13.2 FMEA, Action Priority, and Technician Workplace Safety
Key Takeaways
- Process Failure Mode and Effects Analysis (PFMEA) evaluates potential process failures using Severity (S), Occurrence (O), and Detection (D) ratings on a 1-to-10 scale, where Detection is uniquely inverted (1 = almost certain detection; 10 = absolute uncertainty).
- The traditional Risk Priority Number (RPN = S x O x D) is supplemented by the AIAG-VDA Action Priority (AP) methodology, emphasizing that high Severity ratings (S = 9-10) demand immediate engineering mitigation regardless of low RPN values.
- The Hierarchy of Hazard Controls establishes an imperative priority: Elimination (most effective), Substitution, Engineering Controls, Administrative Controls, and Personal Protective Equipment (PPE, least effective).
- Lockout/Tagout (LOTO per OSHA 29 CFR 1910.147) guarantees zero energy state through six sequential steps, concluding with the indispensable 'Try' verification step before any inspection or servicing inside machinery.
- The 5S methodology (Sort, Set in order, Shine, Standardize, Sustain) establishes visual shop-floor control, reducing search waste, preventing cross-contamination of gages, and highlighting safety hazards.
13.2 FMEA, Action Priority, and Technician Workplace Safety
Failure Mode and Effects Analysis (FMEA): DFMEA vs. PFMEA
Failure Mode and Effects Analysis (FMEA) is a systematic, proactive engineering discipline used to identify potential failure modes in a product or process, assess the risks associated with those failures, and establish prioritized preventive countermeasures before defective hardware is produced.
DFMEA versus PFMEA
Quality technicians must distinguish between the two primary varieties of FMEA:
- Design FMEA (DFMEA): Focuses on product design and engineering geometry. It examines how a product can fail to fulfill its intended functional, environmental, or reliability requirements (e.g., material fatigue, excessive deflection, thermal breakdown, corrosion). The DFMEA assumes the manufacturing process meets print specifications and focuses on product robustness before production tooling is released.
- Process FMEA (PFMEA): Focuses on manufacturing, assembly, inspection, and packaging processes. It assumes the product design is correct and analyzes how manufacturing variables (machine wear, incorrect operator setups, tooling drift, fixturing misalignment, contamination) could cause nonconforming product. Quality technicians frequently participate in PFMEA cross-functional teams.
PFMEA Structure and the 1-to-10 Scoring Scales
A standard PFMEA analyzes each process operation sequentially across eight core columns:
- Process Step / Function: The specific manufacturing or inspection operation under review.
- Potential Failure Mode: The physical way in which the operation could fail to meet requirements (e.g., hole drilled undersize, missing snap ring, cracked solder joint, burr on edge).
- Potential Effect(s) of Failure: The consequence of the failure mode on the immediate workstation, downstream assembly, the vehicle/device, or the end customer.
- Severity ($S$, 1–10): The assessment of how serious the failure effect is to the customer.
- Potential Cause(s) / Mechanism(s): The physical or operational cause that generates the failure mode (e.g., dull drill bit, operator fatigue, clogged dispensing nozzle).
- Occurrence ($O$, 1–10): The likelihood that the specific cause will occur during production.
- Current Process Controls: Existing mechanisms that prevent the cause (Prevention Controls) or detect the failure mode (Detection Controls) before parts leave the workstation.
- Detection ($D$, 1–10): The assessment of the ability of current detection controls to detect the failure mode or cause before escaping to downstream customers.
