On May 28, 2025, every US Part 121 air carrier with an SMS in place before May 28, 2024 had to revise that SMS to meet the new 14 CFR Part 5 Safety Management Systems requirements.
A year earlier, the FAA extended Part 5 to all Part 135 certificate holders, Part 91.147 air tour operators, and certain Part 21 design and manufacturing holders. Risk assessment in aviation is no longer a Part 121 differentiator. It is the federal floor.
| The Practitioner Cheat Sheet on Risk Assessment in Aviation |
| Risk assessment in aviation is the documented Safety Risk Management process inside an SMS that estimates the probability and severity of identified hazards, then ties each scored hazard to a control with an owner attached. The output is not a binder. It is the operating record that survives FAA Part 5 surveillance, ICAO Annex 19 audit, and the inevitable plaintiff discovery request after a serious event. |
| US Part 121 air carriers had to revise their SMS to meet 14 CFR Part 5 no later than May 28, 2025. The FAA extended SMS to all Part 135 certificate holders, Part 91.147 air tour operators, and certain Part 21 design and manufacturing certificate holders on April 26, 2024. Anyone running risk assessment in aviation without a Part 5 crosswalk is now operating outside the floor. |
| FY 2024 US general aviation logged 195 fatal accidents and 337 fatalities at a rate of 0.68 fatal accidents per 100,000 flight hours, the lowest rate since FAA began tracking it in 2009. NTSB recorded roughly 1,415 total US aviation accidents in calendar 2024 with 257 fatal events, and approximately 72 percent of fatal events occurred in general aviation. |
| Global commercial aviation 2024 recorded seven fatal accidents and 244 onboard fatalities across 40.6 million flights per IATA, up from one fatal accident and 72 fatalities in 2023. The 2024 numbers reset the baseline that every Part 121 risk assessment in aviation has to defend against this year. |
| FY 2024 US serious runway incursions fell to nine Category A and B events, a 59 percent reduction from 22 in FY 2023 and the lowest count since FY 2019. Pilot deviations remained the leading cause of total incursions; controller errors drove most of the Category A and B subset. The DOT OIG March 2025 report flagged five of 24 Safety Review Team recommendations as implemented. |
| The ICAO Annex 19 5×5 risk matrix anchors most US aviation risk assessment in aviation work. Probability runs A (extremely improbable) through E (frequent). Severity runs 1 (negligible) through 5 (catastrophic). Scores of 1-4 are acceptable, 5-12 require mitigation review, and 15-25 are unacceptable until controls reduce them. The FAA AC 120-92D walks the same logic for Part 5. |
| The five Safety Risk Management steps inside Part 5 and Annex 19: describe the system, identify the hazard, analyze the safety risk, assess the safety risk against acceptable level of safety (ALoS), and control the residual risk. Skip any one step and the documented assessment will fail a Part 5 Declaration of Compliance review. |
Risk assessment in aviation is the documented Safety Risk Management process that estimates the probability and severity of identified hazards across flight operations, ground operations, maintenance, design, and air traffic, then ties each scored hazard to a control with an owner attached.
FY 2024 closed with the lowest US general aviation fatal accident rate since FAA began tracking it in 2009, at 0.68 fatal accidents per 100,000 flight hours.
This guide gives US safety managers, accountable executives, and risk leaders a working definition of risk assessment in aviation, the regulatory anchors that survive FAA and ICAO survey scrutiny, the data inputs that produce a defensible safety case, and the operational pitfalls that produce Part 5 findings.
The framework maps cleanly to ISO 31000:2018 risk analysis and into an enterprise risk management framework applied to flight operations.
Figure 1. The US risk assessment in aviation landscape in numbers that drive boardroom attention.
What Risk Assessment in Aviation Actually Is
Risk assessment in aviation estimates how likely identified hazards are to produce an unsafe outcome and how severe that outcome would be if the hazard goes uncontrolled.
It is the analytical step that sits between hazard identification and risk control inside the Safety Risk Management pillar of an SMS. The output is a scored, dated risk register, not a paragraph in a safety policy.
The Working Definition of Risk Assessment in Aviation
The safety team pulls hazard reports, flight data monitoring outputs, audit findings, ASAP and ASRS submissions, maintenance event records, and operational metrics. Those inputs feed a probability and severity matrix.
