At 8:54 p.m. on February 3, 2023, a Norfolk Southern train shed 38 railcars in East Palestine, Ohio, after a single wheel bearing overheated and an axle failed. The NTSB’s June 25, 2024 final report pinned the cause on that bearing and called the vinyl chloride vent-and-burn unnecessary.
One failed part has cost Norfolk Southern more than $2.2 billion in cleanup, penalties, and settlements, according to reporting on the case. That is what a transportation risk assessment exists to prevent, and why treating it as paperwork is a costly mistake.
| Transportation Risk Assessment: Key Takeaways |
| A transportation risk assessment identifies, analyzes, and evaluates hazards across five modes: roadway, airway, waterway, rail, and pipeline systems. |
| The road dominates the risk picture: NHTSA recorded 40,901 U.S. traffic deaths in 2023, dwarfing every other mode combined. |
| The February 2023 East Palestine derailment shows the stakes: a single failed bearing has cost Norfolk Southern more than $2.2 billion to date. |
| The method is a five-step cycle: identify hazards, analyze likelihood and impact, evaluate and prioritize, mitigate and control, then monitor and review. |
| U.S. oversight is split by mode: FMCSA governs trucks and buses, FAA aviation, PHMSA pipelines and hazmat, and NTSB investigates every serious incident. |
| A credible transportation risk assessment maps to ISO 31000 and feeds the wider enterprise risk register, not a one-time compliance checkbox. |
We built this guide for the logistics, safety, and enterprise risk practitioners who own that exposure every day. It defines transportation risk assessment, walks the five-step method, breaks risk down mode by mode, and maps the U.S. regulators who set the rules you have to satisfy.
What a Transportation Risk Assessment Actually Is
The East Palestine story is dramatic, but the discipline behind preventing it is systematic. A transportation risk assessment is a structured method for identifying, analyzing, and evaluating the risks of moving goods, people, or hazardous materials, and it borrows the same logic as any formal risk assessment.
Scope is what sets it apart. The assessment spans accidents, delays, cargo theft, environmental spills, and regulatory exposure, then it runs each through the full risk assessment process of likelihood and consequence rather than treating a crash as a one-off event.
It rarely lives alone. A mature program folds transportation exposure into the wider enterprise risk management framework, so a spike in fleet incidents or a supplier’s port closure surfaces on the same board-level register as cyber or financial risk, with clear ownership.
| Risk Category | Transportation Example | Typical Consequence |
| Safety | Driver fatigue, failed bearing, vessel collision | Fatalities, injuries, litigation |
| Operational | Route disruption, port congestion, delays | Missed SLAs, penalty clauses |
| Security | Cargo theft, hijacking, tampering | Loss of goods, insurance claims |
| Environmental | Oil spill, hazmat release, emissions | Cleanup cost, regulatory fines |
| Compliance | Hours-of-service or hazmat violations | Fines, suspended operating authority |
Why the Road Dominates a Transportation Risk Assessment
Before splitting the problem by mode, the data settles which mode matters most. The road is not close: NHTSA’s final 2023 count recorded 40,901 people killed on U.S. roads, at a rate of 1.26 deaths per 100 million vehicle miles traveled.
Figure 1. Highway deaths dominate every other transportation mode in any risk assessment.
Heavy vehicles concentrate the exposure, and they behave differently in a collision. FMCSA’s Large Truck and Bus Crash Facts counted 5,837 large trucks in fatal crashes in 2022, and NHTSA’s 2024 estimate of 39,345 total deaths signals the first meaningful decline in roadway fatalities since the pandemic surge.
So what does that mean for the assessor? Any transportation risk assessment that spreads attention evenly across modes misallocates it. Roadway exposure deserves the deepest controls, the tightest key risk indicators for logistics and transportation, and the first budget dollar.
The Five Modes Every Transportation Risk Assessment Covers
Concentration does not mean the other modes get ignored, because each carries a distinct hazard signature and its own failure physics. A complete transportation risk assessment treats roadway, airway, waterway, rail, and pipeline systems as five separate problems that happen to share one underlying method.
Figure 2. Five modes, one identify-analyze-evaluate-mitigate-monitor cycle.
