Towards understanding work-as-done in air traffic management safety assessment and design

• Guidance material for safety assessment based on systemic thinking is proposed.
• It operationalizes Resilience Engineering principles in Air Traffic Management, including a case study.
• It enables description of expected changes in work-as-done when introducing a new concept.
• It can be used as input to concept development, design, and safety assessment.
• It extends the vocabulary of safety assessment to include emergent properties.

This paper describes the approach taken and the results to develop guidance, to include Resilience Engineering principles in methodology for safety assessment of functional changes, in Air Traffic Management (ATM). It summarizes the process of deriving resilience principles for ATM, originating from Resilience Engineering concepts and transposed into ATM operations. These principles are the foundation for guidance material incorporating Resilience Engineering (RE) concepts into safety assessment methodology. The guidance material provides a method using workshops generating qualitative descriptions of RE principles applied to ATM services of everyday work, as done currently and as envisioned after introduction of a new technology or way of working. The guidance material has been proposed as part of the safety assessment methodology of SESAR (Single European Sky ATM Research), and as stand-alone guidance for ATM design processes. The methodology was validated via a test case on the i4D/CTA (Controlled Time of Arrival) concept. Operational examples from the application of the developed guidance to the i4D/CTA concept are provided. Initial evaluation of the guidance suggests that the methodology (1) provides a narrative, vocabulary and documentation means of project discussions on resilience; (2) brings the discussions of safety and resilience closer to operational practice; (3) facilitates a broader systemic and integrative perspective on operational, management, business, safety, environmental, and human performance aspects; and (4) can extend the vocabulary of safety assessment to include the description of emergent properties, to better support functional changes in ATM.

Figure optionsDownload as PowerPoint slide