vaayaa Inclusive Education
Industrial risk assessment

Aerospace and Defense Manufacturing Risk Assessment: Specification, Process and Supplier Controls

A worked example of how a precision manufacturing site identifies, scores and controls risks to part conformity, machine and chemical safety, people, supplier quality and controlled technical data in aerospace and defense work.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Aerospace and Defense Manufacturing course

Executive summary

This assessment shows how a precision manufacturing site can find, score and control the risks that matter most to part conformity, people and trust in its work. Eight risks were chosen because they are plausible in machining, surface treatment, assembly, testing and supplier management. Component failure from a hidden defect scores highest before controls, because its consequences are serious even though it is not the most frequent. Specification mismatch, machine hazards, chemical exposure and assembly error also score High before controls. Most risks fall to Medium or Low once existing and added controls are in place, but component failure stays at Medium because its impact remains severe. The first actions are linking programs to current drawing revisions, completing material traceability, verifying guards and interlocks, and classifying controlled data. The site is a teaching example, so every score illustrates method, not a real organization.

Focus area
Aerospace and defense manufacturing
Setting
Precision machining, assembly and test site supplying aerospace and defense components to a prime contractor
Method
Five by five likelihood and severity risk register with inherent and residual scoring

Scope

This assessment covers a single precision manufacturing site that machines, treats, assembles and tests aerospace and defense components. It covers hazards to part conformity, people, equipment, chemicals, electrical systems, supplier quality and controlled technical data. It does not cover end use, operational deployment or any real program. Assumed: the site makes parts to customer drawings under a quality system, jurisdiction is not specified, and all named roles are illustrative.

Context

The site has three machining cells with multi-axis mills and lathes, a surface treatment line using acid and solvent baths, a composite layup area, an assembly bench, and a test bay with power supplies and pressure rigs. Work follows customer drawings and approved processes, with first article inspection and a measuring room. Some parts are sourced from external forgings and castings. Each risk is scored before controls to show its natural level, then after existing controls and the additional controls proposed.

Objectives, assets and stakeholders

The objective is to deliver parts that conform to approved specifications, protect people and the environment during manufacture and testing, meet export and quality duties, and keep the trust of customers and the prime contractor. The assets in scope are machines and fixtures, controlled drawings and program files, raw material and certified stock, the test rigs, the chemical inventory and the site reputation. Stakeholders include production and quality staff, managers and the site director, customers and their assessors, suppliers and their sub-tier sources, neighbors near the site, and the regulators who oversee safety, environmental and export matters. Every risk has one owner role, and the site director receives a quarterly summary of the register.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H06 Likelihood 4, impact 4, score 16, high: H01 H03 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 4, score 12, high: H04 Likelihood 3, impact 5, score 15, high: H05 H07
2 Unlikely Likelihood 2, impact 5, score 10, high: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 3, score 6, medium: H01 H03 H04 H06 Likelihood 2, impact 4, score 8, medium: H02 H07
1 Rare Likelihood 1, impact 4, score 4, low: H05 H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Specification mismatch and nonconforming parts 16 High 6 Medium Quality manager
H02 Component failure from a hidden manufacturing defect 20 Critical 8 Medium Manufacturing engineering manager
H03 Machine tool and mechanical hazards 16 High 6 Medium Site health and safety manager
H04 Chemical exposure from surface treatment and composites 12 High 6 Medium Environmental and chemical safety lead
H05 Electrical hazards in test rigs and power systems 15 High 4 Low Electrical engineering supervisor
H06 Procedural deviation and human error in assembly 12 High 6 Medium Assembly supervisor
H07 Supplier quality and counterfeit or unapproved parts 15 High 8 Medium Supplier quality engineer
H08 Controlled technical data and export compliance 10 High 4 Low Export compliance officer
H01

Specification mismatch and nonconforming parts

Operational Before 16 After 6

A part is machined or inspected against an outdated drawing, wrong revision or misread tolerance, so dimensions or material fall outside the approved specification and reach assembly or a customer.