Each scored risk maps to a control tier that drives mitigation deadlines, leadership escalation, and the Safety Review Board agenda. A high-level hazard list with no scoring is not a risk assessment in aviation; it is a hazard inventory.
Why Risk Assessment in Aviation Is Not a Compliance Checkbox
Accidents are rarely random. They sit at the tail of a chain of unmitigated hazards that the operator failed to identify, failed to score honestly, or scored and then ignored.
A proper risk assessment in aviation surfaces the modifiable links in that chain, and modifiable links are the only place intervention actually changes the outcome. The cheapest place to find your next sentinel event is in the gap between your hazard report inbox and your scored register.
From a risk discipline standpoint, risk assessment in aviation maps directly to the identify-analyze-evaluate-treat sequence at the heart of ISO 31000:2018. The same logic appears in a guide to risk assessment methodology and across operational risk management.
A hazard you have not scored against an explicit acceptable level of safety is one you cannot defend, which is why aviation programs without a documented risk assessment in aviation lose the FAA Part 5 Declaration of Compliance argument.
Why Risk Assessment in Aviation Matters Across US Operations
Patient and passenger outcomes, regulatory enforcement exposure, insurance economics, and shareholder reputation all sit downstream of the aviation risk assessment. The safety case is decisive on its own.
A loss-of-control event, a runway incursion that becomes a runway collision, or a maintenance-induced engine failure each turn a routine flight into a fatal event, a multi-year NTSB investigation, and a permanent line item in the certificate holder’s history.
The Financial Case for Risk Assessment in Aviation
A US Part 121 hull loss with passenger fatalities clears nine figures in direct cost between hull replacement, liability settlements, and incremental insurance premium for the surviving fleet.
Aircraft hull insurers, captive risk programs, and excess liability towers all reprice annually against the operator’s documented risk assessment in aviation. A clean scored register and demonstrated control tracking compress premium; a gap-ridden assessment expands it.
Risk Assessment in Aviation Under FAA and ICAO Scrutiny
FAA Advisory Circular 120-92D is the operational reference for Part 5 SMS implementation, and ICAO Annex 19 on safety management sets the international expectation.
Surveyors look for evidence the risk assessment in aviation was performed, scored against an explicit acceptable level of safety, documented, and acted on. Most Part 5 findings live in the gap between a written SRM procedure and an actual scored register.
For accountable executives, risk assessment in aviation sits at the intersection of safety, regulatory compliance, financial stewardship, and reputation.
The same scored hazard that prevents an incursion closes an FAA Part 5 finding and an insurance underwriter’s question on the same day. The pattern echoes how to conduct a risk assessment applied to flight operations, with the FAA Aviation Safety Information Analysis and Sharing (ASIAS) data taking the role financial loss data takes in operational risk.
Figure 2. US general aviation fatal accident rate trend, the headline metric the FAA Agency Priority Goal tracks against the risk assessment in aviation pipeline.
Key Components Every Risk Assessment in Aviation Must Capture
Aviation accidents rarely trace to a single cause. Real events combine flight crew action with weather, equipment state, organizational pressure, regulatory environment, and threat context.
Safety analysts trained on a real risk assessment in aviation learn to read these factors together, weighing how they amplify one another.
The table below summarizes the components an annual aviation risk assessment has to cover to survive a Part 5 walk-through.
| Component category | Common inputs | Why it matters in risk assessment in aviation |
| Operational hazards | Flight data monitoring, FOQA, LOSA observations, ASAP reports, ASRS submissions, route and airport mix | High weight. Captures the leading and lagging indicators that surface unstable approaches, exceedances, and non-compliance events before they become accidents. |
| Human factors | Crew fatigue, training currency, line check results, CRM observations, threat and error management coding | High weight. Human performance issues drive a documented majority of accidents. SRM that ignores them fails the FAA’s published HFACS expectations. |
| Technical and mechanical risk | MEL trends, deferred defect rates, engine condition monitoring, avionics failure modes, supplier quality data | High weight. Maintenance risk and design defects produce the catastrophic tail of the severity distribution. Part 5 and Part 21 SMS both require it. |
| Environmental and meteorological | Convective weather exposure, icing days, low-visibility approach volume, runway condition reports, wildlife strike data | Moderate to high weight. Weather drives a documented share of GA fatal events and Part 121 diversions. SMS captures the exposure, not just the weather. |
| Regulatory and external | FAA SAFO and InFO releases, AD compliance, state DOT and TSA changes, ATC infrastructure status, NOTAM density | Moderate weight. External shifts in regulation, airspace, or equipment alter the hazard map. Annual risk assessment in aviation has to refresh against them. |
| Organizational pressure | Schedule pressure, dispatch reliability targets, financial stress signals, leadership turnover, safety culture survey data | High weight. Organizational drift is the slow-moving precursor to most multi-cause accidents. The Part 5 safety culture requirement is built around it. |
Operational Hazards in Risk Assessment in Aviation
Operational data is where the math gets specific. Flight data monitoring exceedances, ASAP and ASRS submissions, FOQA outlier rates, and unstabilized approach percentages all feed the scored register.
