EAC0014
Normal operation safety survey
NOSS
EAC 0014
Revision Page
|
Item |
Rev. No. |
Rev. Date
|
Date of Updating |
Signature |
|
|
|
|
|
|
EAC 0014
List of Effective Pages
|
Item |
Title |
Pages |
Dated |
|
EAC 0014 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
EAC 0014
TABLE of CONTENTS
ITEM
|
TITLE |
1
|
NOSS – What is it?
|
2.
|
Purpose: |
3.
|
Applicability |
4.
|
NOSS
Operating Characteristics |
5.
|
WHEN TO CONDUCT A NOSS |
6.
|
HOW TO IMPLEMENT A NOSS |
7.
|
HOW TO USE NOSS DATA |
APPENDIX A
|
THREAT
AND ERROR MANAGEMENT |
APPENDIX B
|
TRAINING AND STANDARDIZING NOSS OBSERVERS |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1. NOSS – What is it?
•
Safety Management Tool based on threat -error managementTEM
•
Captures operational context data during everyday, routine operations
•
Provides a TEM profile of the organisation
2. Purpose:
3. Applicability
Monitoring of air traffic services (ATS)
operations. The process involves collecting safety-related data from normal
operations to identify safety threats that might not otherwise come to the
attention of safety managers.NOSS would be based on a human factors tool known
as the threat and error management (TEM) model.
NOSS would entail over-the-shoulder
observations during normal shifts and would not be allowed in any training
situations.
4. NOSS Operating Characteristics
a)
Over-the-shoulder observations during normal shifts (i.e. not in OJT
situations)
NOSS observations are limited to regularly scheduled
operations. Shift checks, initial shift indoctrination or other ojt training
are off-limits due to the extra level of stress put on pilots during this type
of situation. Having another observer on duty adds to an already high stress
level, thus providing an unrealistic picture of performance. In order for the
data to be representative of normal operations, NOSS observations must be
collected on regular and routine operational shifts.
b)
Joint management/controller association sponsorship
c)
Voluntary participation
·
Maintaining the
integrity of NOSS within an ATS units and the aviation industry as whole is
extremely important for long-term success. To accomplish this goal, all NOSS
observations are collected with voluntary controller's participation. Before
conducting NOSS observations, observers must first ask the ATC operational
shift for permission to be observed. If the crew declines, the observer takes
another operational shift with no questions asked. If an ATS unit conducting a
NOSS has an unreasonably high number of declines, this should serve as an
indicator that there are critical “trust” issues to be resolved.
d)
De-identified,
confidential, and non-disciplinary data collection
·
NOSS observers are
required not to record names, dates, or any other information that can identify
an operational shift or individual. The purpose of NOSS is to collect safety
data, not to punish controllers. ATC Units cannot allow themselves to squander
a unique opportunity to gain insight into their operations by having
controllers fearful that a NOSS observation could be used against them for
disciplinary reasons. If a NOSS observation is ever used for disciplinary
reasons, the credibility of the entire safety program may be irreparably
compromised.
e) Targeted observation instrument
·
The NOSS observation
form is predicated on the TEM framework. At ATC operational shift’s own
initiative (and risk), other conceptual frameworks can be used for NOSS data
collection. Whatever framework is used, it must generate meaningful data on a
variety of topics, including what the controllers did well, what they did
poorly, and how they managed each task of ATC operation.
·
A narrative written by
the observer should have sufficient detail to allow others to understand the
ATC operational task and all its events. The observers need to describe the
environmental conditions and events surrounding the controller’ behavior so
that the controllers’ performance can be understood in full context.
f)
Trained and standardised observers
·
Primarily, controllers
conduct NOSS. Observation teams will typically include line controllers,
instructor controllers, safety controllers, management controllers s that are
respected and trusted within the ATS UNITS to ensure line acceptance of NOSS.
After observers are selected, they are trained and calibrated in the NOSS
methodology, including the use of the NOSS observation form. Observers’
training in the concepts and methodology of NOSS will ensure that the
observations will be conducted in the most standardized manner. (See Appendix
B.)
g) Trusted data collection sites
·
In order to maintain
confidentiality, ATS units must have a trusted data repository. The goal is
that no individual observations will be misplaced or improperly disseminated
through the operational unit.
h) Data cleaning
process
·
Data-driven programs
like NOSS require quality data management procedures and consistency checks.
