SAM Toolkit
The EUROCONTROL Safety Assessment Methodology (SAM) is a framework, a toolbox containing methods and techniques to carry out safety assessment of changes to the functional systems of the Air Navigation Service Providers (ANSP). It was developed in the noughties of the 21st century as means of compliance to ESSAR 4.
The objective of the methodology is to support the provision of assurance of the safety of the Air Traffic Services (ATS) provided by an ANSP. It covers the entire system/change life cycle: specification, design, implementation, integration, transfer into operation and operation and maintenance. The assessment process includes Functional Hazard Assessment (FHA), Preliminary System Safety Assessment (PSSA) and a System Safety Assessment (SSA).
SAM is organised in three levels: level 1 explains the "what", level 2 provides details on "how" to perform a safety assessment and level 3 provides real life examples from ANSPs and the industry.
Although there have been many changes in the regulatory framework in Europe and elsewhere, SAM is still relevant and can be used for risk assessment and mitigation purposes.
SAM Toolkit filters
SAM Level
SAM Step
Project Manager Profile
Project Safety Manager Profile
Safety Practitioner Profile
Showing below 21 results in range #1 to #21.
Level 1
PART IV
PART IV V2-0 ANNEX H – “what is a change”
PART IV V2-0 ANNEX H – “what is a change”
This annex proposes means to assess whether a change in the Air Navigation System deserves a safety assessment or not.
Level 2
PART IV
PART IV V2-1 ANNEX A-B-C – Acronyms, Glossary, Initial Safety Palnning
PART IV V2-1 ANNEX A-B-C – Acronyms, Glossary, Initial Safety Palnning
This annex proposes Acronyms (Annex A), Glossary (Annex B) and Safety Planning ‘as a whole’ (i.e. including FHA, PSSA, SSA) Preliminary Guidance Material.
PART IV V2-0 ANNEX D – Safety Techniques Survey
PART IV V2-0 ANNEX D – Safety Techniques Survey
This annex provides guidance for practical and effective use of Safety Techniques and Methods to achieve some parts of SAM step. These Safety Techniques cover the overall SAM (FHA, PSSA and SSA) lifecycle.
PART IV V2-0 ANNEX D (REPORT) – Safety Techniques Survey - Report
PART IV V2-0 ANNEX D (REPORT) – Safety Techniques Survey - Report
This annex presents the main results of a survey conducted, aimed at collecting and evaluating techniques and methods that can be used to support the guidelines of the EATMP Safety Assessment Methodology.
PART IV V2-0 ANNEX D (TECHNICAL ANNEX) – Safety Techniques Survey - Technical Annex
PART IV V2-0 ANNEX D (TECHNICAL ANNEX) – Safety Techniques Survey - Technical Annex
This annex proposes the technical annex to the report presented in “Part IV Annex D (Core) – Summary of the Review of techniques to support EATMP Safety Assessment”.
PART IV V1-0 ANNEX E – Recommendations for ANS SW
This document is kept for information purpose only and has been replaced in 2009 by ED153PART IV V1-0 ANNEX E – Recommendations for ANS SW
This annex provides a reference against which stakeholders can assess their own practices for software specification, design, development, operation, maintenance and decommissioning as well as recommendations on the major processes required to provide assurance for software in Air Navigation Systems. This annex provides recommendations on the major processes required to provide the appropriate level of safety and quality assurance for software in Air Navigation Systems.
PART IV V3-0 ANNEX F – ANS Software Lifecycle
This document is kept for information purpose only and has been replaced in 2009 by ED153PART IV V3-0 ANNEX F – ANS Software Lifecycle
As a companion to Annex E, this annex defines a recommended SW lifecycle and identifies the objectives/activities/tasks required by each referred standards and describes their commonalities and differences.
PART IV V0-1 ANNEX G – Safety Assessment of ATM Procedures (SAAP)
PART IV V0-1 ANNEX G – Safety Assessment of ATM Procedures (SAAP)
This annex supplements the ANS Safety Assessment Methodology (SAM) by providing specific guidelines related to the performance of safety assessments of ATM procedures. The guidelines focus on PSSA step of the SAM and provide guidance to elaborating safety requirements and allocating the procedures assurance level (PAL).