Who or what is affected: Assembly staff, inspectors, customers and end users of the assembly

Causes

Revision changes that are not communicated, manual program edits and tolerances that are read differently by different people.

Consequences

Scrap, rework, delayed deliveries, rejected assemblies and loss of customer approval.

Existing controls

  • Drawings are controlled and issued from a document register.
  • First article inspection is carried out before each production run.

Control gaps

Paper copies remain on the shop floor and programs are edited without a revision check.

Additional controls

  • Prevent: Remove paper copies and link machine programs to the current drawing revision in the controlled system.
  • Detect: Sample check each batch against the drawing with calibrated gauges and record any deviations found.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Quality manager Target: Within 30 days Early warning: A batch rejected at inspection for a dimension that matches an older drawing revision.
H02

Component failure from a hidden manufacturing defect

Safety Before 20 After 8

A hidden defect such as a crack, porosity, surface damage or heat treatment error goes undetected and later causes a part to fail in an assembly, with a serious effect on safety of flight or equipment operation.

Who or what is affected: Operators, aircraft and vehicle crews, maintenance staff and the public near operations

Causes

Process drift in heat treatment or plating, inclusions in raw material and inspection that relies on a small sample.

Consequences

Field failure, grounding or recall, serious injury, contract penalties and loss of approval.

Existing controls

  • Critical features are inspected using non-destructive test methods on a set sample.
  • Heat treatment is run to approved recipes with logged temperature records.

Control gaps

Traceability from raw material lot to finished part is incomplete for older batches.

Additional controls

  • Prevent: Qualify each special process and its operators against the approved process specification before use.
  • Respond: Quarantine all parts from the same lot when a defect is found and trace them to every assembly.
  • Detect: Review failure and rework data monthly to find trends in defect type, machine or material.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Manufacturing engineering manager Target: Within 60 days Early warning: Repeat defects of the same type from one process, machine or material lot within a month.
H03

Machine tool and mechanical hazards

Safety Before 16 After 6

Operators are struck by rotating spindles, moving axes, swarf or released workpieces, or are trapped during setup, cleaning or maintenance while guards or interlocks are bypassed.

Who or what is affected: Machine operators, setters and maintenance technicians

Causes

Guards removed to speed up setup, rushed loading and gaps in lockout training.

Consequences

Crush injuries, amputations, lost time and enforcement action.

Existing controls

  • Machines have fixed guards and door interlocks.
  • Lockout and tagout procedure applies to all maintenance work.

Control gaps

Interlock checks are not logged, and contractors are not included in lockout briefings.

Additional controls

  • Prevent: Fit light curtains or area guarding where manual loading occurs and remove any bypass keys from the site.
  • Detect: Check interlock function and guard condition at the start of each shift and log the results.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Site health and safety manager Target: Within 30 days Early warning: A guard or interlock found bypassed, or a lockout tag removed without authority.
H04

Chemical exposure from surface treatment and composites

Safety Before 12 After 6

Staff handle acids, alkaline cleaners, solvents, plating chemicals and uncured resins, and vapors, splashes or skin contact cause harm, while spills reach drains or waste streams.

Who or what is affected: Process operators, cleaners, laboratory staff and neighboring residents exposed through air or water releases

Causes

Worn extraction, mixing errors, chemicals decanted into unlabeled containers and waste stored too long.

Consequences

Chemical burns, respiratory harm, contamination of water, fines and remediation cost.

Existing controls

  • Chemicals are stored in labeled, bunded cabinets with a current inventory.
  • Local exhaust ventilation is fitted at each bath and layup station.

Control gaps

Extraction airflow is checked only at commissioning, and drain valves are not tested.

Additional controls

  • Respond: Keep spill kits and a trained response team on every shift, with a drain isolation valve tested each month.
  • Prevent: Substitute solvents with lower hazard options where the approved process allows, after engineering review.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Environmental and chemical safety lead Target: Within 45 days Early warning: An unlabeled container or extraction reading below the set airflow at any station.
H05

Electrical hazards in test rigs and power systems

Safety Before 15 After 4

Live parts in test bays, stored energy in power supplies and capacitors, and damaged leads expose staff to electric shock or arc flash, and faults can start fires near flammable materials.

