EAC0014

 

Normal operation safety survey

 

NOSS

 

 

EAC 0014

Revision Page

 

Item

Rev. No.

Rev. Date

Date of Updating

Signature

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

EAC 0014

List of Effective Pages

 

Item

Title

Pages

Dated

EAC 0014

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

EAC 0014

TABLE of CONTENTS

 

 

ITEM

TITLE

1

NOSS – What is it?

2.

Purpose:

 

3.

Applicability

 

4.

NOSS Operating Characteristics

 

5.

WHEN TO CONDUCT A NOSS

 

6.

HOW TO IMPLEMENT A NOSS

 

7.

HOW TO USE NOSS DATA

 

APPENDIX A

 THREAT AND ERROR MANAGEMENT

 

 

APPENDIX B

 TRAINING AND STANDARDIZING NOSS OBSERVERS

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1. NOSS – What is it?

          Safety Management Tool based on threat -error managementTEM

          Captures operational context data during everyday, routine operations

          Provides a TEM profile of the organisation

 

 

2. Purpose:

  1. A NOSS application will provide a data collection and analysis tool, supplying the safety management system with reliable and valid information on the occurrence of threats, errors and undesired states and their management in normal everyday operations

 

  1. NOSS differs from other tools of this type in that it is not merely another error capture tool, rather it aims to complement these by capturing information on the internal and external threats to the safety and integrity of the system, including how these are managed by the system processes/procedures and practices; this can include good as well as poor performance

 

  1. A NOSS application might ultimately provide a status report that can be used as a diagnostic tool, measuring system performance against established standards and thereby providing guidance in the continuous effort to maintain the desired level of safety in the ATM system.

 

3. Applicability

Monitoring of air traffic services (ATS) operations. The process involves collecting safety-related data from normal operations to identify safety threats that might not otherwise come to the attention of safety managers.NOSS would be based on a human factors tool known as the threat and error management (TEM) model.

NOSS would entail over-the-shoulder observations during normal shifts and would not be allowed in any training situations.

 

 4. NOSS Operating Characteristics

 

a)      Over-the-shoulder observations during normal shifts (i.e. not in OJT situations)

NOSS observations are limited to regularly scheduled operations. Shift checks, initial shift indoctrination or other ojt training are off-limits due to the extra level of stress put on pilots during this type of situation. Having another observer on duty adds to an already high stress level, thus providing an unrealistic picture of performance. In order for the data to be representative of normal operations, NOSS observations must be collected on regular and routine operational shifts.

 

b)      Joint management/controller association sponsorship

 

 

 

 

c)      Voluntary participation

·         Maintaining the integrity of NOSS within an ATS units and the aviation industry as whole is extremely important for long-term success. To accomplish this goal, all NOSS observations are collected with voluntary controller's participation. Before conducting NOSS observations, observers must first ask the ATC operational shift for permission to be observed. If the crew declines, the observer takes another operational shift with no questions asked. If an ATS unit conducting a NOSS has an unreasonably high number of declines, this should serve as an indicator that there are critical “trust” issues to be resolved.

 

d)      De-identified, confidential, and non-disciplinary data collection

·         NOSS observers are required not to record names, dates, or any other information that can identify an operational shift or individual. The purpose of NOSS is to collect safety data, not to punish controllers. ATC Units cannot allow themselves to squander a unique opportunity to gain insight into their operations by having controllers fearful that a NOSS observation could be used against them for disciplinary reasons. If a NOSS observation is ever used for disciplinary reasons, the credibility of the entire safety program may be irreparably compromised.

 

e)      Targeted observation instrument

·         The NOSS observation form is predicated on the TEM framework. At ATC operational shift’s own initiative (and risk), other conceptual frameworks can be used for NOSS data collection. Whatever framework is used, it must generate meaningful data on a variety of topics, including what the controllers did well, what they did poorly, and how they managed each task of ATC operation.

·         A narrative written by the observer should have sufficient detail to allow others to understand the ATC operational task and all its events. The observers need to describe the environmental conditions and events surrounding the controller’ behavior so that the controllers’ performance can be understood in full context.

 

f)       Trained and standardised observers

·         Primarily, controllers conduct NOSS. Observation teams will typically include line controllers, instructor controllers, safety controllers, management controllers s that are respected and trusted within the ATS UNITS to ensure line acceptance of NOSS. After observers are selected, they are trained and calibrated in the NOSS methodology, including the use of the NOSS observation form. Observers’ training in the concepts and methodology of NOSS will ensure that the observations will be conducted in the most standardized manner. (See Appendix B.)

