Human Factor and Human Performance
Human Factor and Human Performance
SMS 6
Human factors
and human
performance
3rd Edition
ISBN 978-1-76137-011-3 (Print)
ISBN 978-1-76137-012-0 (PDF)
Notice: The information contained in this document was correct at the time of publishing and is subject to change without notice. It has
been prepared by CASA Safety Promotion for educational purposes only. This guide outlines basic procedures – it should never be used
as a replacement for official manuals or procedures. Reference should be always made to the appropriate procedures prior to the use of
this information.
The Civil Aviation Safety Authority is responsible for the safety regulation of Australia’s civil aviation operators, and for the regulation of
Australian-registered aircraft outside Australian territory.
Unless noted otherwise, copyright in this work is owned by CASA. This work is licenced under a Creative Commons Attribution 4.0
International (CC BY 4.0) Licence, with the exception of the Commonwealth Coat of Arms, CASA’s logo, any third party material, any
material protected by a trademark and any images and/or photographs.
Use of any part of this work must include the following attribution: ‘Source: Civil Aviation Safety Authority’.
Before using any third part material in this work, you must contact the owning party directly to seek permission to use it.
2207.4488
SMS 6Human factors and human performance 1
Contents
Throughout
aviation people
are both the
source of risks and
an integral part
of identifying and
managing risks.
The terms human factors, human Although humans will always make errors
performance, non-technical skills, and there is clear evidence from accident
ergonomics are sometimes confused and statistics, line observations and research
regularly used interchangeably. This is studies, of the benefit of human factors-
not surprising as they are closely linked, based mitigation measures. Aircraft
however they can be distinguished as systems and equipment, documentation,
follows: procedures, and training which have had
• Human factors is the application of human factors inputs have been successful
what we know about human beings in limiting the number and effect of errors.
including their abilities, characteristics, This results in your entire system being
and limitations, the design of procedures more resilient.
and equipment people use, and the The primary focus of any human factors
environment in which they function and initiative is to improve safety and efficiency
the tasks they perform. by reducing and managing human error.
• Human performance is how people
perform tasks and represents the human
contribution to safety performance. Human performance
• Non-technical skills relate to behavioural principles
skills or techniques that ensure There are five key human performance
individuals can function successfully as principles that identify how individuals’
team members to diminish threats and performance is influenced by different
errors within the operating environment. factors. These are:
• Ergonomics is considered a subset of • people’s performance is shaped by their
human factors that focuses specifically capabilities and limitations
on designing technical systems, products,
• people interpret situations differently
and equipment to meet the physical
and perform in ways that makes sense
needs of the user.
to them
The study of human factors involves • people adapt to meet the demands of
applying scientific knowledge about the complex and dynamic work environments
human body and mind. This enables a
• people assess risks and make trade-offs
better understanding of human capabilities
and limitations so there is the best possible • people’s performance is influenced by
fit between people and the systems in working with other people, technology,
which they operate. Human factors includes and the environment within which
social and personal skills, for example they work.
communication and decision making, These principles interact and overlap and
which complement technical skills and are do not represent unconnected human
important for safe and efficient aviation. performance building blocks. Instead, they
There are both upsides and a downside to provide different insights and perspectives
human factors and human performance. to provide a multi-dimensional picture of
The downside is the capacity to make human performance. Having awareness of
errors or mistakes. However, the equally these principles can help to shape, improve,
SMS 6Human factors and human performance 5
and maximise the performance of your Some of these limitations are physiology
SMS. The human performance principles and we easily recognise or understand
apply generally to all humans involved in them. For example, people cannot function
your organisation, across the individual, the well without adequate sleep and nutrition.
team, and at organisational levels. They cannot lift very heavy weights,
cannot see in the dark, and are subject
to involuntary responses under stress.
Human performance We need to however be aware that these
limitations physiological limitations can be aggravated
in aviation when flying at altitude or
As identified in the first human performance
working in highly complex environments.
principle, people’s performance is shaped
Such as when inflight, with decreased
by their capabilities and limitations. All
oxygen delivery to organs, including sensory
human beings have limitations, including
organs, can result in problems with night
both physical and cognitive limitations,
vision or impaired decision-making.
which cannot simply be overcome through
motivation, sheer will or having a positive Other limitations are cognitive and can be
safety behaviour mindset. However, for harder to recognise. For example, people
all their limitations, when well supported, cannot always remember what they were
people can manage novel situations, told. Nor can they always immediately
adapting their skills to safely manage the solve complex calculations in their heads,
operation. or maintain attentiveness when they are
stressed, bored, fatigued, or cognitively
Human performance limitations are
overloaded.
often known as personal or individual
factors which influence performance While sensory and information processing
and are potential error producing or limitations can lead to perceptual illusions,
error promoting conditions. When these and to the failure to notice subtle changes
individual factors are present, they in the environment, especially when
can interact with other situational and attention is focused elsewhere or when
organisational factors, increasing the experiencing spatial disorientation.
likelihood of human error. These factors
Furthermore, people’s performance is
however if proactively evaluated and
highly variable. No one can perform at the
addressed can be optimised to improve
same level all the time, and the level at
performance and reduce human error risks.
which people can perform certain types
Some well-known human performance of tasks changes throughout the day. For
limitations include: example, people’s overall performance
• stress deteriorates when they are ill, bored,
stressed, or fatigued.