Standard AIAG 1-to-10 Scoring Guidelines
| Rating | Severity ($S$) — Failure Consequence | Occurrence ($O$) — Cause Frequency | Detection ($D$) — Inverted Detection Capability |
|---|---|---|---|
| 9 – 10 | Hazardous / Regulatory: Failure threatens life safety or violates federal regulations (10: without warning; 9: with warning). | Very High: Failure almost inevitable (≥ 1 in 10 parts / > 100,000 PPM). | Absolute Uncertainty / Very Low: No current controls exist, or detection relies on unverified random visual checks (> 80% escape risk). |
| 7 – 8 | Major Functional Loss: Complete loss of primary product function, rendering vehicle/device inoperable. | High: Frequent, recurring failures ($1$ in 50 to $1$ in 100 parts / $10,000$ to $20,000$ PPM). | Low: Manual visual or tactile inspection; variable manual gaging subject to operator fatigue. |
| 4 – 6 | Moderate / Minor Performance Loss: Secondary function impaired, performance degraded, or customer dissatisfaction. | Moderate: Occasional failures associated with process variation ($1$ in 500 to $1$ in 2,000 parts). | Moderate: Statistical sampling, automated post-process gaging, or calibrated attribute go/no-go gaging. |
| 2 – 3 | Minor / Cosmetic Annoyance: Slight defect noticed by discriminating customers (paint blemish, fit gap); no loss of function. | Low: Isolated, infrequent failures ($1$ in 10,000 to $1$ in 100,000 parts). | High: Automated in-station 100% inspection (e.g., optical vision system, automated CMM check). |
| 1 | No Discernible Effect: Defect is undetectable to customer; zero operational impact. | Extremely Remote: Failure physically eliminated or rate $< 1$ in $1,000,000$ parts ($< 1$ PPM). | Almost Certain: Mistake-proofed (poka-yoke) by fixture design; part cannot be loaded incorrectly. |
[!IMPORTANT] The Detection Scale Inversion Rule: A score of 1 is the best possible detection rating (defect is caught with near certainty via mistake-proofing or automated sensors). A score of 10 is the worst possible detection rating (no controls exist; the defect is virtually guaranteed to escape). Quality technicians must never confuse this inversion on the CQT exam!
The Risk Priority Number (RPN) and AIAG-VDA Action Priority (AP)
Historically, quality teams quantified overall failure risk using the Risk Priority Number (RPN): Because each index ranges from 1 to 10, the resulting RPN ranges from 1 to 1,000.
The Fatal Flaws of Traditional RPN Thresholds
In modern quality engineering, prioritizing risk strictly by RPN thresholds is recognized as dangerous due to mathematical limitations:
- False Equivalence: Consider two failure modes:
- Failure Mode A: $S = 10$ (Brake line hydraulic rupture; loss of vehicle braking), $O = 2$, $D = 2 \implies RPN = 10 \times 2 \times 2 = \mathbf{40}$.
- Failure Mode B: $S = 2$ (Interior dashboard trim color slight mismatch), $O = 5$, $D = 4 \implies RPN = 2 \times 5 \times 4 = \mathbf{40}$. Both yield an identical RPN of 40. If a plant enforces a simplistic rule that "only items with RPN > 100 require corrective action," the plant will ignore a fatal life-safety hazard ($S=10$) while treating it the same as a cosmetic trim issue!
- Arbitrary Number Gaps: Out of 1,000 possible mathematical values, only 120 unique numbers can be generated by multiplying three integers from 1 to 10. There are massive numerical gaps, making linear thresholding mathematically invalid.
The AIAG-VDA Action Priority (AP) Method
To resolve this flaw, the joint AIAG-VDA FMEA Handbook replaced RPN with the Action Priority (AP) system. AP assigns failure modes into three actionable tiers:
- High Priority (H): Corrective action is mandatory. Triggered whenever Severity is high ($S = 9-10$), unless Occurrence is extremely low ($O = 1$) and Detection is near-certain ($D = 1$).
- Medium Priority (M): Engineering team must evaluate existing controls and implement improvements where feasible.
- Low Priority (L): Current controls are considered adequate; action is optional.
The Hierarchy of Hazard Controls
When mitigating workplace occupational safety hazards and manufacturing process risks, technicians and safety committees must apply the standardized Hierarchy of Hazard Controls (OSHA / NIOSH):
HIERARCHY OF CONTROLS (From Most Effective to Least Effective):
[ 1. ELIMINATION ] Physically remove the hazard (Most Effective)
|
v
[ 2. SUBSTITUTION ] Replace the hazard with a safer alternative
|
v
[ 3. ENGINEERING ] Isolate people from hazard (Interlocks, light curtains, guards)
|
v
[ 4. ADMINISTRATIVE] Change how people work (SOPs, safety training, job rotation)
|
v
[ 5. PPE ] Protect worker with gear (Least Effective / Last Line of Defense)
- Elimination: Physically removing the hazard entirely. Example: Modifying a stamping process to eliminate sharp edge burrs at the die level, eliminating the need for manual deburring.
- Substitution: Replacing a hazardous material or machine with a safer alternative. Example: Replacing toxic trichloroethylene solvent with a non-hazardous, water-based alkaline cleaner.
- Engineering Controls: Physical engineering safeguards that isolate workers from hazards. Example: Installing optical light curtains, dual anti-tie-down palm buttons, safety interlocks, and local exhaust ventilation hoods.
