Friday, September 28, 2007

Airspace & Risk

At the IFATCA annual conference held in Istanbul Turkey in April 2007 IFATCA amended it’s policy regarding ATC at aerodromes; the policy now reads:

Air Traffic Control service shall be provided at aerodromes that:
have published IFR approach, departure or holding procedures, and where control is required for the safety of air traffic.
for VFR operations, where required to ensure that appropriate safety levels are met.

I find the policy to be incredibly non descriptive about the airspace classifications, levels of ATC service and that there essentially are no ‘trigger points’ to which allude to levels of safety.

In Australia we are having a ongoing debate about airspace classifications in general then whether a UNICOMs/CAGRO, ATC tower services ranging from GAAP (similar to the VFR TWR model), to Class D (regional towers), to Class C tower services (provided at capital cities). See the recent debates about AVALON.

In Australia we have 3 prominent examples of UNICOM/CAGRO services, Ayres Rock, Broome and Jandakot Tower (outside tower hours). These have all proved to be successful in increasing safety, based on the lack of available statistics to prove otherwise; but are they "safe enough"? Is the Unicom/Cagro as safe and as cost effective as a GAAP or regional Class D tower? Is there another way? Is it safer, see below about vigilance.

Australia has much Class E airspace ‘rolled out’ progressively since about 1998; the majority of this Class E is outside radar or ADS-B surveillance.

The benefit of Class E for IFRs is like Class D/C/A they are separated from other IFRs; however there is no requirement for VFRs to be known to the system when flying in Class E. It is up to the pilot of a VFR to comply with the Visual Flight Rules and remain in VMC, and adjust course as necessary to avoid IFR operations; this may include avoiding IFR routes; this doesn't always happen, but to what consequence?

How does a VFR avoid an IFR route; obviously if operating to a particular aerodrome there is no opportunity to avoid the destination; if however flying via GPS (or VFR direct) point A to point B, cross referencing to the IFR routes is next to impossible; similarly many VFR points ‘closely replicate’ IFR tracking points; thus encourage the VFRs to be at the same place as IFRs.

Thinking back to the IFATCA policy above, “ensure that appropriate safety levels” and “is required for the safety of air traffic” whilst both of these are great motherhood statements they don’t describe the when, how’s and why’s about safety.

Safety is about managing risk. Risk is present in everything we do; minimising the effect of that risk essentially becomes managing safety. In simple terms lowering the speed limit on a road is reducing risk, but only if you have compliance to the limit. A without "cause" reduction is more likely to increase non-compliance thus not altering the risk; enforced compliance helps.

Statistically the most dangerous phase of flight is landing and departure; this is because this is the phase of flight (logically) where contact with the ground is present; improper contact causes injury and damage.

In terms of airspace risk the most dangerous area of sky is close to the runway, because that is where the concentration of traffic is likely to occur; i.e. the planes want to use the runway; and often it’s only one runway.

That does not mean no risk in other areas of sky.

The risk of collision in the middle of Australia at 5500 feet (in class G) is “vanishingly small”; that doesn’t mean no risk just really really low; it assumes that there is compliance; i.e. VFR aeroplanes will ‘see and avoid’ other aircraft and that due to the density and size of the airspace available compared to the ‘footprint’ of the aeroplanes involved it is statistically improbable to think that two random events (trajectories of aeroplanes) could intersect at the collision point together. This is often referred to as "BIG SKY THEORY".

Things that conspire against BIG SKY THEORY; GPS accuracy, height locks in aeroplanes, Restricted Area avoidance, terrain avoidance, bad weather, towns, aerodromes, topographical features, ERC routes. All these things add up to increase the risk; yet at 5500 feet in the ‘middle of nowhere’ the risk of hitting another aircraft is still “vanishingly small”; this is because compliance still applies, aircraft should be operated by ‘trained’ pilots; who have received training in VFR and/or IFR flying, there are rules designed to segregate aircraft flying on the same track (or hemispheric track); crossing tracks makes it trickier; TCAS, visual reference, radio calls all make flying in Class G safer; avoiding IFR routes or way-points (if VFR) etc.

Which brings me back to when is ATC ‘required’; Air Traffic Control improves safety of flight, because conflictions should be avoided (ground and aircraft conflictions); but that is dependant on airspace classification Class E doesn’t provide a VFR with any form of protection above that of Class G; in fact it could be argued that Class G is safer as IFRs (probably the most likely confliction) are more vigilant in Class G without ATC ‘protection’ than in Class E with ATC ‘protection”, they conflict with “unknown unknowns”.

Surveillance greatly mitigates against that risk, because the VFRs can be seen “known unknowns” and thus the IFRs alerted, the VFR may hear the IFR getting the information and thus themselves become more aware; the controller is working in less difficult conditions when surveillance is available and is less concentrating on “proving the standards” being used between IFRs and providing a service to them.

Class D and Class C airspace provide extra protection; as the only elements able to use the airspace are known to the system (air traffic controller). This doesn’t mean no risk, just less risk; “known knowns”; but that assumes compliance.

Aircraft often ‘penetrate’ restricted or controlled airspace without clearance; this is usually due to pilot error, but sometimes it is deliberate non-compliance. The only place where these ‘penetrations’ are recorded and reported is where surveillance in available; or where a controller or pilot visually sees the non-compliance and reports it. There are approximately 1000 penetrations of control or restricted areas each year; many of these lead to conflictions with other aircraft, where the ATC or pilot may not even be aware of the other aircraft; or it's simply avoiding action only.

It’s not as simple in saying then make everything Class D or Class C or higher; there is a trade-off in capacity when increasing safety; this also comes at great cost. Equipment, controllers etc. all add up to increase the costs associated with increasing risk mitigation. Capacity is often reduced when increasing service as 'standards must be used'.

Remember that Class G in the “middle of nowhere” the risk is “vanishingly small”; but that doesn’t mean no risk.

No comments: