BY ORDER OF THE AIR FORCE PAMPHLET 91-215 SECRETARY ...
BY ORDER OF THE AIR FORCE PAMPHLET 91-215 SECRETARY ... BY ORDER OF THE AIR FORCE PAMPHLET 91-215 SECRETARY ...
A2.A.8. THE CHANGE ANALYSIS A2.A.8.1. FORMAL NAME. The change analysis A2.A.8.2. ALTERNATIVE NAMES. None A2.A.8.3. PURPOSE. Historically change has been an important source of risk in operational processes. Figure A2.15 illustrates this causal relationship. Figure A2.15. Change Causation. Introduce System Stress is Risk controls Risk Losses change impacted created overcome Increases Increase A2.A.8.3.1. Some of these changes are planned, but many occur incrementally over time without any intentional or conscious direction. The change analysis is intended to analyze the hazard implications of either planned or unplanned changes. Properly used, the change analysis allows the risk management process to focus only on the changed aspects of the operation. This eliminates the need to reanalyze the total operation just because a change has occurred in one area. The change analysis is also used to detect the occurrence of change. By periodically systematically comparing current procedures with previous procedures, unplanned changes are identified and clear defined. Finally, change analysis is an important mishap investigation tool. Because many mishaps are due to the injection of change into systems, an important investigative objective is to identify these changes using the change analysis procedure. A2.A.8.4. APPLICATION. Change analysis should be routinely used in the following situations. A2.A.8.4.1. Whenever significant changes are planned in operations in which there is significant mission risk of any kind. A typical example is the decision to conduct a certain type of operation at night that has only been done in daylight previously. A2.A.8.4.2. Periodically, perhaps once a year, in any mission important operation to detect the occurrence of unplanned changes. A typical example is the many different types of maintenance procedures. A2.A.8.4.3. As a mishap investigation tool. A2.A.8.4.4. As the only hazard ID tool required when an operational area has been subjected to in-depth hazard analysis. The change analysis tool will reveal if any elements exist in the current operation that were not considered in the previous in-depth analysis. A2.A.8.5. METHOD. The change analysis is best accomplished using a format such as the sample worksheet shown at Figure A2.16. The factors in the column on the left side of this tool are intended as a comprehensive change checklist. 52
Figure A2.16. Sample Change Analysis Worksheet. Target: ______________________________________ Date: ________________________________ FACTORS EVALUATED COMPARABLE DIFFERENCE SIGNIFICANCE SITUATION SITUATION WHAT Objects Energy Defects Protective Devices WHERE On the object In the process Place WHEN In time In the process WHO Operator Fellow worker Supervisor Others TASK Goal Procedure Quality WORKING CONDITIONS Environmental Overtime Schedule Delays TRIGGER EVENT MANAGERIAL CONTROLS Control Chain Hazard Analysis Monitoring Risk Review To use the worksheet: The user starts at the top of the column and considers the current situation compared to a previous situation and identifies any change in any of the factors. When used in a mishap investigation, the mishap situation is compared to a previous baseline. The significance of detected changes can be evaluated intuitively or they can be subjected to what if, logic diagram, or scenario, other specialized analyses. A2.A.8.6. RESOURCES. A key resource for the change analysis tool is experienced operational personnel who have long term involvement in an operational process. These personnel must help define the “comparable situation.” Another important resource is the documentation of process flows and task analyses. Large numbers of such analyses have been completed in recent years in connection with quality 53
- Page 1 and 2: BY ORDER OF THE AIR FORCE PAMPHLET
- Page 3 and 4: Figure 14. Levels of Command Involv
- Page 5 and 6: levels while preserving assets and
- Page 7 and 8: Section B—The ORM Process 5. Intr
- Page 9 and 10: 8.2. Identified Risk is risk that h
- Page 11 and 12: 10.3.12. There are no “safety pro
- Page 13 and 14: 12.3.3.2. Maintenance: Availability
- Page 15 and 16: 15. Section C—Step 1—Identify H
- Page 17 and 18: the sequence indicated, however it
- Page 19 and 20: 24.1.1. CATASTROPHIC—Complete mis
- Page 21 and 22: labeled with its significance (high
- Page 23 and 24: 32.3. The feasible alternatives mus
- Page 25 and 26: 36.3. When notified of a situation
- Page 27 and 28: Section G—Step 5—Implement Risk
- Page 29 and 30: It is usually a good idea to signal
- Page 31 and 32: negative consequences occur, proper
- Page 33 and 34: Section I—Conclusion 54. Operatio
- Page 35 and 36: HAZOP—Hazard operability Hrs—Ho
- Page 37 and 38: Risk—An expression of consequence
- Page 39 and 40: A2.A.3. THE OPERATIONS ANALYSIS AND
- Page 41 and 42: A2.A.3.8.2. Any one event of the ab
- Page 43 and 44: ase of experience and expertise. Of
- Page 45 and 46: the involvement of operators and th
- Page 47 and 48: Figure A2.8. Example Deployment Sce
- Page 49 and 50: 4 levels is usually very limited. T
- Page 51: A2.A.7.6. RESOURCES. A key resource
- Page 55 and 56: Figure A2.18. Example of Change Ana
- Page 57 and 58: Figure A2.19. Example of Cause and
- Page 59 and 60: A2.B.3. THE HAZARD AND OPERABILITY
- Page 61 and 62: A2.B.4. THE MAPPING TOOL A2.B.4.1.
