Hazard Analysis Flashcards

A 'safety critical function' in a test system is best defined as:

Answer: A function whose failure could directly result in a hazardous condition or mishap

A safety critical function is one whose failure, malfunction, or inadvertent activation could directly cause or contribute to a hazard that may result in injury, death, or mission loss.

During hazard analysis, 'exposure' is a factor that modifies risk because it accounts for:

Answer: How often and for how long personnel or assets are in proximity to the hazard

Exposure quantifies how frequently and for how long people or systems are subject to the hazard, which directly influences the probability of a mishap occurring.

What is the primary output of a System Hazard Analysis (SHA) compared to a Subsystem Hazard Analysis (SSHA)?

Answer: SHA examines hazards arising from system-level integration and interfaces between subsystems

A System Hazard Analysis (SHA) builds on SSHAs by evaluating hazards that emerge from the integration of subsystems and their interfaces, which may not be apparent at the subsystem level alone.

Which of the following is a key limitation of using historical mishap data as the primary basis for hazard probability estimation in a novel test system?

Answer: Novel systems may have unique failure modes not reflected in historical data from different systems

When a system is novel or significantly different from predecessor systems, historical mishap rates from other systems may be a poor predictor because new failure modes unique to the design may not yet appear in the data.

A 'no-lone-zone' requirement on a test range is an example of which type of hazard control?

Answer: Administrative control

A no-lone-zone rule — requiring a minimum of two qualified personnel when working with hazardous systems — is an administrative control because it relies on policy, procedure, and human behavior rather than physical engineering safeguards.

In energy-barrier hazard analysis, which approach most directly reduces risk by removing the energy source causing the hazard?

Answer: Elimination — remove the energy source entirely

Elimination completely removes the hazardous energy source from the system, which is the most effective means of risk reduction because the hazard cannot manifest if the energy is absent.

A test conductor discovers mid-test that a safety control identified in the hazard analysis has failed. The correct immediate action is to:

Answer: Halt the test, reassess the risk with the control absent, and obtain authority to continue or stand down

When a planned safety control fails, the test must be halted and the risk re-evaluated in the absence of that control; the test may only continue after the changed risk picture is assessed and accepted by the appropriate authority.