• fatigue impairment
• alcohol and other drug impairment The performance limitation of fatigue
impairment is recognised as a specific
• physical health
safety issue in aviation. It should be
• mental wellbeing and psychological addressed within your SMS as a distinct
conditions human performance risk accordingly,
• sensory capacity (visual and auditory) regardless of any fatigue management
• information processing capacity regulations for certain groups of aviation
professionals. This enhanced awareness
• attention and vigilance
of fatigue risk in aviation is because of the
• memory
6 SMS 6Human factors and human performance
insidious nature of fatigue and its well- The outer letters, SHEL, represent four
known impacts on safety performance. satellite components:
When identifying, assessing, and managing
S = software: the procedures, training and
fatigue risks organisations must consider
other support aspects of tasks or work
the basic scientific principles relating to
design.
fatigue impairment and how they will
manage these to ensure personal are H = hardware: the equipment, tools and
not performing safety critical tasks while technology used in work.
impaired by fatigue. These basic scientific
E = environment: the environmental
principles include:
conditions in which work occurs, including
• the need for sleep the organisational and national cultures
• sleep loss and recovery influencing interaction.
• circadian effects on sleep and L = liveware: the interrelationships
performance, and between humans at work.
• the influence of workload.
Which are surrounding the main
component of:
The SHELL model L = liveware: the human operating within
Several models have been developed to the system.
support the understanding and assessment The SHELL model represents the way the
of human factors on safety performance. whole system influences how individuals
The SHELL model is well-known and used by behave. Any breakdown, disconnect or
the International Civil Aviation Organization absence between components can lead to
(ICAO). The model illustrates the impact human performance problems.
and interaction of the different system
For example, an accident where
components on humans and emphasises
communication breaks down between
the need to consider human factors as an
pilots in the cockpit, or engineers at shift
integrated part of safety risk management.
handover, would be characterised by the
The model illustrates the relationship model as a liveware-liveware breakdown.
between the human at the centre of Situations where pilots or engineers
the model surrounded by workplace or disregarded a rule or do not follow a
organisational components. standard operating procedure would
be characterised as a liveware-software
breakdown.
An analysis of these interactions can
assist your organisation in both the
development of processes and procedures
or introduction of new systems and also in a
reactive sense during an investigation of an
incident, for example.
Case study SMS 6Human factors and human performanceCase study 7
• the aircraft’s high rate of descent, and • Hardware–liveware: the aircraft was
the descent below the segment minimum not fitted with any terrain awareness and
safe altitude, were not detected or warning system, such as an enhanced
corrected by the crew before the aircraft ground proximity warning system.
collided with the terrain • Environment (culture)–liveware:
• the crew probably experienced a very there were significant limitations in the
high workload during the approach operator’s flight crew training program,
• the crew possibly lost situational such as the superficial or incomplete
awareness of the aircraft’s position along ground-based instruction, no formal
the approach training for new pilots in the operational
use of a GPS, no structured training on
• the pilot in command (PIC) had a
minimising the risk of controlled flight
previous history of conducting RNAV
into terrain, and no structured training
(GNSS) approaches with crew without
in crew resource management in a
appropriate endorsements and operating
multi-crew environment. There was
the aircraft at speeds higher than those
also a lack of independent evaluation
specified in the operations manual
of training and checking, and a culture
• the co-pilot had no formal training and suggesting disincentives and restricted
limited experience to act effectively opportunities to report safety concerns
as a crew member during the type of about management decisions.
approach conducted into Lockhart River.
• Environment–liveware: the crew
If we now apply the SHELL model to the experienced a very high workload during
Lockhart River accident, we can see that the approach. The lack of visibility and
there was a poor fit between several poor weather also contributed to their
different components in the SHELL model. poor situational awareness.
