12.2 Aeronautical Decision-Making & Risk Models

Aeronautical Decision-Making & Risk Models

For the first half-century of powered flight, aviation training focused almost exclusively on mechanical skill: stick-and-rudder technique, systems knowledge, and regulatory compliance. However, accident investigations by the National Transportation Safety Board (NTSB) and the FAA revealed a sobering reality: the FAA estimates that about 80 percent of aviation accidents involve human factors and flawed operational judgment rather than mechanical failures or airframe defects.

In response, the FAA pioneered Aeronautical Decision-Making (ADM). Formally defined, ADM is a systematic approach to the mental process used by aircraft pilots to consistently determine the best course of action in response to a given set of circumstances. Rather than treating "good judgment" as an innate, mysterious trait that pilots either possess or lack, ADM establishes structured cognitive frameworks, memory checklists, and behavioral antidotes that can be systematically taught, practiced, and evaluated.

---

The DECIDE Model: Structured In-Flight Problem Solving

When unexpected anomalies or deteriorating conditions arise during flight, pilots frequently experience acute stress, task saturation, and cognitive narrowing. The DECIDE model provides a sequential, six-step mental loop that guides the pilot from initial anomaly recognition to post-action evaluation:

1. D — Detect: The pilot recognizes that a change has occurred in the aircraft, flight environment, or human state (e.g., cylinder head temperature rising into the red arc, fuel quantity diminishing faster than planned, or visibility decreasing below minimums).
2. E — Estimate: The pilot estimates the significance of the change and the urgency to react or counter the condition. Unchecked high oil temperature, for instance, threatens total engine seizure within minutes.
3. C — Choose: The pilot identifies and chooses a desirable outcome or operational objective for the flight (e.g., conduct a precautionary diversion and land safely at an en route tower-controlled airport).
4. I — Identify: The pilot identifies the specific actions, procedures, and resources necessary to achieve the chosen outcome successfully (e.g., locate nearest suitable airport on GPS, reduce engine power, enrich mixture, contact ATC, declare an urgency or emergency).
5. D — Do: The pilot executes the chosen course of action deliberately and without hesitation.
6. E — Evaluate: The pilot monitors and evaluates the effect of the action to confirm whether the hazard has been neutralized and the desired outcome is being achieved. If conditions continue to deteriorate, the cycle restarts at "Detect."

[Detect Change] ➔ [Estimate Need to React] ➔ [Choose Outcome] ➔ [Identify Actions] ➔ [Do Action] ➔ [Evaluate Effect]

---

Hazard Identification: The PAVE Checklist

Risk management begins with comprehensive hazard identification before the aircraft ever leaves the ground, extending throughout every phase of flight. The PAVE checklist divides all potential aviation hazards into four discrete categories:

• P — Pilot (and Aircrew): Assesses the human element using the IMSAFE checklist (Illness, Medication, Stress, Alcohol, Fatigue, Emotion/Eating). Evaluates pilot certification level, instrument currency, total flight hours in type, recency of experience (e.g., landings in the last 90 days), and emotional state.
• A — Aircraft: Assesses aircraft airworthiness, required inspections (AV1ATE: Airworthiness Directives, VOR check, 100-hour/Annual, Altimeter/Pitot-Static, Transponder, ELT), fuel reserves, equipment required under 14 CFR 91.205, Minimum Equipment List (MEL) compliance, weight and balance limits, and calculated climb/runway performance.
• V — enVironment: Assesses external conditions: density altitude, ceiling and visibility, turbulence, icing hazards, convective SIGMETs, mountainous terrain, runway length and surface conditions, lighting, and complex airspace.
• E — External Pressures: Assesses non-aviation psychological pressures that induce irrational risk acceptance: schedule deadlines, non-refundable hotel or event tickets, important business meetings, demanding passengers, or the deadly psychological trap known as "get-there-itis."

---

Continuous Risk Management: The 3P Model (Perceive, Process, Perform)

While PAVE identifies hazards, the 3P Model provides a dynamic, continuous loop that pilots run continuously throughout preflight, taxi, climb, cruise, descent, and landing. The 3P process integrates two vital sub-frameworks: CARE and TEAM.

