Risk management: PAVE + the risk matrix

Managing risk: identify, assess, mitigate

Definition

Risk management is the part of ADM where you do something about danger before it hurts you. First separate two ideas: a hazard is a condition (a low ceiling, a short runway, a tired pilot); the risk is how likely that hazard is to cause harm and how bad the harm would be. Managing it is three steps: identify the hazards (PAVE), assess the risk (the matrix), and mitigate — lower it, or don’t go.

Explanation

Hazard is the thing; risk is how likely and how bad. You identify, assess, then mitigate — every flight.

Idea	What it means
Hazard	A condition that could cause harm — a low ceiling, a short runway, a tired pilot.
Risk	How LIKELY that hazard is to hurt you, and how BAD it would be.
Manage it in 3 steps	Identify (PAVE) → Assess (the matrix) → Mitigate (lower it, or don’t go).
Sound familiar?	It’s the 3P loop from M8.1 — Perceive, Process, Perform — with real tools.

Why it matters

This is the same 3P loop from M8.1 — Perceive (identify), Process (assess), Perform (mitigate) — but with real tools instead of just a slogan.

Common error

Confusing the hazard with the risk — a low ceiling is a hazard; the risk is how likely and how bad it makes the flight.

The three steps of risk management are:

PHAK ch. 2 — Risk management

PAVE: find the hazards

Definition

PAVE is the FAA checklist for the identify step — four buckets that together catch almost any hazard: Pilot (you — fitness, currency, experience), Aircraft (the machine — airworthiness, fuel, equipment, performance), enVironment (the outside world — weather, terrain, airspace, day/night, the airport), and External pressures (the push to go — schedules, passengers, get-there-itis). Run PAVE before every flight.

Explanation

Four buckets of risk. Walk all four and you’ve surfaced almost everything that could bite.

PAVE	The bucket of hazards
P — Pilot	You: fitness, currency, and experience for THIS flight.
A — Aircraft	The machine: airworthiness, fuel, equipment, performance.
V — enVironment	The outside world: weather, terrain, airspace, day/night, the airport.
E — External pressures	The push to go: schedules, passengers, get-there-itis.

Why it matters

A structured checklist surfaces hazards you’d otherwise miss; each letter is a different source of risk, so skipping one leaves a blind spot.

Common error

Checking only the airplane and the weather — and forgetting that YOU and the pressure to go are hazards too.

In PAVE, the ‘V’ stands for:

Mnemonic

PAVE

Pilot — fitness, currency, experience
Aircraft — airworthiness, fuel, equipment, performance
enVironment — weather, terrain, airspace, day/night
External pressures — schedules, passengers, get-there-itis

Four sources of risk — run all four before every flight.

PHAK ch. 2 — The PAVE checklist

PAVE in the real world

Definition

What each bucket actually looks like. Pilot: IMSAFE fitness, currency, recent experience, night/IMC readiness (in depth in M8.4). Aircraft: airworthiness and required equipment, fuel plus reserves, performance for the density altitude and runway. enVironment: ceilings and visibility, wind and crosswind, terrain, airspace, day vs. night. External pressures: get-there-itis, a waiting passenger, a schedule — the pressures that make you accept the other three.

Explanation

Each bucket has a handful of usual suspects. The external-pressure ones are the hardest to admit.

Bucket	Real-world hazards to check
Pilot	IMSAFE fitness, currency, recent experience, night/IMC readiness (in depth: M8.4).
Aircraft	Airworthy + required equipment, fuel plus reserves, performance for the density altitude and runway.
enVironment	Ceilings and visibility, wind and crosswind, terrain, airspace, day vs. night.
External pressures	Get-there-itis, a waiting passenger, a schedule — the push that feeds hazardous attitudes (M8.2).

Why it matters

External pressures is the sneaky bucket — it isn’t about the flight itself, it’s the pressure that talks you into launching anyway. Naming it defuses it.

Common error

Treating external pressure as harmless because it isn’t about the airplane — it’s exactly what feeds get-there-itis.

A passenger who MUST be somewhere for a meeting is which PAVE hazard?

PHAK ch. 2 — Applying PAVE

The risk assessment matrix

Definition

Once PAVE has listed your hazards, assess each one on two axes: how likely is it to bite (Probable, Occasional, Remote, Improbable) and how bad if it does (Catastrophic, Critical, Marginal, Negligible)? The matrix turns that pair into a single risk level — High, Serious, Medium, or Low — so you can compare hazards and prioritize the worst.

Explanation

Two questions — how likely, how bad — land you in one colored cell that tells you how much the hazard matters.

Figure 2-5. This risk matrix can be used for almost any operation by assigning likelihood and consequence. In the case presented, the pilot assigned a likelihood of occasional and the severity as catastrophic. As one can see, this falls in the high risk area. — Figure 2-5 · FAA-H-8083-25C, Pilot's Handbook of Aeronautical Knowledge (p. 45)

Why it matters

“The weather’s bad” isn’t a decision — likelihood × severity is. The matrix makes risk explicit and comparable so you act on the worst hazard, not the loudest.

Common error

Judging a hazard on severity alone (or likelihood alone) — risk is the two together.

A hazard that is Remote in likelihood but Catastrophic in severity rates as what risk level?

FAA Risk Management Handbook — The risk matrix (FAA-H-8083-2)

Lower the risk — or don’t go

Definition

A High or Serious rating isn’t automatically a no-go — it’s a signal to mitigate. Three moves: eliminate the hazard (don’t carry the risk at all — leave the extra bag, wait for daylight), reduce it (delay for better weather, add fuel, bring an instructor, pick a longer runway), or accept it (only when it’s already Low, and stay alert). If you can’t get the risk down to acceptable, the flight is a no-go.

Explanation

Eliminate, reduce, or accept — and if none gets you to acceptable, you don’t go.

Move	What it means — example
Eliminate	Remove the hazard entirely — leave the extra bag, wait for daylight.
Reduce	Lower the risk — delay for better weather, add fuel, bring an instructor, pick a longer runway.
Accept	Only when it’s already Low — and stay alert.
Can’t get it down?	Then it’s a no-go. Personal minimums (M8.4) are your lines drawn ahead of time.

Why it matters

The matrix tells you where you stand; mitigation is what you DO. Most risk can be reduced — the skill is choosing to instead of pressing on.

Common error

Seeing a High risk and launching anyway because of the schedule — High means mitigate or don’t go.

You assess a hazard as High risk. The best response is:

PHAK ch. 2 — Mitigating risk

Risk management in the ADM picture

Definition

PAVE, the matrix, and mitigation are the tools that make the 3P loop (M8.1) real — and they only work on honest inputs, which is where hazardous attitudes (M8.2) can sabotage you. Next: IMSAFE (M8.4) drills into the Pilot bucket and sets your personal minimums, and SRM (M8.5) is how you use every resource to manage workload once you’re airborne.

Explanation

Risk management is the engine of the 3P loop; the rest of the module sharpens its inputs.

The tool	The step it serves / where it connects
PAVE + matrix + mitigate	The real tools that make the 3P loop (M8.1) work.
Honest inputs	Hazardous attitudes (M8.2) can corrupt what you feed them.
M8.4 — IMSAFE	Drills into the Pilot bucket + sets your personal minimums.
M8.5 — SRM	Using every resource to manage workload once airborne.

Why it matters

Risk management isn’t a form you fill out once at the hangar — it’s the continuous identify → assess → mitigate habit that all of ADM is built on.

Common error

Believing risk management ends once you’ve decided to go — it continues as conditions change.

Risk management is best described as:

PHAK ch. 2 — Risk management and ADM