 

g)      Trusted data collection sites

·         In order to maintain confidentiality, ATS units must have a trusted data repository. The goal is that no individual observations will be misplaced or improperly disseminated through the operational unit.

 

h)      Data cleaning process

·         Data-driven programs like NOSS require quality data management procedures and consistency checks. For NOSS, these checks are done at data-verification roundtables. A roundtable consists of three or four department who review all the raw data for possible inaccuracies.

·         The end product is a database that is validated for consistency and accuracy according to the ATS unit’s standards and manuals, before any statistical analysis is performed.Targets for safety enhancement

 

 

i)         Targets for safety enhancement

·         The final product of a NOSS is the data-derived targets for enhancement based on emergent patterns in the data. It is then up to the ATS service provider to develop an action plan based on these targets, using experts from within the airline to analyze the targets and implement appropriate change strategies.

 

j)        10. Feedback results to the controllers

·         In order to ensure long-term success of NOSS, ATS service provider must communicate the results back to the line controllers. Line Controllers will want to see not only the results of the audit, but also management’s plan for improvement.

 

 

 

 5. WHEN TO CONDUCT A NOSS

There are several factors to consider when scheduling a NOSS.Given all the personnel involved, a NOSS should be scheduled to fit with other operational priorities. For example,

 

 

 6. HOW TO IMPLEMENT A NOSS

There are steps associated with getting good-quality data from observers (Data Collection), and steps associated with ensuring that accurate and meaningful data are given to management and line pilots (Data Analysis & Feedback). An ATS service provider can conduct its own NOSS by observing the following steps.

 

6.1 DATA COLLECTION

6.1.1 Form a NOSS steering committee and appoint a NOSS coordinator (safety manager)

6.1.2 Gather information and NOSS resources from other ATS units

 

6.1.3. Publicize NOSS within the ATS units and send information letter to the line managers

 

6.1.4 Decide the focus of the NOSS

 

6.1.5 Decide the number of observations

 

6.1.6 Create an observation form

 

6.1.7 Select observers

 

6.1.8 Train observers

 

6.1.9 Schedule observations

 

6.1.10 Decide on a data repository

 

6.1.11 Provide logistical support

 

6.1.12 DATA ANALYSIS & FEEDBACK

6.1.12.1 Verify the data

 

6.1 .12.2 Analyze data

 

6.1 .12.3 Prepare report

 

6.1 .12.4 Brief management

.

6.1 .12.5 Brief line pilots

6.1.13 Monitor safety change process

6.1.13 .1 historically, organizational safety changes within ATS units have been driven by accident/incident investigation and intuition. Today, ATS units must deal proactively with accident and incident precursors. To be successful, the safety change process must be data-driven. Measurement of daily operations is fundamental.

unless an organization uses systematic measurement, the perspective it has on the strengths and weaknesses of its operations is largely based on anecdote and opinion.

6.1.13 .2 A NOSS provides specific and quantified results. To take full advantage of this specificity, the targets for enhancement that arise from the data analysis should go through a formal safety change process to produce improvement. A formal safety change process provides a principled approach to target limited resources and helps the ATS units avoid “turf” issues, by clearly defining and prioritizing the issues that impact ATS operations. The basic steps of a safety change process are:

�� Measurement (with NOSS) to obtain the targets;

�� Detailed analysis of targeted issues;

�� List of potential changes for improvement;

�� Risk analysis and prioritization of changes;

�� Selection and funding of changes;

�� Implementation of changes;

�� Time for changes to stabilize;

�� Re-measurement.

 

7. HOW TO USE NOSS DATA

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

APPENDIX A: THREAT AND ERROR MANAGEMENT

 

1. Introduction

 

 

 

2. Working Definitions

 The Model

This section defines and provides examples of the various components of the Threat and

Error Management (TEM) model.

 

Threats

A threat is defined as external factors that increase the operational complexity and that need to be managed during a normal shift

There are threats from the environment—adverse weather, airport conditions, terrain, traffic, interruptions, or errors maintenance. Threats may be anticipated by the ATCo, , or they may be unexpected, occurring suddenly and without warning such as system  malfunctions. Some threats are easily resolved and quickly dismissed from the controller’s workload, while other threats equire greater attention and management. A mismanaged threat is defined as a threat that is linked to or induces ATCo error.

