As of: 07 Apr 051 Using MIL-STD-882D: Approach for Identification and Elimination of Environmental Hazards or Reduction of Risks Associated with Environmental Hazards 2005 Joint Services Environmental Management Conference S.G. Forbes, SAF/AQRE Paige V. Ripani, Booz Allen Hamilton Karen Gill, Booz Allen Hamilton

As of: 07 Apr 052 Overview DoD System Safety in Systems Engineering (SSSE) Policies & Guidance MIL-STD-882D for Identification and Elimination of Environmental Hazards or Reduction of Environmental Risks Environmental Management (EM) and MIL-STD-882D Similarities

As of: 07 Apr 053 DoD SSSE Policies & Guidance Basic Policy: Integrate environment, safety, and occupational health (ESOH) considerations into the Systems Engineering process Use MIL-STD-882D, Standard Practice for System Safety, to accomplish this Rationale: Influence daily design trade study decision making Identify and eliminate ESOH hazards or reduce the risks as early as possible in the design/development process Approach ESOH from perspective of Acquisition programs -- risk management versus compliance

As of: 07 Apr 054 DoD SSSE Policies & Guidance Policy Documents: 12 May 03 DoD Instruction , "Operation of the Defense Acquisition System" 23 Sep 04 USD (Acquisition, Technology, and Logistics) policy memo to the Service Secretaries, "Defense Acquisition System Safety" Revision to DoDI incorporating 23 Sep 04 memo Guidance Documents: Oct 04 DoD Acquisition Guidebook Apr 05 Defense Acquisition University (DAU) Course, System Safety in Systems Engineering

As of: 07 Apr 055 DoD SSSE Policies & Guidance Key Guidance: Eliminate ESOH hazards or mitigate hazards to reduce ESOH risks -- the EM Pollution Prevention approach Manage ESOH, mission, or programmatic risks associated with Routine Operation & Maintenance of the system System failures ESOH compliance requirements Accept risks at designated management authorities Provide supplemental HAZMAT information Link MIL-STD-882D ESOH risk management and NEPA/EO analyses

As of: 07 Apr 056 Overview DoD System Safety in Systems Engineering (SSSE) Policies & Guidance MIL-STD-882D for Identification and Elimination of Environmental Hazards or Reduction of Environmental Risks Environmental Management (EM) and MIL-STD-882D Similarities

As of: 07 Apr 057 MIL-STD-882D Foreword: “This standard practice addresses an approach...useful in the management of environmental, safety, and health mishap risks….” Definitions: “Hazard. Any real or potential condition that can cause injury, illness, or death to personnel; damage to or loss of a system, equipment or property; or damage to the environment.”

As of: 07 Apr 058 MIL-STD-882D Section A.4.1.1: “System safety in environmental and health hazard management. While environmental and health hazard management are normally associated with the application of statutory direction and requirements, the management of mishap risk associated with actual environmental and health hazards is directly addressed by the system safety approach. Therefore, environmental and health hazards can be analyzed and managed with the same tools as any other hazard.”

As of: 07 Apr 059 MIL-STD-882D Eight mandatory steps: 1. Document the System Safety approach 2. Identify ESOH hazards 3. Assess risks associated with ESOH hazards 4. Identify risk mitigation measures 5. Reduce risk to an acceptable level 6. Verify risk reduction 7. Accept residual risk by appropriate authority 8. Track hazards throughout life cycle Step 1 reoccurs as necessary Steps occur repeatedly throughout life cycle

As of: 07 Apr 0510 MIL-STD-882D MIL-STD-882D Step 3 -- Assessing risk Assess severity of the consequences that might be caused by a specific hazard Assign a severity category based on MIL-STD-882D Determine the likelihood (probability) of the hazard resulting in the consequences Assign a probability level based on MIL-STD-882D Assign a risk value using the MIL-STD-882D Risk Assessment Matrix Assign a risk category based on the risk value Identify risk acceptance authority based on the risk category

As of: 07 Apr 0511 MIL-STD-882D & DoDI PROBABILITY LEVELS SEVERITY CATEGORIES I CATASTROPHIC II CRITICAL III MARGINAL IV NEGLIGIBLE (A) Frequent13713 (B) Probable25916 (C) Occasional (D) Remote (E) Improbable Risk Assessment and Risk Acceptance MIL-STD-882D & DoDI , E7 HIGH(CAE) LOW (PM) SERIOUS (PEO) MEDIUM (PM)

As of: 07 Apr 0512 MIL-STD-882D DescriptionCategoryEnvironmental, Safety, and Health Result Criteria CatastrophicI Could result in death, permanent total disability, loss exceeding $1M, or irreversible severe environmental damage that violates law or regulation. CriticalII Could result in permanent partial disability, injuries or occupational illness that may result in hospitalization of at least three personnel, loss exceeding $200K but less than $1M, or reversible environmental damage causing a violation of law or regulation. MarginalIII Could result in injury or occupational illness resulting in one or more lost work days(s), loss exceeding $10K but less than $200K, or mitigatible environmental damage without violation of law or regulation where restoration activities can be accomplished. NegligibleIV Could result in injury or illness not resulting in a lost work day, loss exceeding $2K but less than $10K, or minimal environmental damage not violating law or regulation. Hazard Severity Categories