PART IV V2-0 ANNEX G APPENDIX B – SAAP-Example
PART IV V2-0 ANNEX G APPENDIX B – SAAP-Example
This annex is part of SAAP and illustrates it with its application to Helsinki Vantaa Independent Parallel Approach procedure.
PART IV V2-0 ANNEX I CORE SCDM – Safety Case Development Manual
PART IV V2-0 ANNEX I CORE SCDM – Safety Case Development Manual
This annex provides explanations on different types of Safety Cases (Project Safety Case, Unit Safety Case and Preliminary Safety Case) and proposes a manual for their construction and development.
PART IV V1-0 ANNEX J CORE 1 – HAZOP & TRACEr
PART IV V1-0 ANNEX J CORE 1 – HAZOP & TRACEr
This annex gives an overview of an independent comparison of two human error analysis techniques – HAZOP and TRACEr-lite – for the three projects: Co-Space, Time-based Separation and CORA2. The report presents the high-level findings of the Co-space study and compares the performance of the techniques over all three applications.
PART IV V1-0 ANNEX J CORE 2 (ANNEX) – HAZOP & TRACEr-Example
PART IV V1-0 ANNEX J CORE 2 (ANNEX) – HAZOP & TRACEr-Example
An independent comparison of two human error analysis techniques – HAZOP and TRACEr-lite – was performed for the three projects: Co-Space, Time-based Separation and CORA2. The annex report presents the detailed analysis performed for each study.
PART IV V3-0 ANNEX K CORE – Fault Tree Analysis
PART IV V3-0 ANNEX K CORE – Fault Tree Analysis
This document provides guidance to apply Fault Tree Analysis in the framework of the Safety Assessment Methodology (SAM), for both PSSA (Preliminary System Safety Assessment) and SSA (System Safety Assessment).
PART IV ANNEX H – Change determination process
PART IV ANNEX H – Change determination process
This annex proposes means to assess whether an event in the Air Navigation System can be considered as a change and to determine which type of safety assessment should be conducted depending on the nature of the event.
Level 3
PART IV
PART IV ANNEX A1 – What is a change: AVINOR example part 1
PART IV ANNEX A1 – What is a change: AVINOR example part 1
AVINOR's key aim is to carry out risk analyses of change and to ensure that all risks associated with change in a system or specific task, activity or operation are identified and assessed with a view to their significance for air safety.
PART IV ANNEX A2 – What is a change: AVINOR example part 2
PART IV ANNEX A2 – What is a change: AVINOR example part 2
AVINOR’s approach is to ensure that all changes which have a bearing on air safety are assessed in a comprehensive and structured manner to take account of any impact on safety levels.
PART IV ANNEX A3 – What is a change: Czech ANS example
PART IV ANNEX A3 – What is a change: Czech ANS example
Czech ANS approach to describe the issues of safety cases and to prevent impractical assessments of changes that only have a minor or negligible significance in terms of the safety of the provided ATM services.
PART IV ANNEX A4 – What is a change - Swedish ANS process
PART IV ANNEX A4 – What is a change - Swedish ANS process
The guidelines of this document define the procedure that should be followed for modifications to systems that are already authorised for operation.
PART IV ANNEX A5 – What is a change - French DSNA example (EPIS-CA)
PART IV ANNEX A5 – What is a change - French DSNA example (EPIS-CA)
This guide sets out the procedure, developed by the French DSNA EPIS-CA WG, to be followed in the event of a change (as defined by ESARR 4) to an air traffic system and is therefore a tool of practical use for performing EPIS-CA.
PART IV ANNEX A6 – What is a change - French DSNA example presentation
PART IV ANNEX A6 – What is a change - French DSNA example presentation
This presentation illustrates the EPIS-CA procedure described in Appendix A5.
PART IV ANNEX B – Terminal airspace design
PART IV ANNEX B – Terminal airspace design
This appendix proposes an example of mapping between the Safety Assessment process steps (FHA, PSSA, and SSA) and the process for designing Terminal Airspace.
