vaayaa Inclusive Education
Technical risk assessment

Automotive and Aerospace Engineering Risk Assessment: Design, Test and Supplier Controls

A worked example of how an engineering team finds, scores and controls risks in vehicle and aircraft component design, testing, assembly and supply, from structural failure and battery hazards to specification mismatch and record errors.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Automotive and Aerospace Engineering course

Executive summary

This assessment shows how a design and test facility for automotive and aerospace components can find, rate and control the risks that matter most to safety, product integrity and programme delivery. Eight hazards were selected because they are plausible in everyday engineering work, from structural and component failure under load to battery thermal events, procedural deviation at test rigs, specification mismatch with suppliers, weak maintenance of test equipment, composite and chemical exposure, errors in design records and gaps in compliance duties. Each risk is scored before controls and again after existing and added controls. The highest inherent score is a Critical structural failure risk, which falls to Medium after verification and independent review. Several risks reach Low or Medium residual scores, but battery and structural hazards stay Medium because the consequence remains severe. The first actions are a verified test plan, a supplier first article check, a high voltage isolation procedure and a controlled record system. Every score illustrates method, not a real organization.

Focus area
Automotive and aerospace engineering design, test and manufacture
Setting
Engineering design, prototype test and assembly facility supplying automotive and aerospace components
Method
Five by five likelihood and impact risk register with inherent and residual scoring

Scope

This assessment covers a design and test facility that develops, tests and assembles components for road vehicles and aircraft, including structures, electrical systems, battery packs, test rigs and supplier parts. It covers risks to people, assets, records and programme outcomes. Jurisdiction, the certification regime, site layout and vehicle or aircraft type are not specified and are treated as assumptions for teaching.

Context

The facility has a chief engineer, design engineers, test technicians, a quality lead, a maintenance team and purchasing staff. Work includes computer aided design, finite element analysis, component testing on hydraulic and vibration rigs, high voltage battery pack trials, composite layup and metal machining. Some parts come from external suppliers under agreed specifications. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to deliver components that meet their specified performance and safety requirements, protect people during design, test and assembly, avoid rework and delay, and keep the trust of customers, certifying bodies and the public. The assets in scope are test rigs and cells, battery packs and high voltage equipment, composite and metal parts, computer aided design models and calculation files, supplier documents and the facility itself. Stakeholders include engineers, technicians, the quality team, maintenance staff, suppliers, programme managers, customers, regulators and the people who will ride in or fly the products. Each risk has one owner role, and the chief engineer reviews the register each month and reports to the programme board at each milestone.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H03 Likelihood 4, impact 4, score 16, high: H07 Likelihood 4, impact 5, score 20, critical: H01
3 Possible Likelihood 3, impact 2, score 6, medium: H05 Likelihood 3, impact 3, score 9, medium: H04 Likelihood 3, impact 4, score 12, high: H08 Likelihood 3, impact 5, score 15, high: H02
2 Unlikely Likelihood 2, impact 4, score 8, medium: H06
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H04 Likelihood 2, impact 3, score 6, medium: H03 H07 H08 Likelihood 2, impact 4, score 8, medium: H01 H02
1 Rare Likelihood 1, impact 2, score 2, low: H05 Likelihood 1, impact 3, score 3, low: H06
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Structural failure of components under load 20 Critical 8 Medium Chief engineer
H02 High voltage battery thermal event 15 High 8 Medium Test lead
H03 Specification mismatch in supplier parts 12 High 6 Medium Quality lead
H04 Procedural deviation during testing and assembly 9 Medium 4 Low Test lead
H05 Maintenance and calibration lapses in test equipment 6 Medium 2 Low Maintenance lead
H06 Composite resin and chemical exposure 8 Medium 3 Low Environmental and safety officer
H07 Design record and configuration errors 16 High 6 Medium Engineering manager
H08 Non-compliance with safety and certification duties 12 High 6 Medium Compliance lead
H01

Structural failure of components under load

Safety Before 20 After 8

A bracket, suspension arm, wing rib or mounting fails under fatigue, vibration or peak load during test or service, because the design margin, material data or load case was wrong.