Roadway and Airway Transportation Risk Assessment
Roadway assessment weighs driver fatigue, road geometry, traffic volume, and weather, the factors that crash studies tie most tightly to frequency and severity. It leans heavily on the qualitative and quantitative blend, using historical crash data and telematics to rank high-risk corridors and vehicles.
Airway assessment shifts to flight operations, airport infrastructure, maintenance discipline, and emergency response protocols. Practitioners lean on FAA aviation safety data and a tight set of aviation and airline key risk indicators to catch precursors long before they ever reach the accident column.
Waterway, Rail, and Pipeline Transportation Risk Assessment
Waterway assessment centers on vessel stability, navigation, collision probability, and oil spill response, drawing on Bureau of Transportation Statistics casualty data. Rail assessment targets track integrity, bearing health, grade crossings, and the hazmat tank cars that turned East Palestine into a national story.
Pipeline assessment is fundamentally a corrosion-and-integrity discipline played out over decades. It scores weld failure, material degradation, leak detection, and third-party excavation damage, the slow failure modes that PHMSA hazmat oversight and integrity-management rules are specifically built to catch well before a rupture.
Figure 3. Five years of U.S. pipeline incidents in four numbers.
The pipeline numbers more than justify the scrutiny. PHMSA data records roughly 3,070 incidents over the past five years, 58 lives lost, and more than $2.3 billion in property damage, most of it traced to material, weld, or equipment failure squarely within an operator’s control.
The Five-Step Transportation Risk Assessment Methodology
Whichever mode you assess, the engine running underneath is identical from road to pipeline. A transportation risk assessment follows a repeatable five-step cycle that maps cleanly onto ISO 31000 and the NIST SP 800-30 risk process that many U.S. agencies already use.
Figure 4. The five-step transportation risk assessment cycle.
Steps one and two do the heavy analytical work. You identify hazards, from spills to hours-of-service breaches, then analyze each one by combining likelihood and impact, using historical crash data and expert judgment exactly as the risk assessment methodology prescribes for any serious program.
Steps three through five convert analysis into action. You evaluate and rank risks against appetite, apply controls, and then mitigate the priority exposures, logging each decision in the risk register so the next review starts from evidence, not memory.
| Step | What Happens | Transportation Example |
| 1. Identify | List every credible hazard by mode | Fatigue, corrosion, collision, hazmat leak |
| 2. Analyze | Score likelihood x impact | Crash frequency modeling on a corridor |
| 3. Evaluate | Rank against risk appetite | Flag high-risk routes for treatment |
| 4. Mitigate | Apply controls and safeguards | Bearing detectors, driver training, insurance |
| 5. Monitor | Re-assess as conditions change | Update after new PHMSA or FMCSA rules |
How U.S. Regulators Shape Transportation Risk Assessment
The methodology is universal, but the rulebook is uniquely American and deliberately split by mode. A U.S. transportation risk assessment therefore has to satisfy several federal agencies at once, each one owning a distinct slice of the national network and its own enforcement powers.
Trucking sits squarely under FMCSA, the busiest regulator in the field. Its hours-of-service rules cap driving time to fight fatigue, while broader commercial motor vehicle standards govern driver qualifications, vehicle maintenance, and mandatory drug and alcohol testing across the entire fleet.
Other modes answer to their own regulators. FAA oversees aviation, PHMSA governs pipelines and hazmat, and the NTSB safety data program investigates serious incidents in every mode, feeding recommendations that reshape the next assessment cycle, exactly as it did after East Palestine.
| Agency | Modes Covered | What It Regulates |
| FMCSA | Trucks, buses | Hours of service, driver qualification, maintenance |
| FAA | Aviation | Flight operations, airworthiness, airports |
| PHMSA | Pipelines, hazmat | Integrity management, hazmat packaging and routing |
| FRA | Rail | Track standards, equipment, operating rules |
| NTSB | All modes | Independent accident investigation and recommendations |
The FRA’s own East Palestine findings echoed the NTSB conclusions and pushed for tighter rail-safety rules, a pointed reminder that compliance risk assessment and safety assessment are really two halves of the same transportation risk assessment job that no serious operator can afford to separate.