- Administrative Controls: Modifying organizational policies, operating rules, and training. Example: Mandating job rotation to prevent repetitive motion injuries, posting hazard warning signs, and conducting monthly safety audits.
- Personal Protective Equipment (PPE): The lowest and least effective tier. PPE places a physical barrier on the worker. If PPE fails, degrades, or is omitted, injury is instantaneous.
Shop-Floor Technician Workplace Safety Standards
Quality technicians spend extensive time performing inspections on factory floors, inside machining cells, and around high-energy equipment. Mastery of OSHA standards is mandatory for both personal survival and CQT certification.
1. Personal Protective Equipment (PPE) Standards
- Eye and Face Protection (ANSI/ISEA Z87.1): Safety glasses must be stamped with Z87 or Z87+ (high-impact rating) and must feature integrated side shields. When handling corrosive chemicals (etching acids, solvents) or operating grinding wheels, a full-face shield must be worn in addition to safety glasses.
- Foot Protection (ASTM F2413): Safety footwear must meet ASTM F2413 standards for impact resistance (Class I/75 protects against 75 ft-lbs drop energy), compression resistance (Class C/75 protects against 2,500 lbs compressive load), and Electrical Hazard (EH) protection.
- Hearing Protection (OSHA 29 CFR 1910.95):
- Action Level: An 8-hour Time-Weighted Average (TWA) of 85 dBA. Employers must implement a formal Hearing Conservation Program, provide free hearing protection, and administer annual audiometric testing.
- Permissible Exposure Limit (PEL): An 8-hour TWA of 90 dBA. Wearing hearing protection with a certified Noise Reduction Rating (NRR) is legally mandatory above this threshold.
- Hand Protection (ANSI/ISEA 105): Technicians inspecting sharp sheet metal, sheared stampings, or deburred castings must wear cut-resistant gloves rated from Level A1 to A9 based on blade cut resistance. Chemical-resistant gloves (nitrile, neoprene, butyl) must be selected based on solvent compatibility.
2. Hazard Communication Standard (OSHA HazCom 2012 / GHS)
OSHA's Hazard Communication Standard (29 CFR 1910.1200) aligns with the United Nations Globally Harmonized System (GHS):
- GHS Container Labels: Every chemical container must display six mandatory elements: (1) Product Identifier, (2) Signal Word ("DANGER" for severe hazards; "WARNING" for less severe hazards), (3) Hazard Statements, (4) Precautionary Statements, (5) GHS Pictograms (red diamond border enclosing black symbol), and (6) Supplier Information.
- Secondary Container Labeling Rule: When a technician transfers an inspection chemical (e.g., solvent cleaner, dye penetrant developer, isopropyl alcohol) from a large bulk container into a secondary squeeze bottle or beaker, the secondary container must be labeled with the product identifier and basic hazard warnings, unless it is under the immediate, exclusive control of the person who filled it and used up entirely during that single work shift.
- Safety Data Sheets (SDS): Standardized into 16 uniform sections. Key sections for quality technicians include:
- Section 2: Hazard(s) Identification (GHS classification, signal words, hazard statements).
- Section 4: First-Aid Measures (immediate treatments for eye contact, skin exposure, inhalation).
- Section 7: Handling and Storage (temperature limits, chemical incompatibilities).
- Section 8: Exposure Controls/Personal Protection (OSHA PELs, required gloves, eye protection, and respirators).
3. Lockout/Tagout (LOTO - OSHA 29 CFR 1910.147)
The Control of Hazardous Energy (Lockout/Tagout) standard protects technicians from unexpected machine energization, startup, or release of stored energy during maintenance, setup, or in-depth dimensional inspection.
- Hazardous Energy Types: Electrical, pneumatic (compressed air), hydraulic (pressurized fluid), mechanical (gravity, tension springs), and thermal.
- Zero Energy State: The verified state in which all primary and residual energy sources have been isolated, locked, discharged, and dissipated.