What led to the accident goes far beyond • Liveware–liveware: the PIC did not
the actions of the PIC alone: detect and correct the aircraft’s high rate
of descent, and the descent below the
• Software–liveware: there were
segment minimum safe altitude before
contradictory and unclear procedures
the aircraft crashed. The co-pilot did not
for conducting instrument approaches.
have the appropriate endorsement and
The company operations manual
had limited experience of this type of
did not provide clear guidance on
instrument approach.
approach speeds, or when to select
aircraft configuration changes during an This example illustrates how important it is
approach. It also had no clear criteria for to understand the human contribution to
a stabilised approach, nor standardised an accident in context, rather than simply
phraseology for crew members to labelling what somebody did as ‘operator
challenge others’ safety-critical decisions. error’. This analysis enables a deeper and
more directed review of causal factors of
the accident which ultimately leads to better
organisational safety in the future.
SMS 6Human factors and human performance 9
Unintentional actions
Unintentional actions are those that are identified as acceptable human errors. They
provide your organisation with a learning opportunity and because of this response helps
to promote a positive safety culture. These acts should not result in punitive actions and
should instead lead to an analysis of the contributing factors that led to the slip, lapse or
mistake. The analysis should identify any mitigating actions your organisation can take to
reduce the potential for reoccurrence.
Slips Are errors made when you don’t pay attention, or your plan is incorrectly
carried out. For example, you intend to drive to the shops, but turn the way
you usually do to go to work.
Lapses Occur because you fail to carry out an intended action, usually due to a
memory failure. For example, you forget to buy something at the shops or
forgetting to check that the undercarriage locking pins are in place.
Mistakes Occur when you plan to do something, and carry out your plan accordingly,
but it does not produce the outcome you wanted. For example, the shop
you went to does not sell the item you are looking for.
This is often because your knowledge was inadequate, or the rules you
applied in deciding what to do were inappropriate.
This type of error is at times identified as an intentional action error
because often the actions taken are intentional. However, when a mistake
occurs due to inadequate knowledge or inappropriate rule application the
outcome is identified as being unintentional and falls into an overarching
unintentional category of errors.
12 SMS 6Human factors and human performanceCase study Case study
image: iStockphoto
Intentional actions
Unlike unintentional actions, intentional actions or violations involve deliberately,
and consciously, departing from known and established rules or procedures.
For example, choosing to skip a step in a standard operating procedure so you can
complete a task faster.
Within your SMS these are the types of actions that may, depending on their contributing
factors, result in some degree of punitive action along with organisational learnings
to prevent reoccurrence. The table below explains the different violation types and their
main causes.
Routine: result when a violation becomes what is • We think the rules are
normally done i.e., the norm within the workplace unnecessary or too rigid.
or for an individual. • We are poorly supervised.
Routine violations are often short cuts taken to help
get the job done quickly, more easily, or perhaps more
efficiently and become part of the routine for that task.
They are frequent, known and often become condoned.
Unless you monitor and control this behaviour, it can
lead to a culture that tolerates violations and ultimately
degrades your safety culture.
Given many processes and procedures are learnt ‘on
the job’, new employees often accept routine violations
as ‘normal’ procedure as they know no different.
Situational: occur when there is a gap between what • We don’t have enough
the rules or procedures require and what resources are help to do the job, or there
available or possible to be able to complete the task. is not enough time due to
poor planning.
When there is a lack of local resources, or a failure to
understand real working conditions, this may increase • We find that the
pressure on individuals to ignore procedures or break procedures are too
the rules to get the job done and achieve targets. complicated or onerous.
Situational violations represent individuals adapting to
problems in the workplace to still achieve their tasks.
14 SMS 6Human factors and human performance
Identify jobs and tasks • focused fatigue countermeasures (e.g. breaks, staff
that are at risk of fatigue backup, supervisor monitoring etc.) on those jobs
impairment and introduce that are safety-critical
fatigue proofing strategies • proactively identify fatigue-producing rosters
through staff feedback
Adapted from Human Factors and Error Management training manual (September 2010). Leading Edge Safety Systems, in conjunction with
IIR Executive Development, Sydney.
18 SMS 6Human factors and human performance
These error management strategies are Managing violations firstly involves finding
broad safety management goals. More their root causes or contributing factors.
specific error management initiatives can Automatically punishing a violator is not
then be put in place based on different productive because the violation may be
error types. committed because of factors beyond the
individual’s control. While you should never
For example, the most common types of
tolerate dangerous and reckless behaviour,
errors (slips and lapses) involve attention,
poor work planning or insufficient allocation
vigilance, and memory problems. Therefore,
of resources may have led to some routine
developing procedures (checklists),
or situational violations. Any person in the
designing human-centred equipment
same scenario might have found it difficult
(alarms and warning devices) and training
not to commit a violation, this is known as
programs to raise awareness of human
the substitution test.
factors issues, are all common tools.
