IRImplementing rule
12.2Appendix 2: List of operational hazards for ATC services
Table 2 below lists the operational hazards and the operational effects for the ATC services, as derived from the SESAR safety work, performed in the framework of the SESAR JU programme. They are valid in the context of both single mode of operation as well as multiple mode of operation. However, it should be noted that the list of operational hazards was developed for the specific operational applications and context that was studied and using the specific methodology as described in the SESAR safety assessment reports [27], [31] and [34]. Therefore, if using this list as initial input, it needs to be adapted as necessary, taking into account the local conditions and the operational application and context of the particular implementation as well as the addition of potential system hazards. Table 2: List of operational hazards (SESAR safety assessment — ATC case)
| ID | Description | Operational effects |
|---|---|---|
| OH-01 | Remote ATC incorrectly coordinates with other ATS unit with respect to inbound/outbound traffic. | A potential conflict can be induced. Imminent infringement. |
| OH-02 | Remote ATC incorrectly manages the entry of a flight into traffic circuit. | A potential conflict can be induced. Imminent infringement. |
| OH-03 | Remote ATC incorrectly manages arriving aircraft. | A potential conflict can be induced. Imminent infringement. |
| OH-04 | Remote ATC incorrectly manages departing aircraft. | A potential conflict can be induced Imminent infringement |
| OH-05 | Remote ATC fails to provide appropriate separation to traffic in the vicinity of the aerodrome. | Imminent infringement. |
| OH-06 | Remote ATC fails to provide appropriate separation to traffic with respect to restricted areas. | Tactical conflict. |
| OH-07 | Remote ATC incorrectly manages missed approach situation. | Imminent infringement. |
| OH-08 | Remote ATC does not detect in time conflicts/ potential collision between aircraft in the vicinity of the aerodrome. | Imminent collision. |
| OH-09 | Remote ATC does not detect in time restricted area infringements. | Tactical conflict. |
| OH-10 | Remote ATC fails to provide appropriate instruction to resolve a conflict between traffic in the vicinity of the aerodrome. | Imminent collision. |
| OH-11 | Remote ATC fails to provide appropriate instruction to resolve an airspace infringement. | Tactical conflict. |
| OH-12 | Remote ATC fails to provide appropriate information to departing aircraft for the start-up. | Tactical taxiway conflict generated. |
| OH-13 | Remote ATC fails to enable push-back/towing operations to appropriate aircraft. | Tactical taxiway conflict generated. |
| OH-14 | Remote ATC provides inadequate taxiing instruction to aircraft on the manoeuvring area. | Encounter with aircraft, vehicle or obstacle. |
| OH-15 | Remote ATC provides inadequate taxiing instruction to vehicle on the manoeuvring area. | Encounter with aircraft, vehicle or obstacle. |
| OH-16 | Remote ATC does not detect in time potential conflict on the manoeuvring area. | Imminent collision. |
| OH-17 | Remote ATC fails to provide appropriate instruction to resolve conflicts on the manoeuvring area. | Imminent collision. |
| OH-18 | Remote ATC fails to provide (appropriate) navigation support to aircraft and vehicle on the manoeuvring area. | Tactical taxiway conflict generated. |
| OH-19 | Remote ATC incorrectly manages runway entry for a departing aircraft (occupied runway). | Runway conflict. |
| OH-20 | Remote ATC incorrectly manages runway exit for a landing aircraft. | Runway conflict. |
| OH-21 | Remote ATC incorrectly manages runway crossing (occupied runway) for a vehicle or an aircraft. | Runway conflict. |
| OH-22 | Remote ATC fails to properly support departing and landing aircraft (with respect to visual aids). | Runway conflict. |
| OH-23 | Remote ATC incorrectly manages vehicle-related tasks on the runway. | Runway conflict. |
| OH-24 | Remote ATC incorrectly manages aircraft take-off (occupied runway). | Runway conflict. |
| OH-25 | Remote ATC incorrectly manages aircraft landing (occupied runway). | Runway conflict. |
| OH-26 | Remote ATC fails to detect in time runway incursions (aircraft or vehicles). | Runway penetration. |
| OH-27 | Remote ATC fails to provide appropriate instruction to resolve runway incursion and prevent potential collision on the runway. | Runway penetration. |
| OH-28 | Remote ATC fails to detect in time a flight towards terrain in the vicinity of the aerodrome. | Imminent controlled flight into terrain (CFIT). |
| OH-29 | Remote ATC fails to provide appropriate support to pilot in a CFIT situation. | Imminent CFIT. |
| OH-30 | Remote ATC fails to establish sufficient wake-turbulence spacing between aircraft. | Turbulence in front of the aircraft at a distance less than the separation minima. |
| OH-31 | Remote ATC fails to properly support landing/ take-off operations with respect to weather conditions. | Potential landing accident/runway excursion. |
| OH-32 | Remote ATC fails to properly support landing/ take-off operations with respect to runway conditions and potential foreign object debris. | Potential landing accident/runway excursion. |
| OH-33 | Remote ATC fails to properly support departing and arriving aircraft on the runway with respect to non-visual aids. | Potential landing accident/runway excursion. |
| OH-34 | Remote ATC fails to detect in time an intrusion inside landing-air protection area. | Potential landing accident/runway excursion. |
| OH-35 | Remote ATC fails to provide appropriate ATC services with respect to operational environment conditions on the aerodrome and its vicinity. | This hazard is already covered by more detailed hazards already identified above, potentially inducing conflicts in the vicinity of the aerodrome or on the manoeuvring area due to inappropriate understanding of the operational environment conditions. This hazard is related to all other hazards EXCEPT: OH-01, OH-08, OH-09, OH-13, OH-16, OH-26, OH-28, OH-34. |
| OH-36 | ATC resources are incorrectly managed in the RTC for the remote provision of ATC services. | In case a controller has to manage more traffic than expected, the controller workload could be negatively impacted and so the capability to provide ATC services. This hazard is to be considered as part of ALL the other hazards in which controller errors are a potential cause. |
| OH-37 | Remote ATC fails to provide appropriate ATC services due to inappropriate capability of the remote tower system. | This hazard is already considered as part of ALL other hazards already identified above in which equipment failure/errors are potential causes, potentially inducing conflicts in the vicinity of the aerodrome or on the manoeuvring area. |
IR · 12.2 — GM to Regulation (EU) 2017/373 · ED Decision 2019/004/R · Remote ATS Easy Access Rules · EAR revision 26 Jan 2026