As of: 07 Apr 0513 MIL-STD-882D DescriptionLevelSpecific Individual ItemFleet or Inventory FrequentA Likely to occur often in the life of an item, with a probability of occurrence greater than in that life. Continuously experienced. ProbableB Will occur several times in the life of an item, with a probability of occurrence less than but greater than in that life. Will occur frequently. OccasionalC Likely to occur some time in the life of an item, with a probability of occurrence less than but greater than in that life. Will occur several times. RemoteD Unlikely but possible to occur in the life of an item, with a probability of occurrence less than but greater than in that life. Unlikely, but can reasonably be expected to occur. ImprobableE So unlikely, it can be assumed occurrence may not be experienced, with a probability of occurrence less than in that life. Unlikely to occur, but possible. Hazard Probability Levels

As of: 07 Apr 0514 MIL-STD-882D Hazard Hazardous Effects Causal Factors IRIRVIRCRisk MitigationFRFRVFRCStatus Spillage of hydrazine while refilling the F-16 EPU Uncontrolled release of carcinogen; violation of toxic material spill limits; ground water contamination; exposure of personnel to carcinogen; loss of aircraft until clean up completed Refilling equipment cumbersome and heavy; maintenance personnel in awkward position where cannot easily ensure connections tight and cannot quickly detect leakage IIC6SeriousProgram Office redesigned the refilling equipment to reduce potential for leakage; integrated hydrazine vapor detector into refilling equipment linked to cut off valves that automatically stop flow of hydrazine if vapors detected; provided new design work platform so maintenance personnel in more secure and comfortable work position IIIE17MediumClosed; PM accepted the Medium Risk Level IR – Initial RiskFR – Final Risk IRV – Initial Risk ValueFRV – Final Risk Value IRC – Initial Risk Category FRV – Final Risk Category SAMPLE HAZARD ANALYSIS WORKSHEET

As of: 07 Apr 0515 MIL-STD-882D PROBABILITY LEVEL (E) Improbable SEVERITY CATEGORY I CATASTROPHIC II CRITICAL III MARGINAL IV NEGLIGIBLE (A) Frequent (C) Occasional (B) Probable Medium Risk Low Risk Initial Risk Residual Risk High Risk Serious Risk Hazard Eliminated Procedures & Warnings Design Changes (D) Remote

As of: 07 Apr 0516 Overview DoD System Safety in Systems Engineering (SSSE) Policies & Guidance MIL-STD-882D for Identification and Elimination of Environmental Hazards or Reduction of Environmental Risks Environmental Management (EM) and MIL-STD-882D Similarities

As of: 07 Apr 0517 EM & MIL-STD-882D Similarities Environmental risk management outside Acquisition Systems Engineering process Clean Air Act requires Risk Management Plans for extremely toxic materials Restoration site risk assessments set cleanup limits US EPA uses risk assessments in setting standards National Environmental Policy Act (NEPA) employs risk management methodology that parallels MIL-STD-882D

As of: 07 Apr 0518 Parallel MIL-STD-882D Steps 2.Identify potential environmental hazards 3.Assess hazard severity and probability (risk) 4.Recommend possible mitigation measures 5.Decide whether to implement mitigation measures 7.Formally accept residual risk at appropriate level 8.Track hazards throughout life cycle NEPA Analysis Identify potential environmental impacts Assess significance of potential impacts Identify means to mitigate and/or monitor impacts Decide whether to implement mitigation measures Formally document the decision Implement mitigation and/or monitoring decisions EM & MIL-STD-882D Similarities

As of: 07 Apr 0519 Summary DoD System Safety in Systems Engineering (SSSE) Policies & Guidance MIL-STD-882D for Identification and Elimination of Environmental Hazards or Reduction of Environmental Risks Environmental Management (EM) and MIL-STD-882D Similarities

As of: 07 Apr 0520 BACK UP CHARTS

As of: 07 Apr 0521 MIL-STD-882D Mishap severity Catastrophic = Could result in death, permanent total disability, loss exceeding $1M, or irreversible severe environmental damage that violates law or regulation. Critical = Could result in permanent partial disability, injuries or occupational illness that may result in hospitalization of at least three personnel, loss exceeding $200K but less than $1M, or reversible environmental damage causing a violation of law or regulation.

As of: 07 Apr 0522 MIL-STD-882D Mishap severity cont’d Marginal = Could result in injury or occupational illness resulting in one or more lost work days(s), loss exceeding $10K but less than $200K, or mitigatible environmental damage without violation of law or regulation where restoration activities can be accomplished Negligible = Could result in injury or illness not resulting in a lost work day, loss exceeding $2K but less than $10K, or minimal environmental damage not violating law or regulation.