The NTSB US Civil Aviation Dashboard 2008-2024 gives operators an external benchmark to weigh their internal rates against. Operators that score themselves only against last year’s internal data miss the structural shift in fleet mix and route exposure.
Human Factors in Risk Assessment in Aviation
Human performance issues drive a documented majority of US aviation accidents, particularly in general aviation.
Fatigue, distraction, automation surprise, and ineffective CRM all surface in the scored register when the SRM process is honest about its data.
The FAA Human Factors Analysis and Classification System (HFACS) supplies the standard taxonomy and is the reference Part 5 surveyors expect to see. SMS that codes accidents only at the active-failure layer will be flagged.
Crew fatigue is the under-priced exposure in many US Part 121 and Part 135 risk registers. Federal duty rules under 14 CFR Part 117 are a floor, not a ceiling.
Operators running close to the rule with heavy time-zone change still build fatigue debt that surfaces as exceedances. A risk assessment in aviation that does not score fatigue against the bid line will fail Part 5 surveillance. The same logic appears across operational risk management.
Technical and Mechanical Risk in Risk Assessment in Aviation
Maintenance and design risk produce the catastrophic tail of the severity distribution. Deferred defect rates, MEL trend lines, engine condition monitoring excursions, and AD compliance status all feed the scored register.
Part 21 design and manufacturing holders now sit inside the Part 5 perimeter, which means engineering risk decisions made years before an in-service event have to be traceable in the SRM record. A scenario based risk assessment approach is the natural fit for low-probability high-consequence technical failures.
Environmental and Meteorological Risk in Risk Assessment in Aviation
Weather drives a documented share of US GA fatal events and Part 121 diversions, but the live exposure is route-specific. Convective weather days on a Gulf Coast network look nothing like icing days on a Great Lakes network.
The risk assessment in aviation captures this differential by route, season, and aircraft type. Wildlife strike volume, runway condition reports, and low-visibility approach mix sit in the same exposure bucket and earn dedicated SRM workstreams.
Organizational Pressure in Risk Assessment in Aviation
Organizational drift is the slow-moving precursor to most multi-cause accidents. Schedule pressure, dispatch targets, leadership turnover, and acquisition integration all change behavior at the flight deck.
The Part 5 safety culture requirement is built around this dynamic. Culture survey data belongs in the scored register alongside exceedance rates. The pattern echoes operational risk management framework in adjacent industries, and the IATA 2024 Safety Report cites organizational factors in the 2024 global rebound.
How a Defensible Risk Assessment in Aviation Methodology Works
Intuition and senior captain instinct lost the methodology argument with the FAA around 2015 and have not won it back. Standard methods from AC 120-92D and ICAO Annex 19 give the safety team a repeatable scoring engine that survives both Part 5 surveillance and turnover in the safety office.
Inconsistent method choice costs more in audit findings than any single hazard ever did. Lock the method, train the analysts on it, and audit for drift quarterly.