Who or what is affected: Test technicians, drivers, passengers, pilots and maintainers

Causes

Incorrect load case, material data taken from a generic source, and design margins reduced to save weight.

Consequences

Injury to people, loss of a vehicle or aircraft, recall, programme delay and legal liability.

Existing controls

  • Design calculations are checked by a second engineer before release.
  • Prototype parts are proof tested to a load case before fitting.
  • Load cases are listed in the design brief.

Control gaps

Load cases are not revisited after design changes, and fatigue testing is sampled rather than complete.

Additional controls

  • Prevent: Require a verified finite element model and a documented margin of safety before any safety-critical part is built.
  • Detect: Inspect fatigue cracks and strain gauge results after each test block against the acceptance limit.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Chief engineer Target: Within 45 days Early warning: A strain or crack reading that exceeds the expected value for the load case.
H02

High voltage battery thermal event

Safety Before 15 After 8

A high voltage battery cell overheats, short circuits or vents during charge, discharge or abuse testing, releasing heat, gas and flame, because cell defects, overcharge or a failed thermal sensor are not detected in time.

Who or what is affected: Test technicians, nearby staff, emergency responders and the facility

Causes

Cell defects, incorrect charging profile, damaged packs and unsealed test enclosures.

Consequences

Burn injury, fire, toxic gas exposure, equipment loss and a halted programme.

Existing controls

  • Test cells are fitted with temperature sensors and a fire suppression system.
  • Battery work is restricted to trained staff in a marked bay.
  • Cells are sourced with incoming inspection records.

Control gaps

Sensor checks are done at the start of the day only, and the response plan has not been rehearsed since its last update.

Additional controls

  • Prevent: Run battery tests with a controlled charge profile and a charge limit set by an independent engineer.
  • Respond: Hold a written thermal event response plan with evacuation routes and practised emergency contacts.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Test lead Target: Within 30 days Early warning: Cell temperature rising faster than the test profile allows during charge.
H03

Specification mismatch in supplier parts

Supplier Before 12 After 6

A supplied bracket, seal, harness or composite panel differs from the drawing in material, dimension or tolerance, so it fits poorly, performs below its rating or fails the design intent, and the difference is not spotted at receipt.

Who or what is affected: Assembly staff, design engineers, purchasing and end users

Causes

Drawing revisions that are not received, unclear tolerances and supplier process changes made without notice.

Consequences

Rework, field failure, warranty cost, supplier dispute and reduced trust in the product.

Existing controls

  • Suppliers provide a certificate of conformity with each batch.
  • Drawings are issued through a controlled supplier portal.
  • Incoming samples are checked for dimensions by a technician.

Control gaps

Certificates are accepted on paper without checks, and dimensional checks are limited to a sample of parts.

Additional controls

  • Detect: Run a first article inspection against the full drawing for every new supplier part before production use.
  • Prevent: Include tolerances and material call outs in the supplier contract and require notice of any process change.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Quality lead Target: Within 60 days Early warning: Supplier parts received without a completed first article inspection record.
H04

Procedural deviation during testing and assembly

People Before 9 After 4

A technician skips a step in a test or assembly procedure, uses an outdated revision, or rushes a torque or set-up check because of schedule pressure, so a rig, part or person is put at risk.

Who or what is affected: Test technicians, assembly staff and nearby colleagues

Causes

Schedule pressure, fatigue, unclear steps and procedures that are long and hard to follow.

Consequences

Injury, damage to a rig or part, invalid test results and repeated work.

Existing controls

  • Test and assembly work follows written procedures signed by the test lead.
  • Torque tools are set and logged at the start of each shift.
  • Staff are trained and assessed on each procedure before working alone.

Control gaps

Procedure revisions are not tracked at the bench, and sign off is often completed after the test rather than before.