Who or what is affected: Test engineers, electricians, maintenance staff and visitors

Causes

Wiring modifications without review, damaged leads and stored energy left after shutdown.

Consequences

Electric shock, burns, arc flash injury, equipment fire and production loss.

Existing controls

  • Test bay supplies are fitted with emergency stops and residual current protection.
  • Only authorized electricians carry out work on live equipment.

Control gaps

Stored energy discharge is not verified before work on capacitor banks.

Additional controls

  • Prevent: Specify arc rated clothing and insulated tools for any task near energized parts, based on a site hazard study.
  • Detect: Test insulation and earth continuity on portable leads and record each result.
  • Recover: Keep a fire response plan for electrical fires in the test bay and rehearse it each year.
Likelihood 3 x impact 5 before; 1 x 4 after Owner: Electrical engineering supervisor Target: Within 30 days Early warning: A failed insulation test or a lead found with a damaged sheath at routine inspection.
H06

Procedural deviation and human error in assembly

People Before 12 After 6

Torque values, fastener sequence, sealant cure time or cleanliness steps are skipped or changed under time pressure, so the assembly passes inspection but does not meet its specification.

Who or what is affected: Assembly technicians, inspectors and downstream customers

Causes

Schedule pressure, unclear instructions, training gaps and reliance on memory for long sequences.

Consequences

Loose or damaged assemblies, rework, rejected lots and possible in service failure.

Existing controls

  • Work instructions are displayed at each station with sign-off.
  • Torque tools are calibrated and their settings logged each shift.

Control gaps

Sign-off is completed in batches at the end of shift rather than at each step.

Additional controls

  • Prevent: Use error proofed fixtures and tools that accept only the approved torque setting and fastener sequence.
  • Detect: Audit a sample of completed assemblies against the work instruction each week and report deviations.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Assembly supervisor Target: Within 45 days Early warning: Repeated deviations from work instructions found in audit at one station or shift.
H07

Supplier quality and counterfeit or unapproved parts

Supplier Before 15 After 8

A supplier substitutes material, skips a process step, uses unapproved sub-tier sources or supplies counterfeit or used parts with forged certificates, so nonconforming material enters the product.

Who or what is affected: Quality staff, production staff, customers and end users

Causes

Price pressure, long supply chains, single sources and certificates accepted without verification.

Consequences

Field failure, regulatory action, customer claims and loss of approval.

Existing controls

  • The approved supplier list is reviewed each year against performance data.
  • Incoming material is checked against the certificate of conformance.

Control gaps

Sub-tier sources are not known for raw materials bought through distributors.

Additional controls

  • Prevent: Require sub-tier source disclosure and flow down approved process requirements in every purchase order.
  • Detect: Verify material certification by independent test on a risk based sample at receipt.
  • Respond: Stop use and notify the customer if a certificate is found to be unreliable.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Supplier quality engineer Target: Within 60 days Early warning: A certificate that cannot be matched to its issuing laboratory, or a sudden change of sub-tier source.
H08

Controlled technical data and export compliance

Legal and compliance Before 10 After 4

Drawings, technical data and program files covered by export or access restrictions are shared with unauthorized people, stored on unmanaged devices or sent overseas without the required licence check.

Who or what is affected: Engineers, IT staff, export licensing staff, customers and partner companies

Causes

Unclassified files, personal email use, file sharing with partners and staff not trained on the rules.

Consequences

Penalties, loss of export privileges, contract loss and reputational damage.

Existing controls

  • Controlled data is stored in access restricted folders with named users.
  • Visitors sign in and are escorted in engineering areas.

Control gaps

Classification of older drawings is incomplete, and access logs are not reviewed.

