曝光台 注意防骗
网曝天猫店富美金盛家居专营店坑蒙拐骗欺诈消费者
and FMEAs.
Identification of energy sources and energy transfer processes is the key element in the energy source
analysis procedure. Once sources of energy have been identified, the analyst eliminates or controls the
hazard using the system safety precedence described in Chapter 3, Table 3-1.
These analyses point out potential unwanted conditions that could conceivably happen. Each condition is
evaluated further to assess its hazard potential. The analysis and control procedures discussed throughout
this handbook are applied to the identified hazards.
Fourteen energy trace analysis procedural steps are:
1. Identify the resource being protected (personnel or equipment) to guide the direction of the analysis
toward the identification of only those conditions (i.e., hazards) that would be critical or
catastrophic from a mission viewpoint.
2. Identify system and subsystems, and safety critical components.
FAA System Safety Handbook, Chapter 9: Analysis Techniques
December 30, 2000
9 - 11
3. Identify the operational phase(s), such as preflight, taxi, takeoff, cruise, landing, that each
system/subsystem/component will experience. It is often desirable to report results of hazard
analyses for each separate operational phase.
4. Identify the operating states for the subsystems/components (e.g., on/off, pressurized, hot, cooled)
during each operational phase.
5. Identify the energy sources or transfer modes that are associated with each subsystem and each
operating state. A list of general energy source types and energy transfer mechanisms is presented
in Figure 9-4.
6. Identify the energy release mechanism for each energy source (released or transferred in an
uncontrolled/unplanned manner). It is possible that a normal (i.e., as designed) energy release
could interact adversely with other components in a manner not previously or adequately
considered.
7. Review a generic threat checklist for each component and energy source or transfer mode.
Experience has shown that certain threats are associated with specific energy sources and
components.
8. Identify causal factors associated with each energy release mechanism. A hazard causal factor
may have subordinate or underlying causal factors associated with it. For instance, excessive
stress may be a "top level" factor. The excessive stress may, in turn, be caused by secondary
factors such as inadequate design, material flaws, poor quality welds, excessive loads due to
pressure or structural bending. By systematically evaluating such causal factors, an analyst may
identify potential design or operating deficiencies that could lead to hazardous conditions. Causal
factors are identified independent of the probability of occurrence of the factor; the main question
to be answered is: Can the causal factor occur or exist?
9. Identify the potential accident that could result from energy released by a particular release
mechanism.
10. Define the hazardous consequences that could result given the accident specified in the previous
step.
11. Evaluate the hazard category (i.e., critical, catastrophic, or other) associated with the potential
accident.
12. Identify the specific hazard associated with the component and the energy source or transfer mode
relative to the resource being protected.
13. Recommend actions to control the hazardous conditions.
14. Specify verification procedures to assure that the controls have been implemented adequately.
FAA System Safety Handbook, Chapter 9: Analysis Techniques
December 30, 2000
9 - 12
Figure 9-4: Energy Sources and Transfer Modes
There are some risk/hazard control methodologies that lend themselves to an energy source hazard analysis
approach. These include the following strategies:
Prevent the accumulation by setting limits on
noise, temperature, pressure, speed, voltage,
loads, quantities of chemicals, amount of
light, storage of combustibles, height of
ladders
Prevent the release through engineering
design, containment vessels, gas venting,
insulation, safety belts, lockouts
Modify the release of energy by using shock
absorbers, safety valves, rupture discs,
blowout panels, less incline on the ramps
Separate assets from energy (in either time or
space) by moving people away from hot
engines, limiting the exposure time, picking
up with thermal or electrically insulted gloves.
Provide blocking or attenuation barriers, such
as eye protection, gloves, respiratory
protection, sound absorption, ear protectors,
welding shields, fire doors, sunglasses, and
machine guards. Raise the damage or injury
threshold by improving the design (strength,
中国航空网 www.aero.cn
航空翻译 www.aviation.cn
本文链接地址：
System Safety Handbook系统安全手册下(50)