| Methodology | Primary use | Scoring approach | What the method captures |
| ICAO 5×5 risk matrix | All ICAO contracting states; Part 5 and Annex 19 default | Probability A-E x severity 1-5; score 1-25 | Color-banded acceptability: 1-4 acceptable, 5-12 mitigation review, 15-25 unacceptable until controls applied |
| FAA AC 120-92D matrix | US Part 5 SMS operators | Likelihood and severity bands per FAA reference | Aligns to ICAO 5×5 with US-specific terminology; tied to Part 5 Declaration of Compliance |
| Bow-tie analysis | Catastrophic-tail hazards (engine failure, runway excursion) | Threats – top event – consequences with preventive and recovery barriers | Names the active and latent barriers, which is the only way to argue acceptability for low-probability high-consequence events |
| FMEA / FMECA | Design and manufacturing under Part 21 | Failure mode x effect x criticality scoring | Engineering-grade analysis of component-level risk, traceable from design through in-service |
| FRAT (Flight Risk Assessment Tool) | GA, Part 91 corporate, Part 135 on-demand | Pre-flight scoring of pilot, aircraft, environment, and operation | Day-of-departure go / no-go decision support; documented record of the call |
Figure 3. Serious US runway incursions FY 2019-2024, the headline output that the FAA Safety Call to Action and risk assessment in aviation tightening drove down 59 percent year-over-year.
The ICAO 5×5 Matrix in Risk Assessment in Aviation
The ICAO 5×5 risk matrix is the default reference for risk assessment in aviation across contracting states and inside US Part 5. Probability runs A (extremely improbable) through E (frequent). Severity runs 1 (negligible) through 5 (catastrophic).
Scores of 1-4 are acceptable as is, 5-12 require mitigation and review, and 15-25 are unacceptable until controls reduce them. The matrix is the contract between the safety team and accountable leadership.
Figure 4. The ICAO Annex 19 5×5 risk matrix every US Part 5 SMS uses as its scoring engine.
FAA Part 5 Expectations on Risk Assessment in Aviation in 2026
FAA Part 5 expects five SRM steps documented in every risk assessment in aviation: describe the system, identify the hazard, analyze the safety risk, assess the safety risk against an explicit acceptable level of safety, and control the residual risk.
The FAA Notice 8900.700 series and the Part 5 Declaration of Compliance review walk this same logic. Operators that skip the system description step end up arguing scope against the principal inspector for the rest of the audit.
Choosing the Right Risk Assessment in Aviation Method for the Operation
Operation type drives method choice. Part 121 carriers anchor on the FAA AC 120-92D matrix with bow-tie for catastrophic-tail hazards. Part 135 on-demand operators add a FRAT for day-of-departure scoring.
Part 21 design holders run FMEA and FMECA alongside the SRM register. Part 91 corporate departments lean on FRAT plus ICAO 5×5 for org-level risk. The ICAO safety management page maps the methods to the certificate type.
Building an Annual Risk Assessment in Aviation Plan That Survives Survey
Assessment without an annual plan is paperwork. The value of risk assessment in aviation lives in the mitigation pipeline and the surveillance commitments it triggers.
The scored hazard register has to become a dated plan with owners attached, signed off by the Safety Review Board and endorsed by the accountable executive. FAA AC 120-92D supplies the SRM and SA pillars; the annual plan turns those pillars into a calendar with named deliverables.
Safety Performance Indicators Inside the Annual Risk Assessment in Aviation
Safety Performance Indicators are the most visible output of the annual risk assessment in aviation. The plan should publish the SPIs tied to each top-risk area, the alert and target thresholds for each, the trend window, and the escalation path when an SPI breaches alert.
Lagging indicators alone are not enough; the Part 5 surveillance team expects leading indicators tied to the scored register. The FAA InFO 24014 and related guidance sets the explicit reference for Part 5 operators.
Emerging Hazards Readiness in the Annual Plan
Emerging hazards earn dedicated space in the annual risk assessment in aviation. Plan elements include surveillance of unmanned aircraft systems integration, GPS jamming and spoofing exposure, lithium battery cargo events, single-pilot operations in IFR Part 135.
AAM and eVTOL airspace entry, and cyber threats to flight operations systems. Pulling forward last year’s emerging hazards section without an actual reassessment will get the section cited under Part 5 SRM-1 expectations.
Safety Culture and Reporting Audits in the Annual Plan
Safety culture and the willingness to report are foundational to risk assessment in aviation.
The annual plan has to document the just culture policy, ASAP and ASRS submission rates, anonymous report disposition, training currency on threat and error management, and survey-based culture metrics.
Programs that audit safety culture once a year at low sample size produce clean-looking dashboards that mask under-reporting. Quarterly pulse data is the operating standard for mature Part 121 and Part 135 SMS.