Additional controls

  • Prevent: Place procedures on a controlled document system so only the current revision can be opened at the bench.
  • Respond: Allow any person to stop a test without penalty when a step is unclear or unsafe.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Test lead Target: Within 30 days Early warning: Test runs started where the procedure sign off or a set-up check is missing.
H05

Maintenance and calibration lapses in test equipment

Operational Before 6 After 2

A load cell, pressure sensor, hydraulic actuator or vibration table drifts out of calibration or fails because planned maintenance is overdue, so test results are wrong and the rig may release stored energy.

Who or what is affected: Test technicians, design engineers and programme managers

Causes

Overdue planned maintenance, equipment used past its due date and seals that wear unnoticed.

Consequences

Invalid test data, unsafe rig failure, repeated tests and decisions made on wrong figures.

Existing controls

  • Calibration labels show the due date on each instrument.
  • Maintenance is scheduled in a shared calendar.

Control gaps

Calibration status is not checked before a rig is booked, and wear items are changed only after failure.

Additional controls

  • Detect: Run a reference check against a known standard artefact before each major test series.
  • Recover: Re-test any results taken from an instrument found out of calibration since its last good check.
Likelihood 3 x impact 2 before; 1 x 2 after Owner: Maintenance lead Target: Within 30 days Early warning: Overdue calibration or maintenance on a rig or measuring instrument.
H06

Composite resin and chemical exposure

Environmental Before 8 After 3

Resin, hardener, cleaning solvent and cutting dust from composite layup and machining are inhaled, absorbed or released to drains, and waste is stored or disposed of without the right controls.

Who or what is affected: Composite technicians, machinists, cleaners and nearby neighbours

Causes

Open mixing, poor extraction, worn respirators and spills during cleaning.

Consequences

Skin and respiratory harm, contamination of drains, fines and damage to the local area.

Existing controls

  • Chemical substances are stored in labelled cabinets with a register.
  • Extraction is fitted to the machining area.
  • Protective gloves and respirators are issued for layup work.

Control gaps

Extraction is not tested at intervals, and respirator fit checks are not recorded.

Additional controls

  • Prevent: Replace the most hazardous solvents with less harmful alternatives where the process allows and log each change.
  • Respond: Keep spill kits and a waste collection contract with a licensed handler for each waste stream.
Likelihood 2 x impact 4 before; 1 x 3 after Owner: Environmental and safety officer Target: Within 60 days Early warning: Extraction airflow below the recorded value or a spill not cleaned within the set time.
H07

Design record and configuration errors

Technology and data Before 16 After 6

Design files, simulation models, test data or revision histories are overwritten, mislabelled or out of date, so a part is built or released to an old drawing, or evidence cannot be shown when asked.

Who or what is affected: Design engineers, quality staff, customers and certifying contacts

Causes

Shared folders, manual copying between revisions and missing links between tests and designs.

Consequences

Wrong parts built, lost evidence, delayed approval and disputes with customers.

Existing controls

  • Design files are stored on a shared server with user accounts.
  • Major drawing releases are approved by the chief engineer.

Control gaps

Backups are not restore tested, and minor drawing edits skip the approval step.

Additional controls

  • Prevent: Place design and test records under configuration control with a traceable revision for every release.
  • Recover: Restore design files from a tested backup and check the restored revision against the release log each quarter.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Engineering manager Target: Within 60 days Early warning: Design change made without a recorded revision or approval.
H08

Non-compliance with safety and certification duties

Legal and compliance Before 12 After 6

Required safety assessments, test evidence, marking, traceability or reporting duties under the applicable automotive or aerospace requirements are missed or incomplete, so a product cannot be released or is later challenged.

Who or what is affected: Programme managers, certifying contacts, customers and users

Causes

Unclear jurisdiction, requirements that change, and evidence collected late in the programme.

Consequences

Release refused, product withdrawn, penalties and loss of customer confidence.

Existing controls

  • A compliance matrix lists the main duties for each product.
  • Test reports are reviewed before any release decision.