For NOSS, these checks are done at data-verification roundtables. A roundtable
consists of three or four department who review all the raw data for possible
inaccuracies.
·
The end product is a
database that is validated for consistency and accuracy according to the ATS
unit’s standards and manuals, before any statistical analysis is performed.Targets for safety
enhancement
i)
Targets for safety
enhancement
·
The final product of a
NOSS is the data-derived targets for enhancement based on emergent patterns in
the data. It is then up to the ATS service provider to develop an action plan
based on these targets, using experts from within the airline to analyze the
targets and implement appropriate change strategies.
j)
10. Feedback
results to the controllers
·
In order to ensure
long-term success of NOSS, ATS service provider must communicate the results
back to the line controllers. Line Controllers will want to see not only the
results of the audit, but also management’s plan for improvement.
5. WHEN
TO CONDUCT A NOSS
There are several factors to consider when scheduling a NOSS.Given all
the personnel involved, a NOSS should be scheduled to fit with other
operational priorities. For example,
6. HOW TO IMPLEMENT A NOSS
There are steps associated with getting good-quality data from
observers (Data Collection), and steps associated with ensuring that accurate
and meaningful data are given to management and line pilots (Data Analysis
& Feedback). An ATS service provider can conduct its own NOSS by observing
the following steps.
6.1 DATA COLLECTION
6.1.1 Form a NOSS steering committee and appoint a
NOSS coordinator (safety manager)
6.1.2 Gather information and NOSS resources from other
ATS units
6.1.3. Publicize NOSS within the ATS units and send information letter to the
line managers
6.1.4 Decide the focus of the NOSS
6.1.5 Decide the number of observations
6.1.6 Create an observation form
6.1.7 Select observers
6.1.8 Train observers
6.1.9 Schedule observations
6.1.10 Decide on a data repository
6.1.11 Provide logistical support
6.1.12 DATA ANALYSIS & FEEDBACK
6.1.12.1 Verify the data
6.1 .12.2 Analyze data
6.1 .12.3 Prepare report
6.1 .12.4 Brief management
.
6.1 .12.5 Brief line pilots
6.1.13 Monitor safety change process
6.1.13 .1
historically, organizational safety changes within ATS units have been driven
by accident/incident investigation and intuition. Today, ATS units must deal
proactively with accident and incident precursors. To be successful, the safety
change process must be data-driven. Measurement of daily operations is
fundamental.
unless an organization uses systematic measurement, the perspective it
has on the strengths and weaknesses of its operations is largely based on
anecdote and opinion.
6.1.13 .2 A
NOSS provides specific and quantified results. To take full advantage of this
specificity, the targets for enhancement that arise from the data analysis
should go through a formal safety change process to produce improvement. A
formal safety change process provides a principled approach to target limited
resources and helps the ATS units avoid “turf” issues, by clearly defining and
prioritizing the issues that impact ATS operations. The basic steps of a safety
change process are:
Measurement (with NOSS) to obtain the targets;
Detailed analysis of targeted issues;
List of potential changes for improvement;
Risk analysis and prioritization of changes;
Selection and funding of changes;
Implementation of changes;
Time for changes to stabilize;
Re-measurement.
7. HOW TO USE NOSS DATA
APPENDIX A: THREAT AND ERROR MANAGEMENT
1. Introduction
2. Working Definitions
The Model
This section defines and provides examples of the various components of
the Threat and
Error Management (TEM) model.
Threats
A threat is defined as external factors that increase the operational
complexity and that need to be managed during a normal shift
There are threats from the environment—adverse weather, airport
conditions, terrain, traffic, interruptions, or errors maintenance. Threats may
be anticipated by the ATCo, , or they may be unexpected, occurring suddenly and
without warning such as system
malfunctions. Some threats are easily resolved and quickly dismissed
from the controller’s workload, while other threats equire greater attention
and management. A mismanaged threat is defined as a threat that is linked to or
induces ATCo error.