Multidisciplinary Roles in the Risk Assessment in Aviation Workflow
Aviation safety does not belong to any single function. The most effective US operators coordinate a team where each member contributes specific expertise to a shared risk assessment in aviation and a shared annual plan. Without that coordination, a high-quality assessment can sit unused because no one owns the mitigation sequence the scores trigger.
| Role | Risk assessment in aviation contribution | Output that drives the annual plan |
| Director of Safety / Safety Manager | Owns the methodology, scoring, documentation, and SRB presentation | Risk register, SPI dashboard, audit schedule, SRB minutes, Part 5 DOC package |
| Accountable Executive | Accepts residual risk on behalf of the certificate holder; signs the Part 5 DOC | Resource decisions, risk acceptance signatures, board reporting |
| Director of Operations / Chief Pilot | Operationalizes mitigation in line operations; owns flight-deck-facing controls | OpSpec changes, bulletins, training revisions, line check focus areas |
| Director of Maintenance | Provides MEL, deferred defect, and engine condition data; owns maintenance-facing controls | Maintenance program updates, reliability data, AD compliance evidence |
| Human Resources / Training | Owns crew fatigue policy, training currency, just culture procedures | Fatigue risk management plan, training matrix, just-culture investigations |
| Quality Assurance / Internal Evaluation | Audits the SMS against Part 5 and AC 120-92D; runs internal evaluation program | Audit reports, finding closures, IEP records for the principal inspector |
Pilots and Dispatchers in the Risk Assessment in Aviation Workflow
Flight crew and dispatcher input is no longer optional in any high-performing US aviation SMS. Pilots see the operational hazards the dashboard misses; dispatchers see the route, weather, and equipment combinations that produce the next exceedance.
The annual risk assessment in aviation lists the channels for line input (ASAP, ASRS, hazard report cards, post-flight debriefs) and tracks the turnaround time from submission to disposition by quarter.
The Three Lines Model Applied to Risk Assessment in Aviation
For accountable executives overseeing aviation SMS, the multidisciplinary structure maps onto the three lines of defense model. Line operations crews and the safety team form the first line, owning the assessment and the bedside controls. Safety, quality, and the SRB form the second line, providing oversight, data analysis, and policy guidance. Internal evaluation and FAA principal inspectors form the third line, evaluating program effectiveness and compliance against named standards.
How Often a Risk Assessment in Aviation Should Be Conducted
Cadence should track how unstable the underlying risk profile actually is. Two carriers with identical baseline scores can move in opposite directions inside one quarter if fleet mix, route network, or training currency shifts.
The Part 5, ICAO Annex 19, and AC 120-92D operating rule converges on a simple answer: do the formal risk assessment in aviation once a year, refresh whenever a trigger event fires, and sign every refresh.
Annual Cadence for Risk Assessment in Aviation Under Part 5
FAA Part 5 and ICAO Annex 19 expect an annual risk assessment in aviation across the full hazard register, with refreshes triggered by significant fleet changes, route changes, certificate changes, leadership turnover, accident or serious incident events, and major regulatory shifts.
Many operators add a mid-year formal review, treating the calendar itself as a control rather than a documentation step. Annual sign-off by the Safety Review Board and the accountable executive converts the assessment into governance.
Trigger-Based Risk Assessment in Aviation Refreshes
Trigger events demand off-cycle risk assessment in aviation refreshes regardless of annual cadence.
Trigger categories include new aircraft type entry into service, new route or airport opening, OpSpec revisions, accident or serious incident events, sustained SPI breaches, FAA InFO or SAFO releases tied to the operation, supplier quality alerts, and cyber events affecting flight operations systems.
These triggers sit inside the how often should risk assessments be conducted rhythm Safety Review Boards already manage.
Financial and Regulatory Stakes of Risk Assessment in Aviation
For US accountable executives and aviation risk managers, the financial case for disciplined risk assessment in aviation is direct.
FAA enforcement actions, insurance premium adjustments, lease covenant breaches, and shareholder reaction all reprice annually against the documented SMS performance. Poor performance shapes certificate exposure, performance-based contracts, and capital cost simultaneously.
FAA Part 5 Declaration of Compliance and Risk Assessment in Aviation
Part 5 surveillance focuses on whether the risk assessment in aviation was performed, scored against an explicit ALoS, documented, and acted on. The FAA SMS reference library lays out the surveillance expectations and the DOC package contents.
The HACRP-equivalent risk in aviation is loss of certificate authority for elements of the operation, not a percentage payment cut. The upstream control is a working SRM register, not a glossy SMS manual.
