SAM Toolkit
The EUROCONTROL Safety Assessment Methodology (SAM) is a framework, a toolbox containing methods and techniques to carry out safety assessment of changes to the functional systems of the Air Navigation Service Providers (ANSP). It was developed in the noughties of the 21st century as means of compliance to ESSAR 4.
The objective of the methodology is to support the provision of assurance of the safety of the Air Traffic Services (ATS) provided by an ANSP. It covers the entire system/change life cycle: specification, design, implementation, integration, transfer into operation and operation and maintenance. The assessment process includes Functional Hazard Assessment (FHA), Preliminary System Safety Assessment (PSSA) and a System Safety Assessment (SSA).
SAM is organised in three levels: level 1 explains the "what", level 2 provides details on "how" to perform a safety assessment and level 3 provides real life examples from ANSPs and the industry.
Although there have been many changes in the regulatory framework in Europe and elsewhere, SAM is still relevant and can be used for risk assessment and mitigation purposes.
SAM Toolkit filters
SAM Level
SAM Step
Project Manager Profile
Project Safety Manager Profile
Safety Practitioner Profile
Showing below 9 results in range #1 to #9.
Level 2
PART IV
PART IV ANNEX H – Change determination process
PART IV ANNEX H – Change determination process
This annex proposes means to assess whether an event in the Air Navigation System can be considered as a change and to determine which type of safety assessment should be conducted depending on the nature of the event.
Level 3
FHA
FHA V2-0 APPENDIX E_V5 – Examples of derivation of safety targets for NAV application – methodology
FHA V2-0 APPENDIX E_V5 – Examples of derivation of safety targets for NAV application – methodology
This document proposes a method for developing TLSs for a full matrix of accident categories and flight phases for navigation application purposes. If a NAV project/application wants to concentrate on ATM specific causes of risk, a method for further partitioning these TLSs is proposed.
PART IV
PART IV ANNEX A1 – What is a change: AVINOR example part 1
PART IV ANNEX A1 – What is a change: AVINOR example part 1
AVINOR's key aim is to carry out risk analyses of change and to ensure that all risks associated with change in a system or specific task, activity or operation are identified and assessed with a view to their significance for air safety.
PART IV ANNEX A2 – What is a change: AVINOR example part 2
PART IV ANNEX A2 – What is a change: AVINOR example part 2
AVINOR’s approach is to ensure that all changes which have a bearing on air safety are assessed in a comprehensive and structured manner to take account of any impact on safety levels.
PART IV ANNEX A3 – What is a change: Czech ANS example
PART IV ANNEX A3 – What is a change: Czech ANS example
Czech ANS approach to describe the issues of safety cases and to prevent impractical assessments of changes that only have a minor or negligible significance in terms of the safety of the provided ATM services.
PART IV ANNEX A4 – What is a change - Swedish ANS process
PART IV ANNEX A4 – What is a change - Swedish ANS process
The guidelines of this document define the procedure that should be followed for modifications to systems that are already authorised for operation.
PART IV ANNEX A5 – What is a change - French DSNA example (EPIS-CA)
PART IV ANNEX A5 – What is a change - French DSNA example (EPIS-CA)
This guide sets out the procedure, developed by the French DSNA EPIS-CA WG, to be followed in the event of a change (as defined by ESARR 4) to an air traffic system and is therefore a tool of practical use for performing EPIS-CA.
PART IV ANNEX A6 – What is a change - French DSNA example presentation
PART IV ANNEX A6 – What is a change - French DSNA example presentation
This presentation illustrates the EPIS-CA procedure described in Appendix A5.
PART IV ANNEX B – Terminal airspace design
PART IV ANNEX B – Terminal airspace design
This appendix proposes an example of mapping between the Safety Assessment process steps (FHA, PSSA, and SSA) and the process for designing Terminal Airspace.