Errors
ATC errors are defined as actions or inactions by controllers that lead
to deviations from organisational or controller intentions or expectations. . Errors in the operational context tend to reduce
the margin of safety and increase the probability of adverse events.there is:
•
Proficiency - lack of knowledge or skills
•
Inability to select
appropriate functions in ATM system
•
Operational decision -
decision that unnecessarily increases risk
•
Accepting traffic
without separation assurance
•
Communication – failure
to communicate, miscommunication or misinterpretation of pertinent information
•
Misunderstanding a
coordination (adjacent sector)
•
Procedural – intention
is correct, execution is flawed
•
Applying less than
specified Wake Turbulence separation
•
Intentional non-compliance - deliberate deviation from regulations/SOPs
•
Using non-standard
altitudes/flight levels
Understanding how the error was managed is as important, if not more
important, than
understanding the prevalence of different types of error. It is of
interest then if and when
Undesired States
An undesired state is defined as operational conditions where errors by
controllers put traffic in a situation of unnecessary risk
It is a safety-compromising state that results from ineffective error
management.
3. Threat and Error Countermeasures
3.1 A description of an ATC shift is not complete without noting what
the ATCo was doing to anticipate threats and avoid errors, as well as managing
those that occurred. The following ATCo behaviors are considered threat and
error countermeasures:
Planning countermeasures—planning, preparation, briefings,
contingency management—is essential for managing anticipated and unexpected
threats
Execution countermeasures—monitor/cross-check, display management,
workload and automation management—are essential for error detection and error
response
Review/Modify countermeasures—evaluation of plans, inquiry—are
essential for
managing the changing conditions of a traffic situation
3.2 In addition to ATCo behaviors, TEM countermeasures also include equipment
and
procedural countermeasures. Warning systems such as STCA can be
considered threat countermeasures, just as checklists and well-written
procedures provide the means for error avoidance and error detection.
3.3 In sum, the TEM model captures the dynamic activity that is ATC
planning and executing a traffic control in real time and under real
conditions. The utility of the model is that it can be applied proactively or
reactively, at the individual, organizational, and/or systemic levels.
4. Practical Applications of the TEM model
4.1 TEM as a training tool
planning, and
monitor/cross-checking, but they also include higher-order concepts such
as leadership and establishing
open communication during the shift. Similarly, TEM
includes controllers
countermeasures, but it also encompasses equipment, procedural and
regulatory countermeasures.
4.2 TEM as a reporting tool for incidents
4.3 TEM as a systematic observation tool
4.4 TEM as a reactive analysis tool for accidents and
incidents
serious incidents based on its
ease of use and utility of the extracted data.
4.5 TEM as a proactive analysis tool
When TEM is used as the framework for safety data collection, a wealth
of information
can be extracted. An ATS service provider can use the data to
understand patterns at the organizational level. The data can also be collected
across the industry and analyzed for systemic trends. An analysis based on TEM
can:
the efficiency or safety
of the operation (threat prevalence);
management);
and outcome (error
management);
APPENDIX B: TRAINING AND STANDARDIZING NOSS OBSERVERS
This appendix details the training and standardizing of NOSS observers.
Some of this material appears throughout the advisory circular; this appendix
draws that information
together and provides more in-depth information.
OBSERVER TRAINING
Observer training typically requires two to three days of classroom
training, with a
follow-up session after one or two line observations. There are five
topics that need to be
covered in Observer Training:
1. NOSS rationale and etiquette
2. Company policies and procedures
3. Observation form
4. Threat and Error Management concepts
5. Narratives
1. NOSS rationale and etiquette
1.1 Observers will likely have a rudimentary understanding of NOSS when
selected for the project; however, they will need to:
·
Fully understand the
safety rationale for conducting a NOSS at their ATS operation unit. A “big
picture” perspective will help observers understand the “why” of NOSS and will
underscore the importance of their role in the NOSS process.
·
Also, the observers will
be ambassadors for NOSS while observing on the line shift and it is important
that they be able to explain the process fully, to answer any questions that
the line pilots may have, and allay any fears or concerns.
understand the safety rationale for
normal operations monitoring—a discussion of
proactive vs. reactive safety
strategies is recommended.
·
know how the data
collected from the NOSS will be used to
·
Understand strengths and
weaknesses in the operations. An overview of the whole process from
observations to data cleaning and analysis, to the diagnostic report and the
development of targets for enhancement is recommended.