DOT OIG and NTSB Scrutiny on Risk Assessment in Aviation
The DOT OIG March 2025 report on FAA runway incursions named only five of 24 Safety Review Team recommendations as implemented as of October 2024. NTSB investigations regularly cite gaps between the operator’s SMS manual and the actual SRM record as contributing factors.
Track register closure rates monthly, route every gap through the Safety Review Board, and treat each one as a process failure, not a paperwork failure.
Common Risk Assessment in Aviation Questions Practitioners Ask
Six questions surface in every US aviation SMS program review of risk assessment in aviation design.
The answers below reflect FAA Part 5, AC 120-92D, ICAO Annex 19, and ISO 31000:2018 guidance current to May 2026, plus the operational patterns of US Part 121, Part 135, Part 91 corporate, and Part 21 design and manufacturing holders running mature programs.
What is the simplest definition of risk assessment in aviation?
Risk assessment in aviation is the Safety Risk Management process that estimates the probability and severity of identified hazards across an operation, then ties each scored hazard to a control with an owner attached.
FAA, ICAO, and ISO 31000:2018 settle on a version of this same definition. Skip the scoring step and SRM collapses into a hazard inventory that consistently underperforms structured peers on accident and incident metrics.
Which risk assessment in aviation methodology is best for US Part 121 carriers?
Part 121 carriers run the FAA AC 120-92D matrix with the ICAO 5×5 as the conceptual reference. Bow-tie analysis carries the catastrophic-tail hazards that a 5×5 score alone cannot defend (LOC-I, runway excursion, engine separation).
The AC 120-92D bands produce a numeric score the Safety Review Board owns line by line. Stand the matrix up once, version-control it, and keep operating divisions from inventing their own bands.
How often should a risk assessment in aviation be repeated?
Complete the formal risk assessment in aviation annually in every US Part 121 carrier, Part 135 operator, Part 91 corporate department, and Part 21 design or manufacturing holder.
Refresh between cycles whenever a trigger event fires: new aircraft type entry, route change, accident or serious incident, sustained SPI breach, FAA InFO or SAFO release tied to the operation, cyber event, or supplier quality alert.
Document every refresh, sign every refresh, and route every refresh through the Safety Review Board.
Does the FAA require a formal risk assessment in aviation under Part 5?
Yes. FAA 14 CFR Part 5 requires every Part 121 air carrier, every Part 135 certificate holder, every Part 91.147 air tour operator, and certain Part 21 design and manufacturing holders to operate an SMS with documented Safety Risk Management including hazard identification, risk analysis, risk assessment against an acceptable level of safety, and risk control.
The May 28, 2025 Part 121 transition deadline and the April 26, 2024 Part 135 and Part 21 expansion reset the federal floor.
How does risk assessment in aviation differ from a general operational risk assessment?
A general operational risk assessment covers broad business and operational risk across the enterprise.
Risk assessment in aviation narrows the lens to the specific drivers of unsafe outcomes: operational hazards, human factors, technical and mechanical risk, environmental and meteorological exposure, regulatory and external pressure, and organizational drift.
The two overlap, but the aviation instrument is engineered to predict and prevent a specific class of outcomes, which is why generic enterprise risk scoring cannot substitute for it.
What US standards govern risk assessment in aviation?
The federal floor is 14 CFR Part 5 and FAA Advisory Circular 120-92D. Above that, ICAO Annex 19 and Doc 9859 carry the international expectation, NTSB Part 830 governs reporting and post-event investigation, ASIAS supplies the cross-industry data feed, and ISO 31000:2018 provides the broader risk framework.
Operators with credible SMS documentation reference all five and cross-walk them in the methodology section, not in an appendix nobody reads.
Where Programs Stall on Risk Assessment in Aviation
Six failure patterns recur across US programs trying to stand up or refresh risk assessment in aviation. Each one has a recognizable footprint and a fix mature operators already use.
