Safety Management, Emergency and Contingency Procedures
Safety Management
The framework
ICAO Annex 19 places the State Safety Programme (SSP) obligation on the State, and the GCAA requires service providers to operate a Safety Management System (SMS). The SMS has four components: safety policy and objectives, safety risk management, safety assurance, and safety promotion - twelve elements in total.
Risk management language
A hazard is a condition with the potential to cause harm; risk is the combination of severity and likelihood of that harm. A risk assessment uses a matrix, and mitigations must reduce risk to an acceptable level of safety. Safety performance indicators and targets measure whether the mitigations work. Safety assurance covers monitoring, audits, occurrence investigation and change management - including safety cases for significant changes to procedures, airspace or equipment.
Reporting and culture
Mandatory occurrence reporting schemes sit alongside voluntary confidential reporting. Just culture protects the reporter who makes an honest error while preserving accountability for recklessness. Investigation looks for systemic causes, not just the last person in the chain.
Traps
'SMS replaces regulatory oversight' - false, it complements it. 'A hazard is the same as a risk' - false. 'No reports means no risk' - false, it may mean a poor reporting culture. 'Just culture means nobody is ever accountable' - false.
Rule of thumb
When a question offers a control that changes a procedure but not the hazard, it is usually a mitigation, not an elimination. Ask: does this reduce likelihood, reduce severity, or just detect the outcome?
Emergency and Contingency Procedures
Phases of an emergency
INCERFA (uncertainty), ALERFA (alert), DETRESFA (distress) escalate as doubt becomes concern and concern becomes certainty. The rescue coordination centre is notified according to the phase declared, and the phase is downgraded or cancelled as information improves.
Distress and urgency
Distress is MAYDAY; urgency is PAN PAN. Distress has absolute priority. Fuel states escalate: MINIMUM FUEL means committed to land at a specific aerodrome with no delay expected but no undue delay tolerated; MAYDAY FUEL means the calculated fuel on landing is below the final reserve - declare an emergency and give priority. ACAS resolution advisories require pilots to respond immediately and controllers to stop issuing conflicting instructions and acknowledge the manoeuvre.
Unlawful interference uses 7500 and changes the controller's role to one of strict, minimal, unprovocative communication, following the notified hijack procedure. Radio failure uses 7600 and the published lost-communication procedure.
Contingency
ATS contingency plans address degraded modes: radar failure, frequency failure, power loss, industrial action, evacuation and aerodrome closure. In all cases the priorities are to protect traffic already airborne, apply flow control, publish the degraded separation standard and communicate it clearly.
Traps
Declaring a phase and forgetting to notify; believing PAN PAN outranks all other traffic (it does not); insisting on standard separation when an emergency requires priority; continuing to vector an aircraft that has reported an ACAS RA.
Rule of thumb
In an emergency, give priority first and sort the paperwork afterwards. One aircraft in distress outranks every sequence you have built.