- Page 63 and 64: A2.B.5. THE INTERFACE ANALYSIS A2.B
- Page 65 and 66: A2.B.6. THE MISSION PROTECTION TOOL
- Page 67 and 68: A2.B.7. THE SAFETY QUIZ A2.B.7.1. F
- Page 69 and 70: A2.B.8. THE NEXT MISHAP ASSESSMENT
- Page 71 and 72: A2.B.10. THE INTERVIEW TOOL A2.B.10
- Page 73 and 74: A2.B.11. THE INSPECTION TOOL A2.B.1
- Page 75 and 76: A2.B.12. THE MISHAP/INCIDENT INVEST
- Page 77 and 78: Figure A2.30 Sample Job Hazard Anal
- Page 79 and 80: training and observation time. Succ
- Page 81 and 82: A2.B.15.6. RESOURCES. Effective use
- Page 83 and 84: A2.B.16. THE OPPORTUNITY ASSESSMENT
- Page 85 and 86: SECTION A2.C. THE ADVANCED HAZARD I
- Page 87 and 88: Figure A2.37. Types of Energy. Elec
- Page 89 and 90: A2.C.5. THE FAULT TREE ANALYSIS A2.
- Page 91 and 92: A2.C.6. THE FAILURE MODE AND EFFECT
- Page 93 and 94: A2.C.7. THE MULTILINEAR EVENTS SEQU
- Page 95 and 96: A2.C.8. THE MANAGEMENT OVERSIGHT AN
- Page 97 and 98: Attachment 3 RISK ASSESSMENT TOOLS,
- Page 99 and 100: A3.2.3. Lack of a range of rankings
- Page 101 and 102: Attachment 4 RISK CONTROL OPTION AN
A2.A.8. <strong>THE</strong> CHANGE ANALYSIS<br />
A2.A.8.1. FORMAL NAME. The change analysis<br />
A2.A.8.2. ALTERNATIVE NAMES. None<br />
A2.A.8.3. PURPOSE. Historically change has been an important source of risk in operational processes.<br />
Figure A2.15 illustrates this causal relationship.<br />
Figure A2.15. Change Causation.<br />
Introduce System Stress is Risk controls Risk Losses<br />
change impacted created overcome Increases Increase<br />
A2.A.8.3.1. Some of these changes are planned, but many occur incrementally over time without any<br />
intentional or conscious direction. The change analysis is intended to analyze the hazard implications of<br />
either planned or unplanned changes. Properly used, the change analysis allows the risk management<br />
process to focus only on the changed aspects of the operation. This eliminates the need to reanalyze the<br />
total operation just because a change has occurred in one area. The change analysis is also used to detect<br />
the occurrence of change. By periodically systematically comparing current procedures with previous<br />
procedures, unplanned changes are identified and clear defined. Finally, change analysis is an important<br />
mishap investigation tool. Because many mishaps are due to the injection of change into systems, an<br />
important investigative objective is to identify these changes using the change analysis procedure.<br />
A2.A.8.4. APPLICATION. Change analysis should be routinely used in the following situations.<br />
A2.A.8.4.1. Whenever significant changes are planned in operations in which there is significant mission<br />
risk of any kind. A typical example is the decision to conduct a certain type of operation at night that has<br />
only been done in daylight previously.<br />
A2.A.8.4.2. Periodically, perhaps once a year, in any mission important operation to detect the occurrence<br />
of unplanned changes. A typical example is the many different types of maintenance procedures.<br />
A2.A.8.4.3. As a mishap investigation tool.<br />
A2.A.8.4.4. As the only hazard ID tool required when an operational area has been subjected to in-depth<br />
hazard analysis. The change analysis tool will reveal if any elements exist in the current operation that<br />
were not considered in the previous in-depth analysis.<br />
A2.A.8.5. METHOD. The change analysis is best accomplished using a format such as the sample<br />
worksheet shown at Figure A2.16. The factors in the column on the left side of this tool are intended as a<br />
comprehensive change checklist.<br />
52