The COSO ERM framework treats every one of these failures as a control deficiency at the governance layer. Recognize the patterns in your own register before an FAA principal inspector, an NTSB investigator, or a plaintiff attorney does.
| Pitfall | Root cause | Remedy |
| Annual assessment treated as binder refresh | Safety team carries forward prior-year scores without re-pulling FOQA, ASAP, and exceedance data | Pull fresh data each cycle. Document the refresh date on every input. Require SRB sign-off on the methodology, not just the output. |
| Hazards scored without an explicit ALoS | SRM procedure names the matrix but never defines acceptability bands in writing | Publish the ALoS thresholds in the SMS manual. Tie every scored hazard to one of three bands (acceptable, mitigate, unacceptable). No score without a band. |
| Bow-tie analysis skipped for catastrophic-tail hazards | Safety team applies the 5×5 matrix to everything; ignores barrier-based methods | Use bow-tie for low-probability high-consequence hazards (LOC-I, runway excursion, engine separation). Name preventive and recovery barriers explicitly. |
| FRAT exists on paper, never used pre-flight | Pilots view FRAT as a compliance burden, not a decision tool | Make FRAT completion a dispatch release prerequisite. Audit FRAT entries against day-of incidents quarterly. Adjust the tool until it changes behavior. |
| Emerging hazards section pasted from last year | UAS, GPS jamming, cyber, AAM language treated as evergreen | Re-validate the emerging hazards list annually against current FAA InFO, SAFO, ICAO state letters, and DOT OIG reports. Document every refresh. |
| Part 21 design risk handled outside Part 5 SMS | Engineering team treats FMEA as separate from the SRM register | Route every FMEA and FMECA output into the SMS risk register. Audit Part 5 surveillance evidence the design risk feeds operational risk decisions. |
Looking Ahead: Risk Assessment in Aviation for 2026-2028
Three shifts are about to rewrite the playbook for risk assessment in aviation, and the operators ahead of each one are already building the evidence. ASIAS, FOQA, ASAP, ATC surveillance, and reliability data are converging into single dashboards that feed risk inputs in near real time.
FAA Part 5 surveillance will increasingly want the annual risk assessment in aviation to cite live data sources, not quarterly extracts pulled the week before audit.
Unmanned aircraft and advanced air mobility change the hazard map next. UAS traffic management, BVLOS operations, eVTOL airspace entry, and the integration of remotely piloted aircraft into Part 121 corridors are all in motion.
Expect 2027 FAA guidance to require explicit UAS and AAM treatment in the annual risk assessment in aviation, with pathways for risk acceptance of new operational concepts. The FAA UAS integration page tracks the policy direction in public form.
Cyber threat models then become part of the file. Aircraft systems, ATC infrastructure, dispatch and weather systems, and crew scheduling platforms now sit inside the cyber attack surface.
GPS jamming and spoofing have already produced documented operational events on commercial routes. Risk assessment in aviation has to model these threats explicitly, not bury them under “technical risk.” The convergence of risk oversight with strategic planning piece traces this shift across adjacent risk domains.
None of these shifts changes the underlying discipline.
Risk assessment in aviation rewards the operator who can show the methodology in writing, the scoring against an explicit ALoS, the control owners by name, the refresh trail across the year, and the audit path back to source data. Skip the assessment and the Safety Review Board ends up explaining accident reports to the principal inspector instead of preventing them.
Working with Risk Publishing on Risk Assessment in Aviation Programs
Risk Publishing designs risk assessment in aviation frameworks for US Part 121 air carriers, Part 135 operators, Part 91 corporate flight departments, and Part 21 design and manufacturing holders operating under FAA Part 5 and ICAO Annex 19 scrutiny.
We map the risk register, select the methodology, integrate the workflow into your broader integrated risk management approach and operational risk management framework, and document the methodology against ISO 31000, FAA AC 120-92D, and ICAO Annex 19 guidance.
Continue reading the Risk Publishing risk-assessment library, the largest free practitioner archive of US-aligned risk content online: a step by step guide to risk assessment, definition of likelihood in risk assessment, definition of hazard and risk assessment, critical components in a risk assessment, and approaches and tools for risk identification.
Adjacent reading from the framework side of the library, tied to the same ISO 31000 crosswalk this aviation piece builds on: five steps of the risk management process, key elements of a risk register, risk assessment templates, qualitative and quantitative risk assessment, and the importance of enterprise risk management piece for the executive frame.
To start a conversation about risk assessment in aviation program design for your certificate, visit the contact page or the about page.
The how to mitigate risk article maps how flight-deck risk feeds enterprise reporting, and the broader scenario based risk assessment frame anchors emerging-hazard planning, with the FAA aviation safety page supplying the data feed for every Part 5 register.
Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.