1. Perceive Hazards (Using PAVE)

The pilot continuously scans the flight environment to perceive hazards across the four PAVE categories ("What has changed with the Pilot, Aircraft, Environment, or External pressures?").

2. Process Hazards (Using CARE)

Once a hazard is perceived, the pilot evaluates the associated risk by analyzing its CARE components:

• C — Consequences: What are the worst-case outcomes if this hazard is ignored? (e.g., running out of fuel at night over mountainous terrain).
• A — Alternatives: What secondary options, diversion airports, or altitude changes are available?
• R — Reality: Acknowledge the actual reality of the situation rather than wishful thinking (e.g., "The cloud base really is lowering, regardless of the optimistic forecast").
• E — External Pressures: How are deadlines or passenger expectations biasing my risk perception?

3. Perform Risk Management (Using TEAM)

Finally, the pilot executes concrete risk control actions using the TEAM matrix:

• T — Transfer: Transfer the risk to a safer mechanism (e.g., hire a two-pilot crew, consult air traffic control for radar vectors around storms, or put the passenger on a commercial airliner).
• E — Eliminate: Completely remove the hazard (e.g., cancel the flight, postpone departure until the morning fog burns off).
• A — Accept: Accept the residual risk only if the risk severity and likelihood are low, and the benefits substantially outweigh the minimal hazard.
• M — Mitigate: Reduce the probability or severity of the risk (e.g., add 30 gallons of reserve fuel, climb to an altitude with higher terrain clearance, select a runway with less crosswind).

---

The 5Ps Model: Key Decision Checkpoints

The 5Ps model provides structured operational checkpoints designed to be executed at five specific milestones during a flight: Preflight, Before Takeoff, Midpoint/Cruise, Descent, and Final Approach.

1. Plan: The mission, route, weather forecasts, airspace, fuel requirements, and diversion points.
2. Plane: Mechanical health, system status, fuel tank quantities, avionics functionality, and automation limits.
3. Pilot: Physiological fitness, fatigue, cognitive workload, and single-pilot task saturation.
4. Passengers: Passenger physical comfort, anxiety, medical needs, or distractions/pressures.
5. Programming: Avionics and automation setup: GPS flight plans, approach frequencies, flight director modes, and autopilot altitude preselects.

---

Crew Resource Management, SRM & Automation Management

The ATP knowledge areas add human factors and crew resource management (CRM), including crew communication and coordination (61.155(c)(11)–(13)). CRM is the effective use of all available resources (people, equipment, and information) to achieve a safe flight. Its core skills are communication, situational awareness, workload management, leadership and followership, and decision-making. For single pilots, the FAA uses the term single-pilot resource management (SRM): treating passengers, ATC, Flight Service, checklists, and automation as resources (Risk Management Handbook, FAA-H-8083-2).

The FAA's view of automation is balanced:

• Automation has improved safety, but it also introduces new hazards: mode confusion (not knowing what the autopilot is doing), programming errors, and erosion of hand-flying skill.
• The lighter workload of glass-cockpit instrumentation in cruise can lead to complacency and reduced monitoring, while reprogramming during busy phases of flight can sharply increase workload.
• Good practice: know which mode is engaged ("What is it doing now?"), verify changes aloud, and choose the level of automation that fits the situation, including disconnecting it to hand-fly.

Human error rarely has a single cause. Accidents usually follow a chain of several decisions and events, and ADM, CRM, and SRM training teach pilots to recognize and break that chain early.

---

The Five Hazardous Attitudes & FAA Antidotes

Psychological research conducted by the FAA identified five specific thought patterns—termed hazardous attitudes—that impair operational judgment and dramatically increase accident probability. Every ground instructor must train students to identify these behavioral tendencies instantly and counter them by reciting the exact FAA memory antidote:

Clinical and Instructional Application of Antidotes

Instructors must observe student verbalizations and behavioral cues during flight training. When a student rushes through an engine failure checklist without verifying the fuel selector, the instructor identifies Impulsivity and trains the student to recite: "Not so fast. Think first." When a student rationalizes departing with a broken strobe light because "the FAA won't know," the instructor identifies Anti-Authority and enforces: "Follow the rules. They are usually right."