Navigate / EASA
GM1 ORGH.MGM.200(b)(2) General requirements for the management system

ED Decision 2025/007/R

SAFETY RISK MANAGEMENT

(a) The scalability and suitability of the safety management system are expected to be a function of the inherent safety‑risk‑related capabilities of the organisation. For example, complex structures are usually exposed to complex risks, which require a robust safety risk management process. Or, for organisations facing a lower level of risk:

(1) the safety risk assessment model may be very simple if the hazards identified are easy to mitigate;

(2) expert judgement may be sufficient to measure the efficiency of safety barriers;

(3) the collection of data, including on occurrences, and consequently the safety information may be very limited;

(4) there may be no need for software or tools to manage the SMS; and

(5) the communication policy may be limited.

(b) The safety risk and safety risk tolerability matrices provided in ICAO Doc 9859, Safety Management Manual, may be used to determine the tolerability of the safety risks within the organisation. Nevertheless, the GH organisation may use other models to assess and manage the safety risk.



The ICAO safety risk matrix:

Safety risk

Severity

Probability

Catastrophic
A

Hazardous
B

Major
C

Minor
D

Negligible
E

Frequent 5

5A

5B

5C

5D

5E

Occasional 4

4A

4B

4C

4D

4E

Remote 3

3A

3B

3C

3D

3E

Improbable 2

2A

2B

2C

2D

2E

Extremely
improbable 1

1A

1B

1C

1D

1E



The ICAO safety risk tolerability matrix:

Safety risk tolerability: Safety risk index range

Safety risk description

Recommended action

5A, 5B, 5C, 4A, 4B, 3A

INTOLERABLE

Take immediate action to mitigate the risk or stop the activity. Perform priority safety risk mitigation to ensure additional or enhanced preventative controls are in place to bring down the safety risk index to tolerable.

5D, 5E, 4C, 4D, 4E, 3B, 3C, 3D, 2A, 2B, 2C, 1A

TOLERABLE

Can be tolerated based on the safety risk mitigation. It may require management decision to accept the risk.

3E, 2D, 2E, 1B, 1C, 1D, 1E

ACCEPTABLE

Acceptable as is. No further safety risk mitigation required.