Functional hazard analysis

The Level 4 SSA is at the aircraft level and is the responsibihty of the aircraft integrator. For a modification (e.g. STC), it is scoped to consider the performance of the new system as well as the interaction between all affected aircraft systems. Safety requirements are functionally decomposed in a hierarchical structure from product (i.e. aircraft) level to subsystem (e.g. altitude display system) to components (e.g. Altitude Display Unit). At Level 4 the safety requirements are those requirements generated from the aireraft Functional Hazard Analysis (FHA) based on required aircraft functions... 

The functional approach stems from the fact that any system (or item) is merely the embodiment of a set of functions. A Functional Hazard Analysis (FHA) is a systematic, comprehensive top-down examination of each function of the system to consider the effects and probability of a functional failure, malfunction and/or normal response to unusual or abnormal external factors [AMC25.1309 para lOb(l)]. 

Step 1 define the scope of the Functional Hazard Analysis... 

Wilkinson, P.J., Kelly, T.P., 2005. Functional Hazard Analysis for Highly Integrated Systems, (A Paper on FHA Application on an Engine Controller). University of York. 

Scharl, A., Stottlar, K., Kady, R. Functional Hazard Analysis (FHA Methodological Tutorial. In International System Safety Training Symposium (August 4—8, 2014), NSWCDD-MP-14-00380, St. Louis, Missouri, http //issc2014.system-safety.org/83 Functional Hazard Analysis Common% 20Process.pdf. 

Prove the accomplishment of Functional Hazard Analysis (FHA) safety targets ... 

In most civil aviation System Safety Assessments, this event originates from a Function Hazard Analysis (FHA, see Chapter 3), but it can also come from any other hazard identification technique (e.g. ZS A or PRA). An FTA is a deductive approach (i.e. top down) that determines how a given state (i.e. the undesired event) can occur. It does not identify all failures in a system in a way that inductive tproaches (such as an FMEA) would. 

Although system architectural features (e.g., redundancy, monitoring and partitioning) are used to help prove the safety objectives set in the Functional Hazard Analysis (see Table 3.3), it is practically impossible to guarantee the correctness and completeness of requirements definition or design implementation. 

This step involves the Safety Engineer highlighting to the Test Pilot and/or the HF Specialist all failure conditions identified via techniques such as the Functional Hazard Analysis (FHA) (Chapter 3), Failure Modes and Effects Analysis (EMEA) (Chapter 5), Common Mode Analysis (CMA) (Chapter 6), Particular Risk Analysis (PRA) (Chapter 7) and Zonal Safety Analysis (ZSA) (Chapter 8). 

For the Operator If we look at the Functional Hazard Analysis (Chapter 3), the Hazard Log entry might be Loss of Situational Awareness , of which the Altitude Display System is but one contributory cause. 

Functional Hazard Analysis A Functional Hazard Analysis (FHA) is defined [SAE ARP4761 para 3.2] as a systematic, comprehensive examination of a system s functions to identify and classify potential Failure Conditions which the system can cause or contribute to, not only if it malfunctions or fails to function, but also in its normal response to unusual or abnormal external factors. 

The fault hazard analysis (FHA)—also referred to as the functional hazard analysis—method follows an inductive reasoning approach to problem solving in that the analysis concentrates primarily on the specific and moves toward the general (TAI 1989). The FHA is an expansion of the FMEA (Stephenson 1991). As demonstrated in the previous chapter, the FMEA is concerned with the critical examination and documentation of the possible ways in which a system component, circuit, or piece of hardware may fail and the effect of that failure on the performance of that element. The FHA takes this evaluation a step further by determining the effect of such failures on the system, the subsystem, or personnel. In fact, when a FMEA has already been completed for a given system and information on the adverse safety effect of component or human failures is desired for that system, the safety engineer can often utilize the data from the FMEA as an input to the FHA. 

Preliminary system safety assessment Functional hazard analysis, FTA. 

Fault (or Functional) Hazard Analysis (FHA) Management Oversight and Risk Tree (MORT) Energy Trace and Barrier Analysis (ETBA) Sneak Circuit Analysis (SCA)... 

Fault (or Functional) Hazard Analysis A system safety analysis method, usually an extension of the failure mode and effect analysis that evaluates the overall effect of functional failures on other subsystems or the overall system itself. 

Functional hazard analysis is the airline industry s name for hazard analysis. Failure mode and effects analysis and fanlt tree analysis are applied in the same way as in other industries. Zonal analysis is the verification of correct manufacture and installation. It starts by reviewing drawings and analysis and ends in the physical inspection of mockup, prototype, and production systems. 

---