Control gaps

The matrix is not updated when requirements change, and evidence gaps are found only at the final review.

Additional controls

  • Prevent: Confirm the applicable requirements with a qualified specialist before each programme phase and record the outcome.
  • Detect: Audit a sample of release files against the compliance matrix each quarter.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Compliance lead Target: Within 90 days Early warning: A release file with an open evidence item within 30 days of a planned release.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic, where Catastrophic includes any credible risk to life, serious injury, loss of a vehicle or aircraft, or a failed certification step. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls. Residual risk is the score after existing controls and proposed additional controls, and it must never be higher than inherent. Where inherent is 10 or more, residual must be lower, showing the control has an effect. Safety impact is never rated down only because an event has not yet happened, and evidence from testing must support any reduction in likelihood. Anything still High needs senior attention and a dated plan, anything Medium needs routine controls with a named owner, and Low items are accepted and watched. Scores are challenged by a second engineer who was not involved in the design, and any safety-critical rating is reviewed by a qualified specialist. Ratings are revisited when a monitoring indicator reaches its threshold or when the design changes.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Test rig runs where the test plan was not signed off or a safety check was skipped.Escalate to the test lead at once and stop the run, and to the chief engineer if it happens twice in a month.
Supplier parts received without a completed first article inspection record.Escalate to the quality lead before the part is used, and to purchasing if the supplier repeats the gap.
Battery pack work started without a logged isolation check.Escalate to the health and safety lead at once, and pause battery work until the check is recorded.
Overdue calibration or maintenance on test rigs and measuring equipment.Escalate to the maintenance lead when any item is overdue, and to the chief engineer if still overdue after 14 days.
Design changes made without a recorded revision or approval.Escalate to the engineering manager within one working day, and hold release of affected drawings until corrected.

Contingency arrangements

If a serious event occurs, such as a structural failure in test, a battery thermal event or a product found outside specification in service, the test lead stops the affected rig or work, makes the area safe and secures the evidence. The chief engineer informs the quality lead and programme board. Affected parts and records are quarantined and the engineering team begins root cause analysis. Customers, certifying contacts and regulators are informed through the chief engineer as required by the relevant jurisdiction. Medical and emergency services are contacted at once for any injury.

Prioritized action plan

  1. Introduce a verified test plan with independent review before any structural or battery test, owner chief engineer, within 45 days.
  2. Run a first article inspection against the specification for each new supplier part, owner quality lead, within 60 days.
  3. Issue a high voltage isolation and stored energy procedure with sign-off before battery work, owner test lead, within 30 days.
  4. Place design files and test records under change control with traceable revisions, owner engineering manager, within 60 days.
  5. Schedule calibration and planned maintenance for all rigs with a backup owner for each, owner maintenance lead, within 30 days.

Conclusion

Safe, reliable components depend on steady habits: verified test plans, controlled specifications, supplier checks, disciplined isolation of high voltage and stored energy, maintained equipment and records that can be traced. The highest scores sit with structural and battery hazards, and each has actions that reduce the residual score. Treat the register as a living record, review it on the stated cycle, and seek qualified specialist review for any real design, certification, safety or legal question.

Assumptions and limitations

Assumptions

  • Jurisdiction and the applicable certification or type approval regime are not specified, so legal duties are described in general terms.
  • Staff are trained engineers and technicians who work to written procedures on managed equipment.
  • Suppliers provide parts with declared specifications and first article inspection records.

Limitations

  • The scores are examples for learning and do not describe any real product, programme or aircraft.
  • Automotive and aerospace safety rules are specialist fields that change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site-specific assessment or licensed engineering advice.

Related frameworks to study

  • Failure mode and effects analysis
  • Fault tree analysis
  • Hazard and operability study
  • Design verification and validation planning
  • Hierarchy of controls
  • Configuration management and change control

Technical Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Automotive and Aerospace Engineering course Read the best practices for this course

More Technical risk assessments

Hourly Active: 40,745 Learners