 

Errors

ATC errors are defined as actions or inactions by controllers that lead to deviations from organisational or controller intentions or expectations. . Errors in the operational context tend to reduce the margin of safety and increase the probability of adverse events.there is:

          Proficiency - lack of knowledge or skills

          Inability to select appropriate functions in ATM system

          Operational decision - decision that unnecessarily increases risk

          Accepting traffic without separation assurance

          Communication – failure to communicate, miscommunication or misinterpretation of pertinent information

          Misunderstanding a coordination (adjacent sector)

          Procedural – intention is correct, execution is flawed

          Applying less than specified Wake Turbulence separation

          Intentional non-compliance - deliberate deviation from regulations/SOPs

          Using non-standard altitudes/flight levels

 

Understanding how the error was managed is as important, if not more important, than

understanding the prevalence of different types of error. It is of interest then if and when

 

 

Undesired States

An undesired state is defined as operational conditions where errors by controllers put traffic in a situation of unnecessary risk

It is a safety-compromising state that results from ineffective error management.

 

3. Threat and Error Countermeasures

3.1 A description of an ATC shift is not complete without noting what the ATCo was doing to anticipate threats and avoid errors, as well as managing those that occurred. The following ATCo behaviors are considered threat and error countermeasures:

�� Planning countermeasures—planning, preparation, briefings, contingency management—is essential for managing anticipated and unexpected threats

�� Execution countermeasures—monitor/cross-check, display management, workload and automation management—are essential for error detection and error response

�� Review/Modify countermeasures—evaluation of plans, inquiry—are essential for

managing the changing conditions of a traffic situation

 

3.2 In addition to ATCo behaviors, TEM countermeasures also include equipment and

procedural countermeasures. Warning systems such as STCA can be considered threat countermeasures, just as checklists and well-written procedures provide the means for error avoidance and error detection.

3.3 In sum, the TEM model captures the dynamic activity that is ATC planning and executing a traffic control in real time and under real conditions. The utility of the model is that it can be applied proactively or reactively, at the individual, organizational, and/or systemic levels.

 

4. Practical Applications of the TEM model

4.1 TEM as a training tool

       planning, and monitor/cross-checking, but they also include higher-order concepts such

       as leadership and establishing open communication during the shift. Similarly, TEM

       includes controllers countermeasures, but it also encompasses equipment, procedural and

       regulatory countermeasures.

 

4.2 TEM as a reporting tool for incidents

 

4.3 TEM as a systematic observation tool

 

4.4 TEM as a reactive analysis tool for accidents and incidents

       serious incidents based on its ease of use and utility of the extracted data.

 

4.5 TEM as a proactive analysis tool

When TEM is used as the framework for safety data collection, a wealth of information

can be extracted. An ATS service provider can use the data to understand patterns at the organizational level. The data can also be collected across the industry and analyzed for systemic trends. An analysis based on TEM can:

        the efficiency or safety of the operation (threat prevalence);

       management);

       and outcome (error management);

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

APPENDIX B: TRAINING AND STANDARDIZING NOSS OBSERVERS

 

This appendix details the training and standardizing of NOSS observers. Some of this material appears throughout the advisory circular; this appendix draws that information

together and provides more in-depth information.

 

OBSERVER TRAINING

Observer training typically requires two to three days of classroom training, with a

follow-up session after one or two line observations. There are five topics that need to be

covered in Observer Training:

1. NOSS rationale and etiquette

2. Company policies and procedures

3. Observation form

4. Threat and Error Management concepts

5. Narratives

 

1. NOSS rationale and etiquette

1.1 Observers will likely have a rudimentary understanding of NOSS when selected for the project; however, they will need to:

·         Fully understand the safety rationale for conducting a NOSS at their ATS operation unit. A “big picture” perspective will help observers understand the “why” of NOSS and will underscore the importance of their role in the NOSS process.

·         Also, the observers will be ambassadors for NOSS while observing on the line shift and it is important that they be able to explain the process fully, to answer any questions that the line pilots may have, and allay any fears or concerns.

      understand the safety rationale for normal operations monitoring—a discussion of

      proactive vs. reactive safety strategies is recommended.

