal
- Technical
- Systemic
Error is everywhere
30Moral Approach to Error
- Magnitude of loss
- Speed of closure
- Sophisticated but Emotional
- Emotional separated from Financial
- Root causes versus Multiple causes
- Drives Propaganda
- Maximum Information Loss
31Technical Approach to Error
- Loss contained by Management
- Equipment Environment focused
- Technical separated from Emotional
- Silver Bullets
- Questionable effects
- Can be costly
- No more harm...
32Systemic Approach to Error
- Errors are Symptoms
- Acknowledges Interactions in the larger System
(technical, financial, emotional) - Focuses on Contributing Factors
- Produces Maximum Information
- Requires Personal Mastery
33Systemic Interactions(SHEL) Model
4
Liveware
L
Humans
H
Software
S
H
Hardware
2
1
E
Environment
3
34Safety Responsibilities Are SharedSafe Airplane
Safe Operation Safe Infrastructure Safe Air
Travel
Air Safety
Governments
Manufacturers
- Safe airplane design
- Safety-enhancing technologydevelopment
- Flight and maintenance operations,
recommendations,documents, training, andsupport - Maintenance planning
- Safety-related analysis
- Safety initiatives
Operators
- Operations policy andprocedures
- Airplane/pilot publications
- Approved maintenanceprogram
- Maintenance, policy, andprocedures
- Maintenance publications
- Safety program
- Training
35Manufacturers Problem
- Engineering World vs. the Real World
- Greatest need structured feedback from real
world - Greatest obstacle liability
- structured Engineering Language
36Operators Problem
- Managing Human Error
- Greatest need structured feedback from
employees - Greatest obstacle liability
- structured Management Language
37Government Challenges
- Maintaining and Operating
- conflicting goals
- Balancing Innovation and Economics
- service effort
- Managing Politics and Technical Issues
- complex interactions
Must look for roots of error to strengthen system
defenses
38System Safety Safety Management System
- The effective management of safety requires a
realistic balance between safety, productivity
and cost. - The process for achieving this balance called
System Safety.
Quality Management System Safety
Safety Management System
39SMS Tools
- Reactive tools
- PEAT (Procedural Event Analysis Tool)
- MEDA (Maintenance Error Decision Aid)
- CPIT (Cabin Procedural Investigation Tool)
- REDA (Ramp Error Decision Aid)
- Proactive tools
- Audits (IOSA, LOSA, etc.)
- Employee Reporting System (ERS)
- Employee Efficiency Survey (EES)
40SMS Implementation Support
Senior Management Overview
Management Workshop
Investigators Workshop
Implementation Planning
41SMS Training Objective
- Help Managers Become More Effective Risk Takers.
Complete error avoidance is impossible. errors
are inevitable
42Management is simultaneously an art and science.
- The meaning of leadership
- A leader in a given situation is a person whose
ideas and actions influence the thought and the
behavior of others.
- Responsible for implementing goals
43Tasks of a leader
- Motivating
- Reinforcement
- Example
- Maintaining the group
- Managerial role
44Luck or Consistency?
- Successful Risk Takers
- Predict Positive Outcomes
- Detect Hazards Proactively
- React to Hazards Effectively
- KEY
FEEDBACK
45Management Actions
Phase 1 Refuse to accept blame as data.
(Management-led culture) Collect contributing
factors data. (SMS tools) Phase 2 Integrate
contributing factors and financial/operational
data. Refine performance measures.
46More Prevention strategies
TEM can be applied to your day to day activities
even your home.
- Airlines need to go beyond the traditional
approach of identifying "what went wrong" and
fixing it, to a more proactive approach of also
determining "what went right" and encouraging
that countermeasure. Threat and Error management
model provides one of the primary lines of
defense against external threats and staff error.
Airlines need to understand the importance of
determining the status of their own operations
rather than assuming that their organizations
conform to some industry standards.