The substitution test involves asking
To reduce mistakes, getting your people to
yourself and the individual’s peers: ‘Given
better understand the rules and ensuring
the circumstances (including organisational,
an adequate transition time when rules are
situational and environmental factors) at
changed are useful strategies. You should
the time of the event, could you be sure you
also consider question and answer sessions
would not have committed the same, or a
or trialling new rules or procedures before
similar, unsafe act?’
implementation.
Some examples of organisational strategies
for managing error and violation types to
enhance safety performance are shown in
the table following.
Adapted from Safety Wise Solutions Incident Cause Analysis Method (ICAM) Pocket Guide (Issue 5, October 2010).
Earth Graphics, Melbourne.
SMS 6Human factors and human performance 21
Human factors and hazard On inspecting the stairs, the safety manager
finds that there are no signs on them to
management remind operators to activate the wheel
A simple example of considering human brake. It is also identified that there are
factors issues in the hazard management no visual cues to indicate when the wheel
process is outlined in this case study. brakes have been activated, meaning when
standing back from the stairs it is difficult to
A pilot notices the mobile aircraft stairs
tell if the brakes are on or not.
being left unsecured, and the potential for
the stairs to hit the aircraft, particularly in Simple human factors solutions would
strong wind. The pilot reports this concern include installing a sign prompting
via the company hazard reporting process. operators to secure the wheel brake, have
The company safety manager considers the backside of the brake mechanism
the human factors issues involved, and, coated in a reflective hi-vis tint that can
in talking with ramp staff, finds out that only be seen when in the upright locked
sometimes people forget (memory lapse) to position, and to ensure that all airport staff
secure the wheel brake properly. are regularly reminded of the danger of
unsecured stairs.
SMS 6Human factors and human performance 27
Hazard identification
Your hazard identification program can reveal potential or actual errors and their
underlying causes. This requires looking beyond the error itself and instead identifying
the underlying contributing factors that have caused an error to occur.
The table below gives examples of questions to ask in relation to hazard management
and human factors influence.
Operator error is
rarely the root cause
of an occurrence.
image: iStockphoto | vaeenma
Usually, some
underlying systemic
issue is hiding
Incident and accident behind it.
investigation
Make sure your investigation procedures
detail how human factors considerations
are included. The main purpose of Investigators and analysts need to
investigating an accident or incident is recognise that identifying an event simply
to understand what happened, how it as human error offers little insight. To
happened, and why it happened, to prevent gain further insight, analysis of safety
similar events in future. Use a model such occurrences includes an in-depth evaluation
as the PEAR model, the SHELL model, or that requires a thorough understanding
James Reason’s accident causation ‘Swiss of the context in which the error occurred,
cheese’ model or some other investigation including organisational, situational, and
framework and consider human error, both environmental factors.
at the individual and organisational levels.
The following checklist may be useful to
Your investigators need to be trained assist you in assessing how well you have
in relevant human factors and human considered human factors in your safety
performance concepts including design investigation system.
procedures to be able to establish which
human performance factors might have
contributed to an event.
SMS 6Human factors and human performance 29
image: iStockphoto
The following checklist may be useful to assist you in assessing how well you have
considered human factors in your change management process.
While the initial emphasis should be upon Wherever practicable your human factors
knowledge and comprehension of human training should be incorporated into your
factors principles, you should also include already existing training systems. Human
appropriate operational behaviours and factors training forms a part of your SMS
skills training. This is the NTS element of and should also be integrated across all
your training program. NTS are applied aspects of safety and personnel training.
specific human competencies which may Human factors training is directed at
minimise human error in aviation. These preventing and managing risks in dynamic
include but are not limited to: operational contexts. It therefore has
• communication relevance, not just for meeting technical
training requirements, but for meeting
• teamwork
organisational safety management
• situational awareness responsibilities.
• decision making
You should continue to develop your safety-
• threat and error management critical personnel’s human performance
• human information processing. knowledge and non-technical skills as a
priority. It makes sense as non-technical
Non-technical skills can be considered as
skills are one of your primary defences in
the decision making and social skills which
reducing errors.
complement technical skills. For example,
inspecting an aircraft engine using a For more information on human factors
borescope is a technical skill performed and safety behaviours see the following
by an engineer. However, maintaining CASA guides:
situational awareness (attention to the
Safety behaviours: human factors for
surrounding environment) during the
pilots | Civil Aviation Safety Authority
inspection of a wing, to avoid tripping over
(casa.gov.au)
hazards, is a non-technical skill.
Safety behaviours: human factors for
Before training operational staff in human
engineers resource kit | Civil Aviation Safety
factors principles and non-technical skills,
Authority (casa.gov.au)
do a training needs analysis, so that you
know which error management measures
to target to which groups, individuals,
and teams.
Page left intentionally blank.
casa.gov.au