·         know how the data collected from the NOSS will be used to

·         Understand strengths and weaknesses in the operations. An overview of the whole process from observations to data cleaning and analysis, to the diagnostic report and the development of targets for enhancement is recommended.

·         Know the “how” of NOSS, specifically the etiquette associated with being a NOSS observer.

·         Learn how to approach a operational controllers, how to ask permission to observe a traffic control, how to walk away so that the controllers can discuss it, and to accept without question any operational shift’s decision to deny access to the control room.

·         The observer should also carry a copy of the letter of endorsement jointly signed by management.

·         Be unobtrusive, yet responsive to any queries the controllers may have.

 

1.2 The NOSS observers should be trained to accept their role as observers, not evaluators—they

are not Check controllers.

      controller's identities. It is essential therefore, that observers are reminded throughout the

      training of their responsibilities in this regard. Confidentiality is paramount and observed

       controllers behavior should not be discussed with anyone—not even other observers.

     "debrief" their performance. In these circumstances, it is essential that the observer

      politely decline the invitation. This emphasizes the concept that the observer is not there

      to evaluate the controllers, merely to record events.

 

2. Company policies and procedures

Observers need to be current with company policies and procedures so as to observe procedural adherence on the line and detect any deviations. All observers should also be encouraged to review the manuals as homework.

 

3. Observation form

This sub-section refers to the mechanics of correctly completing and submitting a NOSS observation form. During the training, the observers work to develop the needed competencies as defined by the observation form. Hence, observers should see the observation form as soon as possible after the training begins so that they have a clear sense of what is expected of them.

 

4. Threat and Error Management concepts

      are not Check controllers NOSS observers will observe errors and undesired states

      as part of their observations; however, they should only interrupt and take an active role

      if they perceive the safety of the controlled traffic to be seriously and immediately

     endangered.

      controller's identities. It is essential therefore, that observers are reminded throughout the

      training of their responsibilities in this regard.

      have a similarly positive experience of NOSS, which in turn will favorably affect their

      receptivity to the final results and outcomes.

 

 

5. Narratives

 

6. Training Objectives

In sum, at the end of NOSS observer training, an observer should be able to:

1. Knowledgeably and confidently explain the rationale and process for conducting a NOSS at the shift operation

2. Enact the NOSS observer etiquette in a professional and consistent manner

3. Demonstrate knowledge of company policies and procedures

4. Use the observation form accurately and comprehensively

5. Understand the theoretical framework of the observation form. If the tool is based on Threat and Error Management concepts, the observer should be able to define, distinguish, and identify threats, errors, and undesired states.

6. Write detailed and comprehensive shift operation narratives from which others will be able

to understand the full context of the shift operation and related events.

 

7. OBSERVER STANDARDIZATION

Standardization refers to the need to be sure that shift operation details are recorded in a systematic and consistent fashion. In NOSS, standardization is a multi-step process that involves standardizing the observers, and conducting follow-up data-cleaning and coding of completed observations:

 

8. Data standardization

8.1 There are several supplementary techniques that ensure good-quality standardized data are used in a NOSS:

·         First, observers are not asked to evaluate performance, but simply to observe it. From a data standpoint, this is the distinction between subjective judgment and objective observation. For example, observers are asked to note threats without any subjective judgment—if there is a thunderstorm, record it; if there is a system malfunction or maintenance problem, record it. It is the same for errors and undesired states.

Observers also note the controller’s response to the threats, errors, and undesired states and the outcome. The observer is not assessing controller's performance or providing a subjective evaluation—the observer is telling the story of the shift operation.

 

8.2 There are several methods that ensure that NOSS data are consistently and accurately recorded:

• Observers are trained, calibrated, tested, and recalibrated;

• Objective observation, not subjective evaluation, is the basis and outcome of the observation;

• The narrative is stressed as key to high-quality data;

• The data analyst applies consistent coding to the observations;

• The data verification group checks the analyst’s coding against specific procedures

 

8.3 Following the above steps will ensure reliability and validity of the data analyzed from

NOSS observations. Steering committee, but not any of the observers). The group’s task is to review and verify the observations against current manuals, policies, and procedures.

 The data verification group acts as a check on the analyst’s coding, ensuring events are correctly recorded in line with each shift operation procedures and policies. It also builds ownership in the results and dispels any later criticism that the coding was not accurate.