The Six Sequential Steps of OSHA LOTO
| Step | Phase Name | Technical Operational Requirement |
|---|---|---|
| 1 | Preparation | Identify all energy sources, magnitude, and isolation points; notify all affected employees. |
| 2 | Shutdown | Deactivate the machine using normal operating controls (stop button, cycle switch). |
| 3 | Isolation | Physically disconnect the machine from all energy supplies (open electrical breaker, close main air valve). |
| 4 | Lockout / Tagout | Affix individual, standardized safety locks and danger tags to each isolation device. (One Person, One Lock, One Key rule). |
| 5 | Stored Energy Dissipation | Relieve, drain, vent, or block all residual or stored energy (bleed air tanks, vent hydraulic lines, discharge capacitors, block gravity rams with mechanical safety blocks). |
| 6 | Verification ("Try" Step) | The most critical safety step: Verify isolation by attempting to restart the equipment using normal operational controls (push start buttons). Verify zero motion, then return controls to "OFF". |
[!WARNING] Technician Safety Inside Machine Enclosures: A quality technician must NEVER step inside an automated machine envelope (e.g., a multi-axis CNC gantry, robotic welding fixture, or stamping press bed) to take dimensional measurements without executing formal Lockout/Tagout or verifying that interlocked safety gates are certified and active. Defeating an interlock to "take a quick measurement" is a fatal trap and an immediate OSHA violation.
The 5S Methodology and Visual Shop-Floor Management
Developed in Japan as part of lean manufacturing, 5S is a systematic methodology for workplace organization, visual control, and waste reduction that directly impacts quality inspection accuracy and technician safety:
THE 5S PILLARS:
[ 1. SORT ] ------> [ 2. SET IN ORDER ] ------> [ 3. SHINE ]
(Seiri) (Seiton) (Seiso)
Eliminate clutter Place for everything Clean & inspect tools
|
v
[ 5. SUSTAIN ] <--- [ 4. STANDARDIZE ]
(Shitsuke) (Seiketsu)
Daily discipline Visual rules & colors
The 5S Pillars Explained
- Sort (Seiri): Separate necessary items from unnecessary items. Apply the Red Tag technique: tag damaged gages, obsolete blueprints, and scrap parts, moving them to a designated red-tag holding area for formal disposition.
- Set in Order (Seiton): Arrange necessary tools systematically so they are easy to find, use, and return. Utilize shadow boards for micrometers, calipers, and gage blocks. Apply floor tape to define raw material staging, WIP, and quarantined scrap areas ("A place for everything, and everything in its place").
- Shine (Seiso): Clean workstations, inspection plates, and tools daily. Use cleaning as an inspection routine to detect oil leaks, frayed wiring, damaged indicator styli, or granite plate chips.
- Standardize (Seiketsu): Establish visual standards, color coding, and standardized checklists across all cells (e.g., Red = Quarantined Material, Green = Released/Accepted, Yellow = In-Process Inspection).
- Sustain (Shitsuke): Maintain institutional discipline through regular 5S audits, posted audit scorecards, and management gemba walks.
Common Exam Traps for CQT Candidates
[!CAUTION] Trap 1: The Inverted Detection Scale. In PFMEA, Detection = 1 is the best score (almost certain detection via poka-yoke); Detection = 10 is the worst score (virtually impossible to detect). Do not invert this relationship!
Trap 2: High Severity with Low RPN. Any failure mode with Severity = 9 or 10 involves life safety or regulatory noncompliance. It must be mitigated regardless of how low the RPN appears.
Trap 3: The Forgotten "Try" Step in LOTO. Exam questions often list LOTO steps and ask which step verifies isolation. The correct answer is always the "Try" step (attempting to restart the machine using operating controls to verify zero energy state).
Trap 4: Hierarchy of Controls Priority. Remember that PPE is the least effective control tier. If an exam question asks for the most effective control to eliminate a solvent vapor hazard, select Elimination (changing the process) or Engineering Controls (exhaust ventilation), never PPE (respirators).
A process FMEA cross-functional team evaluates a high-speed stamping station. Failure Mode A ('Sensor cable severed, stopping production line') has Severity = 4, Occurrence = 3, Detection = 2 (RPN = 24). Failure Mode B ('Air exhaust port loose, potentially ejecting metal slivers into operator eye') has Severity = 10, Occurrence = 2, Detection = 2 (RPN = 40). Under both modern risk analysis principles and the AIAG-VDA Action Priority standard, how should the quality engineering team prioritize these failure modes?
A quality technician must enter an automated mechanical stamping press to inspect the alignment of a precision upper die block. In accordance with OSHA 29 CFR 1910.147 (Lockout/Tagout), after shutting down the press, opening the electrical disconnect switch, applying their personal padlock and tag, and inserting the mechanical safety die blocks, what is the mandatory final step before placing any part of their body into the press?
A manufacturing facility seeks to reduce technician exposure to toxic chemical fumes during the degreasing of machined aerospace manifolds. The plant safety committee proposes four options. According to the standard NIOSH/OSHA Hierarchy of Hazard Controls, which of the proposed solutions represents the MOST effective control measure?