Safety Risk Profile
for airlines.

See the highlighted block above the contents list. The rest of this article walks through the SRP definition, the limits of static registers, and the cross-module update model.

A Safety Risk Profile (SRP) is the live operational risk picture an airline reads on top of its Safety Management System. ICAO Annex 19 describes Safety Risk Management as a continuous activity covering hazard identification, risk analysis and control implementation; the SRP is the artefact through which the operator demonstrates that continuity to the accountable manager, the safety review board and the regulator.

The SRP holds, for each hazard the operator has identified:

• The current risk state— composite of severity, likelihood and barrier effectiveness.
• The bowtie barrier healthfor the hazard's top events — effective, partially effective, degraded, failed.
• The SPI statefor the top events — counter value, threshold status, trend direction.
• The open CAPA targeting the hazard, with due dates and effectiveness verification status.
• The recent occurrenceslinked to the hazard — last 90 days, by default.
• The audit findings against the procedures backing the bowtie barriers.

Rendered as one view, this is the oversight picture. Rendered as five exports, this is a project to assemble before every safety review board.

The traditional risk register is a spreadsheet (or a module that behaves like one): a list of hazards with severity, likelihood, risk score and a column for “controls”. It is refreshed at the annual SMS review, sometimes quarterly. It fails as an oversight tool for three structural reasons.

Drift between reviews.The register reflects last quarter's judgement, not this week's operational evidence. A barrier that has degraded in the last six weeks is still rated “effective” in the register because the next review is two weeks away.

Disconnection from records.The risk score is asserted by the workshop participants, not derived from the underlying records. A hazard with three recent occurrences, two open audit findings and a degraded barrier may still show as “moderate” because that was the workshop view. The records contradict the register; the register wins.

Document instead of picture.The register gives the accountable manager 80 lines of structured text. The accountable manager reads it once, decides it's broadly fine, and moves on. A picture — barrier health by hazard, SPI counters with thresholds, open CAPA burndown — supports a faster, more informed decision.

The fix is not a better spreadsheet. The fix is connecting the register to the underlying records so the risk state is derived, not asserted.

A live SRP works by propagation across one operational graph. Each artefact changes the SRP in a structural way.

Occurrence → hazard.A classified occurrence is linked to one or more hazards. The link increments the hazard's recent occurrence count and feeds the bowtie analysis for the top events.

Occurrence → barrier.The classification identifies the bowtie barriers the occurrence bypassed or failed. Each affected barrier's effectiveness drops by one band (effective → partially effective, partially effective → degraded, etc.).

Audit finding → barrier. A finding against the procedure backing a preventive barrier degrades the barrier until the corrective action verifies effectiveness.

Training expiry → barrier. Expired barrier-relevant training degrades the behavioural barrier until renewal.

Barrier → SPI. The composite barrier effectiveness for a top event feeds the SPI that tracks it. The SPI counter and its trend reflect the underlying barrier health.

SPI threshold → SRP alert.When an SPI crosses its alert threshold, the hazard's SRP entry flags the breach. The safety review board sees the breach automatically.

CAPA closure → restoration.When a CAPA closes with effectiveness verification signed, the relevant barrier's effectiveness restores. The SPI counter recovers. The SRP entry refreshes.

The propagation is the difference between an SRP that updates in near real-time and an SRP that updates at the next workshop.

The Safety Risk Profile is how the accountable manager exercises oversight. ICAO Annex 19 names the accountable manager as the person ultimately responsible for the operation's safety performance; the SRP is the artefact through which that responsibility is exercised.

Cadence. Read weekly by the accountable manager. Read at every safety review board. Read by the safety manager daily where new occurrences land. Read by the board of directors quarterly as part of enterprise risk oversight.

Read pattern.Scan the top-N hazards by current risk state. Drill into hazards where the risk state has changed since last read. Walk the changes — which barrier degraded, which SPI breached, which CAPA opened. Confirm corrective action is in motion or assign new owners.

Board-of-directors view. A board-level SRP is the safety picture the board reads quarterly. It contains the operational picture the accountable manager reads weekly, summarised at a level the board can act on. Same data; different rendering.

Regulator view.The regulator three years later reads the SRP at a historical date to test whether the operator's oversight was meaningful at the time. The SRP is the auditable trail of executive attention.

eAviora is the AI-native aviation safety intelligence platform designed around live Safety Risk Profiles on one operational graph. The SRP is rendered from the underlying records — occurrences, hazards, barriers, SPIs, CAPA and audit findings — in near real-time.

Relevant surfaces:

• SMS module— hazard register, risk matrix, bowtie analysis, occurrence reporting.
• Safety analytics— live SPI library, trend dashboards, Safety Risk Profile.
• CAPA / Actions module— effectiveness verification gate that restores barrier effectiveness on closure.
• Compliance module— audit findings flowing into barrier effectiveness.

See the Buyer's Guide for the full evaluation framework, or contact us to discuss your SRP.