·
Know the “how” of NOSS,
specifically the etiquette associated with being a NOSS observer.
·
Learn how to approach a
operational controllers, how to ask permission to observe a traffic control,
how to walk away so that the controllers can discuss it, and to accept without
question any operational shift’s decision to deny access to the control room.
·
The observer should also
carry a copy of the letter of endorsement jointly signed by management.
·
Be unobtrusive, yet
responsive to any queries the controllers may have.
1.2 The NOSS observers should be trained to accept their role as
observers, not evaluators—they
are not Check controllers.
controller's identities. It is
essential therefore, that observers are reminded throughout the
training of their responsibilities
in this regard. Confidentiality is paramount and observed
controllers behavior should
not be discussed with anyone—not even other observers.
"debrief" their performance. In
these circumstances, it is essential that the observer
politely decline the invitation.
This emphasizes the concept that the observer is not there
to evaluate the controllers, merely
to record events.
2. Company policies and procedures
Observers need to be current with company policies and procedures so as
to observe procedural adherence on the line and detect any deviations. All
observers should also be encouraged to review the manuals as homework.
3. Observation form
This sub-section refers to the mechanics of correctly completing and
submitting a NOSS observation form. During the training, the observers work to
develop the needed competencies as defined by the observation form. Hence,
observers should see the observation form as soon as possible after the
training begins so that they have a clear sense of what is expected of them.
4. Threat and Error Management concepts
are not Check controllers NOSS
observers will observe errors and undesired states
as part of their observations;
however, they should only interrupt and take an active role
if they perceive the safety of the
controlled traffic to be seriously and immediately
endangered.
controller's identities. It is
essential therefore, that observers are reminded throughout the
training of their responsibilities
in this regard.
have a similarly positive experience
of NOSS, which in turn will favorably affect their
receptivity to the final results and
outcomes.
5. Narratives
6. Training Objectives
In sum, at the end of NOSS observer training, an observer should be
able to:
1. Knowledgeably and confidently explain the rationale and process for
conducting a NOSS at the shift operation
2. Enact the NOSS observer etiquette in a professional and consistent
manner
3. Demonstrate knowledge of company policies and procedures
4. Use the observation form accurately and comprehensively
5. Understand the theoretical framework of the observation form. If the
tool is based on Threat and Error Management concepts, the observer should be
able to define, distinguish, and identify threats, errors, and undesired
states.
6. Write
detailed and comprehensive shift operation narratives from which others will be
able
to understand the full context of the shift operation and related
events.
7. OBSERVER STANDARDIZATION
Standardization refers to the need to be sure that shift operation
details are recorded in a systematic and consistent fashion. In NOSS,
standardization is a multi-step process that involves standardizing the
observers, and conducting follow-up data-cleaning and coding of completed
observations:
8. Data standardization
8.1 There are several supplementary techniques that ensure good-quality
standardized data are used in a NOSS:
·
First, observers are not
asked to evaluate performance, but simply to observe it. From a data
standpoint, this is the distinction between subjective judgment and objective
observation. For example, observers are asked to note threats without any
subjective judgment—if there is a thunderstorm, record it; if there is a system
malfunction or maintenance problem, record it. It is the same for errors and
undesired states.
Observers also note the controller’s response to the
threats, errors, and undesired states and the outcome. The observer is not
assessing controller's performance or providing a subjective evaluation—the
observer is telling the story of the shift operation.
8.2 There are several methods that ensure that NOSS data are
consistently and accurately recorded:
• Observers are trained, calibrated, tested, and recalibrated;
• Objective observation, not subjective evaluation, is the basis and
outcome of the observation;
• The narrative is stressed as key to high-quality data;
• The data analyst applies consistent coding to the observations;
• The data verification group checks the analyst’s coding against
specific procedures
8.3 Following the above steps will ensure reliability and validity of
the data analyzed from
NOSS observations. Steering committee, but not any of the observers).
The group’s task is to review and verify the observations against current
manuals, policies, and procedures.
The data verification
group acts as a check on the analyst’s coding, ensuring events are correctly
recorded in line with each shift operation procedures and policies. It also
builds ownership in the results and dispels any later criticism that the coding
was not accurate.