Transportation Risk Assessment: Your Questions Answered
What is the main goal of a transportation risk assessment?
The goal is to prevent loss of life, cargo, and money by finding hazards before they cause harm. A transportation risk assessment evaluates the likelihood and impact of accidents, spills, and disruptions, then guides where to spend limited safety and continuity resources first.
What are the five modes in a transportation risk assessment?
The five modes are roadway, airway, waterway, rail, and pipeline systems. Each shares the same identify-analyze-evaluate-mitigate-monitor cycle, yet carries a distinct hazard profile, running from driver fatigue and road geometry on the highway to weld failure, corrosion, and third-party strikes across a buried pipeline network.
How often should a transportation risk assessment be done?
Treat it as continuous, not annual. Re-run the transportation risk assessment whenever routes, cargo, vehicles, or regulations change, and after any serious incident. Major NTSB or FMCSA rule updates should trigger a fresh review rather than waiting for the calendar.
Who regulates transportation risk assessment in the United States?
Oversight is split by mode: FMCSA covers trucks and buses, FAA aviation, PHMSA pipelines and hazmat, and FRA the railroads. The NTSB independently investigates serious accidents across all modes, and its recommendations frequently reshape how the next transportation risk assessment is scoped and where controls get added.
How does a transportation risk assessment handle hazardous materials?
Hazardous materials get their own dedicated layer in the assessment. It scores containment, routing, and spill response under PHMSA hazardous materials rules, because a toxic release, like the East Palestine vinyl chloride, multiplies both the environmental and the financial consequence far beyond an ordinary crash of the same size.
Is transportation risk assessment part of enterprise risk management?
It absolutely should be. A strong transportation risk assessment feeds directly into the enterprise risk register, aligning fleet, freight, and supply chain exposure with strategic objectives, so leadership sees transportation risk sitting beside financial and cyber risk rather than buried in an operational silo where it goes unmanaged.
Where Transportation Risk Assessments Go Wrong and the Fixes That Work
Even well-funded programs stumble in predictable places, and the table below pairs the five failure modes we see most with the fix that closes each gap. The pattern is familiar to anyone who has run a physical security risk assessment or a supply chain risk assessment.
| Pitfall | Root Cause | Remedy |
| Even attention across modes | Treating road like pipeline despite 40,901 vs 12 deaths | Weight controls by exposure; road first |
| One-and-done assessment | Filed after audit, never revisited | Re-assess on route, rule, and incident changes |
| Ignoring near-misses | Only crashes get logged | Track precursor KRIs and hot-bearing alerts |
| Hazmat as an afterthought | Standard crash scoring for toxic loads | Add a PHMSA hazmat containment and routing layer |
| Siloed from ERM | Safety team owns it alone | Feed results into the enterprise risk register |
Where Transportation Risk Assessment Is Heading Through 2028
The next three years will be shaped by sensors and live data, not by new paperwork. After East Palestine, expect wayside bearing detectors with lower alarm thresholds and much denser spacing to become a baseline expectation in any credible rail transportation risk assessment going forward.
Telematics is rewriting road exposure. Fleet cameras, ELDs, and predictive maintenance now feed live signals into the register, turning the transportation risk assessment from an annual snapshot into a rolling model that flags a fatiguing driver or a failing brake before the crash.
Supply chain security is steadily converging with physical safety. Standards like ISO 28000 and its practical supply chain application now push firms to score theft, disruption, and continuity on the very same supply chain risk heat map they use for crashes and spills, backed by supply chain key risk indicators.
Build for that future now rather than after the next incident. Score your modes by their real exposure, wire live indicators into a risk assessment matrix, and follow a repeatable step-by-step assessment so the model updates just as fast as the transportation network it is meant to protect.
Strengthen Your Transportation Risk Assessment With Risk Publishing
Fleet operators and logistics leaders carry exposure that a single spreadsheet was never built to hold. Explore our advisory services for mode-by-mode assessment design and full ISO 31000 alignment, then get in touch when you are ready to turn a static checklist into a living, board-ready transportation risk assessment.
Download the template here transportation-risk-assessment-template
Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.