19.3 Risk Management (AFH-1 Section 17F)

19.3 Risk Management (AFH-1 Section 17F)

Section 17F is how the DAF decides under uncertainty. Mishap prevention (17E) is the program; risk management is the decision-making process that makes that program real in a sortie, a details crew, or a Saturday ride. The testing chart codes 17F at B for Staff Sergeant and Technical Sergeant. AFH 1 (15 February 2025) wants the principles, the two levels, the five steps by name, and the real-time behaviors—including Knock-it-off and Timeout.

RM as a decision process (AFH-1 17.18)

Risk management is a decision-making process designed to systematically evaluate possible courses of action, identify risks and benefits, and determine the best course of action for any given situation. It enables commanders, functional managers, supervisors, and individuals to maximize capabilities while limiting risks through a simple, systematic process for all personnel and functions, on- and off-duty. Appropriate use of RM increases the ability to accomplish the mission while preserving lives and resources.

Two supervisor tools sit inside 17.18 because untrained people cannot run the five steps:

• Safety training is one of the greatest influences on successful mission accomplishment. A highly trained workforce recognizes safety precautions and procedures and adheres to standards that incorporate basic RM. Training may be integrated into task performance training or conducted separately.
• A job safety analysis evaluates each work task not governed by a technical order or other definitive guidance, and it is used when a new work task or process is introduced. Supervisors train, establish work methods and job instructions, assign jobs, and supervise. Before the operation begins and before safety training can take place, supervisors must determine where people may be injured or equipment may be damaged. They are in the best position to identify hazards, assess risks, and correct unsafe practices that would impede mission success.

If the task already has a technical order, you do not invent a parallel JSA to replace the TO. If the task is a new local process with no definitive guidance, the supervisor owes the analysis before people start turning wrenches.

Four principles (AFH-1 17.19)

Four principles govern all RM actions. AFH-1 calls them the cornerstones of effective RM, applicable 24 hours a day, 7 days a week, 365 days a year, by all personnel, for all on- and off-duty activities. Learn the exact names:

1. Accept No Unnecessary Risk. All DAF missions and daily routines involve risk. Unnecessary risk comes without a commensurate return in real benefits or opportunities. The most logical choices meet all mission requirements while exposing personnel and resources to the lowest acceptable risk possible. The DAF is not completely risk averse: even high-risk endeavors may be undertaken when there is a well-founded basis to believe the sum of the benefits exceeds the sum of the costs. Balancing benefits and costs is subjective and tied to mission factors. People with prior knowledge and experience of the mission or activity must be engaged whenever possible.
2. Make Risk Decisions at the Appropriate Level. Anyone can make a risk decision that affects their personal well-being, but some acceptance decisions must be made by an appropriate decision-making authority so resources can be allocated and controls implemented. Making the decision at the right level also establishes clear accountability. Leaders and individuals must know how much risk they can accept and when to elevate. Those accountable for success or failure must be fully engaged in the risk decision.
3. Integrate Risk Management into Operations and Planning at All Levels. Integrate RM into planning as early as possible. That is when you still have room to make informed decisions and field effective controls. Commanders, supervisors, and personnel must dedicate time and resources to put RM into planning, operational processes, and day-to-day work. Assessments work best when they are built deliberately into the normal sequence of events by people directly involved, not as a last-minute add-on. Even in a time-constrained environment, some RM planning is better than none.
4. Apply the Risk Management Process Cyclically and Continuously. RM is continuous across military training and operations, base operations, and on- and off-duty events. The cyclic process continuously identifies and assesses hazards, develops and implements controls, evaluates outcomes, and provides feedback to save lives and preserve combat resources.

The classic wrong answer is “accept no risk.” 17.19 rejects that. The principle is accept no unnecessary risk, and high risk can still be the right call when the benefit truly outweighs the cost and the right person owns the decision.

