1. Exmouth House 3–11 Pine Street London EC1R 0JH T +44 20 7832 5850 F +44 20 7832 5853 E office@adelard.com W www.adelard.com ASCE – Railway Hazard Log Technical summary Luke Emmet

2. © ADELARD 2013 Overview Background to Hazard Log Requirement Summary of requirements Design approach Main features Extending further

3. © ADELARD 2013 Background – Hazard logs Hazard Logs - an established risk management tool Key aspects Hazards, Accidents, Causes, Controls Risk aggregation Management to closure Different flavours and commercial tools available But: –May not be tailored to your domain –Is the conceptual model is right for you? –You can accept any imposed process Alternative – design your own –Needs implementation

4. © ADELARD 2013 TFL Hazard log concept TFL have developed their own hazard log based on Railway practice A specific conceptual model for Railway domain To reflect managed upgrade of live infrastructure A common set of elements in different states for different System Configurations (SCs) Core hazards to be consistently considered To allow for incremental approval over lifecycle phases and geographical areas A graphical approach to model the causal chain Somewhat similar to “Bow tie” analysis

5. © ADELARD 2013 Summary of requirements Data model as per specification Graphical modelling of Core hazards, Causes, Consequences, Protection Measures and Actions Filtering and editing by SC Traffic lights and Calculate Status Check for anomalies Use MS Excel to manage other data System Configuration definition Citations of evidence, domain elements, actionees etc. Reporting to MS Word Automatic change log

6. © ADELARD 2013 Design approach A custom schema and plugin Both work together to implement the requirement Schema – Railways Hazard Log 0.5 Defines visual appearance Traffic lights and decorators Implements customer terminology Plugin – System Config Hazard Log Plugin Adds extra menus into ASCE Provides popup windows –Filter, Editor, Reporter, LogEntry Builds on standard ASCE behaviour Some extensions to ASCE itself Part of ASCE 4.2 release

7. © ADELARD 2013 Schema – visual design Draw nodes and links in the normal way Hazard at the centre Consequences flowing from Causes flowing into Protection measures and actions linked Link direction is significant Traffic lights show status

8. © ADELARD 2013 Schema – multiple SCs Nodes Each node shows the details of the element in a particular SC Links Each link shows the connectivity in a specific SC Can filter the network for different SCs When creating nodes and links they are added to the active SC Active SC – displayed red –for authoring/analysis and reporting Secondary SC – displayed grey –for comparison –can link in existing elements

9. © ADELARD 2013 Graphical filtering The view can be filtered Show Filter menu Shows the Filter tool window –Can leave open if needed Filters by chosen SC Then by Hazard Status Then by Actionee All elements can be shown via inbuilt ASCE function Show all nodes and links

10. © ADELARD 2013 Node custom editor – attributes tab To change properties of the node in its displayed SC To add/remove linked objects A floating tool window – you can leave it open As you click on other objects it will show them Node is updated immediately as you change its data Can also use in-built ASCE properties editor

11. © ADELARD 2013 Node custom editor – linked objects tab To add/remove linked objects Sources, Documents QRA model elements, System Elements, System Interfaces To add/remove implementation managers for actions Lists items defined in project spreadsheet

12. © ADELARD 2013 Calculated status/Status A calculated field Based on status of linked actions Other algorithms possible Status User editable field Depicts an engineering judgement Other traffic lights possible SFARP Risk level

13. © ADELARD 2013 Check for anomalies ASCE is a fairly free-form editor, designed not to get in your way When ready you can check the structure and embedded links –Similar approach implemented in the hazard log Check for anomalies menu function To identify structural problems to be rectified Rules implemented include: No more than 3 levels of causes feeding into a hazard Restrictions cannot be linked to implemented Protection Measures …

14. © ADELARD 2013 Export report Create a report to MS Word of the current hazard log in some SC Various report types defined Can be extended

15. © ADELARD 2013 Change Log A simple change log is implemented To support audit/review Records a log of changes

16. © ADELARD 2013 Non graphical data held in Excel Project files live with each ASCE file Defines SC details Specify linked objects, actionees and domain elements Benefits of using Excel Prevents visual clutter Provides a familiar editing experience for tabular data

17. © ADELARD 2013 Demo Demo….