Additional controls

  • Prevent: Classify each drawing for export status before release and block download for users not on the list.
  • Respond: Report any suspected unauthorized release to the export compliance officer within one working day.
Likelihood 2 x impact 5 before; 1 x 4 after Owner: Export compliance officer Target: Within 90 days Early warning: A controlled file downloaded from an unmanaged device or sent to an address outside the approved list.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and severity runs from Negligible to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Low risks are accepted and monitored, Medium risks need routine controls with a named owner, High risks need senior attention and a dated plan, and Critical risks need immediate action, with work stopped where needed until controls are in place. Inherent risk is the score before any controls. Residual risk is the score after existing and added controls. Residual score must never be higher than inherent, and any risk with an inherent score of 10 or more must show a lower residual score. Severity is judged on harm to people, damage to assets, effect on conformity and approval, environmental release and harm to trust, and a safety or conformity risk is never rated down only because it has not yet happened. The people who do the work should challenge the ratings, and each rating is reviewed whenever a monitoring indicator reaches its escalation point or a new hazard appears.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Batches rejected at inspection for dimensions that match an outdated drawing revision.Escalate to the quality manager at once when two batches in a month are rejected, and to the site director if a customer is affected.
Repeat defects of the same type from one process, machine or material lot.Escalate to the manufacturing engineering manager when two repeats occur within a month, and hold affected lots pending review.
Guards or interlocks found bypassed, or lockout tags removed without authority.Escalate to the site health and safety manager at once, stop the machine, and report to the site director within one day.
Unlabeled chemical containers or extraction readings below the set airflow.Escalate to the environmental and chemical safety lead at once and stop the station until readings are restored.
Controlled files downloaded from unmanaged devices or sent outside the approved list.Escalate to the export compliance officer within one working day, and to the legal adviser if a release is confirmed.

Contingency arrangements

If a nonconforming part reaches a customer, or a confirmed defect is found in service, the quality manager stops shipment, quarantines all related lots and informs the customer as the contract requires. The manufacturing engineering manager traces every affected assembly and leads containment. A chemical spill or electrical fault triggers the site response plan, with the environmental lead and the electrical supervisor isolating the source and calling emergency services where needed. Export concerns are reported to the export compliance officer, who decides on notification with specialist advice.

Prioritized action plan

  1. Link machine programs and inspection to the current drawing revision and remove paper copies, owner quality manager, within 30 days.
  2. Verify all guards and interlocks and extend lockout training to contractors, owner site health and safety manager, within 30 days.
  3. Complete traceability from raw material lot to finished part for all critical components, owner manufacturing engineering manager, within 60 days.
  4. Qualify special process operators and log extraction airflow at each chemical station, owner environmental and chemical safety lead, within 45 days.
  5. Classify controlled technical data and restrict download to listed users, owner export compliance officer, within 90 days.

Conclusion

Reliable manufacture depends on a few steady habits: current drawings at every station, traceable material, verified guards and interlocks, sign-off at each step and checked supplier certificates. The highest scores sit with hidden defects, specification mismatch and machine hazards, and each has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek qualified engineering, safety, export and legal advice for any real program or regulated decision.

Assumptions and limitations

Assumptions

  • The site operates a documented quality management system and all parts are made to approved drawings and process instructions.
  • Jurisdiction is not specified, so legal duties are described in general terms and must be confirmed locally.
  • Staff are trained for their machines and chemicals, and external suppliers hold their own quality approvals.

Limitations

  • The scores are examples for learning and do not describe any real site, product or customer program.
  • Aerospace, defense, export and product safety rules are specialized and change over time, so specialist review is needed.
  • This educational assessment does not replace a formal site-specific risk assessment or licensed engineering, legal or safety advice.

Related frameworks to study

  • Failure mode and effects analysis
  • Hierarchy of controls
  • Three lines model of risk ownership
  • Bow tie analysis of hazard and consequence

Industrial Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Aerospace and Defense Manufacturing course Read the best practices for this course

More Industrial risk assessments

Hourly Active: 40,745 Learners