Two primary levels (AFH-1 17.20)

The two primary RM levels are deliberate and real-time. They are interrelated. They are separated only at the point where planning transitions to execution of the mission or activity. Strong RM is careful deliberative planning coupled with effective real-time RM.

Deliberate risk management may be the full, formal five-step process: thorough hazard identification, detailed data research, diagrams and analysis tools, formal testing, and long-term tracking. It may also be ordinary day-to-day planning that uses the same five steps with less time and fewer resources.

In-depth risk management planning is an aspect of deliberate RM generally associated with strategic-level planning. It is reserved for complex operations and systems and for high-priority, high-visibility situations where hazards are not well understood or easily predictable. It is normally implemented well in advance of the planned system, mission, event, or activity. AFH-1 examples include large troop movements, airshow planning, or tactics and training curricula development. Do not treat “in-depth” as a third primary level; 17.20 names two primary levels and then describes in-depth planning inside deliberate RM.

Five-Step Risk Management Process (AFH-1 17.21 and Figure 17.1)

RM is a continuous, systematic decision process of five steps, primarily associated with deliberate RM planning, and it forms the basis for real-time RM. AFH-1 names the steps as follows.

Step 3’s name on the 2025 handbook is Develop Controls and Make Decisions—not the older “make risk decisions” wording some commercial decks still print. If a stem asks for the five names, use the 17.21 list.

Real-time RM (AFH-1 17.22)

Real-Time Risk Management is a less formal risk assessment that still uses basic RM process steps to identify and mitigate hazards in a new or changing situation. It is founded on the five-step process, but streamlining is essential when decisions must be made quickly.

Identifying and assessing hazards in a time-critical environment typically happens when a planned activity is already underway or when complexity or perceived overall risk is low. A complete real-time assessment still needs three stages of situational awareness in a short time: (a) perception of what is happening, (b) integration of information and goals, and (c) projection into the future. Unlike deliberate RM, success often hinges on discerning the situation and applying available resources quickly.

Developing controls means considering all available resources and how to manage them. Preparation creates redundancies or “blocks”: understanding the situation, being trained, wearing the correct PPE, knowing personal limitations, and having a Wingman. Communicate with the team and leadership so options are actually used.

Communicating may be a call to leadership, crew talk, or an individual pausing to ask whether the plan is still right. Perception and communication degrade under stress; pressure to continue a broken plan produces tunnel vision. Ask who needs to know, who can help or back up, and whether the task can be done differently.

Making decisions in real time is riskier than deliberate RM because the who / what / when / where / cost package is not fully built first. Still weigh options. Implementing controls may mean modifying the plan; some changes need higher authority if available. People in the activity own Go/No-Go limits. Abandon the mission or activity if it is too risky or too costly and no reasonable option remains. Supervising and evaluating still closes the loop: debrief what worked, what did not, and disseminate lessons.

Knock-it-off and Timeout

Integral to real-time RM are Knock-it-off and Timeout during an ongoing operation or activity. Either term tells everyone to stop, reset, and reevaluate. Key rules from AFH-1:

• All Airmen and Guardians, regardless of rank or position, are empowered to use these terms without fear of repercussions.
• When either term is used, all current actions are immediately halted, and the situation is stabilized to a safe position so the concern can be evaluated. This is nonnegotiable and cannot be overridden by command authority.
• After the call, decide whether the action may continue safely, requires change, or must be terminated.
• The alerts do not permanently freeze the mission once safety and risk concerns are addressed; they give everyone a way to intervene immediately in an evolving hazard.

A Staff Sergeant who sees a tow crew backing toward an unchocked aircraft calls Timeout even if a Major is waving them on. A Technical Sergeant who talks over Knock-it-off is violating 17.22, not showing command presence. Before execution, the supervisor runs deliberate RM on new local processes; once the job is underway, the same NCO switches to real-time RM when weather, tools, or timeline change—and anyone on the crew can stop the evolution.