1 chapter 1supp... · 2010. 11. 18. · 1.12 range safety web site ... 30 sw/seo - 30th space wing,...

63
1 CHAPTER 1

Upload: others

Post on 17-Aug-2020

1 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

1 CHAPTER 1

Page 2: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Published by the Range Safety OfficePatrick Air Force BaseFlorida 32925-3238

Page 3: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

CONTENTS

1-iii

Glossary of Abbreviations, Acronymns, and Definitions ....................................................................................... 1-vReferenced Documents .......................................................................................................................................1-xi

1.1 INTRODUCTION........................................................................................................................................... 1-11.1.1 Purpose of the Chapter....................................................................................................................... 1-11.1.2 Applicability........................................................................................................................................ 1-1

1.1.2.1 The Eastern and Western Ranges ........................................................................................... 1-11.1.2.2 Range Users ........................................................................................................................... 1-3

1.2 RANGE SAFETY PROGRAM ........................................................................................................................ 1-41.2.1 Objective of the Program.................................................................................................................... 1-51.2.2 Purpose of the Requirements ............................................................................................................. 1-51.2.3 Rationale for the Requirements .......................................................................................................... 1-51.2.4 Applicability of the 1997 Edition of EWR 127-1................................................................................... 1-6

1.2.4.1 Status of Previously Approved Programs .................................................................................... 1-61.2.4.2 Implementation of Required Changes...................................................................................... 1-7

1.3 RESPONSIBILITIES AND AUTHORITIES ..................................................................................................... 1-71.3.1 Commanders, 45th Space Wing and 30th Space Wing....................................................................... 1-71.3.2 Chiefs of Safety, 45th Space Wing and 30th Space Wing ................................................................... 1-71.3.3 Commanders, 45th Operations Group and 30th Operations Group ..................................................... 1-71.3.4 Commander, 45th Logistics Group ..................................................................................................... 1-71.3.5 Commanders, 45th Support Group and 30th Support Group............................................................... 1-81.3.6 Commanders, 45th Medical Group and 30th Medical Group ............................................................... 1-81.3.7 Offices of the Chiefs of Safety, 45th Space Wing and 30th Space Wing.............................................. 1-8

1.3.7.1 Air Force Ground Safety, 45th Space Wing and Ground Safety, 30th Space Wing................... 1-81.3.7.2 Mission Flight Control, 45th Space Wing and 30th Space Wing ............................................... 1-81.3.7.3 Systems Safety, 45th Space Wing and 30th Space Wing ........................................................ 1-91.3.7.4 Operations Support and Analysis, 45th Space Wing, and Flight Analysis, 30th Space Wing ................................................................................... 1-101.3.7.5 Relationship with Range Users .............................................................................................. 1-10

1.3.8 Range Users and Supporting Agencies............................................................................................. 1-10

1.4 RANGE SAFETY POLICY ........................................................................................................................... 1-111.4.1 Public Safety .................................................................................................................................... 1-11

1.4.1.1 Prelaunch and Launch Operations......................................................................................... 1-111.4.1.2 Range Safety Critical Systems .............................................................................................. 1-121.4.1.3 Control of Errant Vehicle Flight.............................................................................................. 1-13

1.4.2 Launch Area Safety .......................................................................................................................... 1-131.4.3 Launch Complex Safety.................................................................................................................... 1-14

1.4.3.1 General Requirements........................................................................................................... 1-151.4.3.2 Launch Complex Safety Responsibility .................................................................................. 1-151.4.3.3 Launch Complex Safety Training and Certification Requirements........................................... 1-16

1.5 SAFETY AUTHORIZATIONS, COMPLIANCES, AND DOCUMENTATION ................................................... 1-161.5.1 Purpose of Obtaining Safety Approvals................................................................................................ 1-161.5.2 Authorizations .................................................................................................................................. 1-16

1.5.2.1 Safety Approvals Authorized by the Wing Commanders ........................................................ 1-161.5.2.2 Safety Approvals Authorized by the Chief of Safety or a Designated Representative...................... 1-171.5.2.3 Launch Complex Safety Approvals Authorized by Control Authorities..................................... 1-171.5.2.4 Safety Approvals Authorized by the DoD Explosive Safety Board........................................... 1-17

1.5.3 Radioactive Material Launches ......................................................................................................... 1-171.5.3.1 National Aeronautics and Space Council Compliance ............................................................ 1-171.5.3.2 Presidential Directive/National Security Council 25 Compliance............................................. 1-171.5.3.3 Radioactive Material Launch Approval ................................................................................... 1-17

1.5.4 Documentation and Activity Requirements........................................................................................ 1-171.5.4.1 Tailored EWR 127-1, System Safety Program Plan, Noncompliance Requests, and Launch Complex Safety Training and Certification Plan.................................................. 1-171.5.4.2 Flight Data Packages, Intended Support Plans, and Directed Energy Plans ........................... 1-181.5.4.3 Missile System Prelaunch Safety Package............................................................................. 1-18

Page 4: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

CONTENTS

1-iv

1.5.4.4 Airborne Range Safety System Report................................................................................... 1-181.5.4.5 Ground Operations Plan and Hazardous and Safety Critical Procedures................................ 1-181.5.4.6 Facilities Safety Data Package .............................................................................................. 1-181.5.4.7 Launch Operations Approval ................................................................................................. 1-181.5.4.8 Final Range Safety Approval to Launch ................................................................................. 1-18

1.6 RANGE SAFETY AND RANGE USER INTERFACE PROCESS................................................................... 1-181.6.1 Range Safety Funding ...................................................................................................................... 1-191.6.2 Initial Range Safety and Range User Technical Interchange Meeting ................................................ 1-191.6.3 Tailoring Process ............................................................................................................................. 1-191.6.4 Other Range Safety and Range User Technical Interchange Meetings and Reviews.......................... 1-191.6.5 Noncompliance With the Requirements ............................................................................................ 1-20

1.6.5.1 Meets Intent Certification....................................................................................................... 1-201.6.5.2 Deviations and Waivers......................................................................................................... 1-20

1.6.6 System Safety Program Requirements ............................................................................................. 1-20

1.7 RANGE SAFETY CONCEPT TO LAUNCH PROCESS................................................................................. 1-201.7.1 Range Safety Milestones .................................................................................................................. 1-201.7.2 Time Frames and Schedules ............................................................................................................ 1-21

1.8 CHANGES TO APPROVED GENERIC SYSTEMS....................................................................................... 1-21

1.9 CHANGES TO EWR 127-1.......................................................................................................................... 1-21

1.10 INVESTIGATING AND REPORTING MISHAPS AND INCIDENTS ............................................................. 1-221.10.1 Mishaps and Incidents Involving Air Force Personnel and Resources.............................................. 1-221.10.2 Non-Air Force Personnel and Resources ........................................................................................ 1-22

1.11 RANGE SAFETY RANGE USER HANDBOOK........................................................................................... 1-22

1.12 RANGE SAFETY WEB SITE .................................................................................................................... 1-22

APPENDIX 1A: THE EWR 127-1 TAILORING PROCESS ................................................................................. 1-23APPENDIX 1B: SYSTEM SAFETY PROGRAM REQUIREMENTS ..................................................................... 1-26APPENDIX 1C: SUBMITTING EWR 127-1 CHANGE REQUESTS..................................................................... 1-36APPENDIX 1D: EWR 127-1 ACCEPTABLE RISK CRITERIA............................................................................. 1-39APPENDIX 1E: MAKING CHANGES TO EWR 127-1 ........................................................................................ 1-40APPENDIX 1F: GENERIC PAYLOAD POLICY AND APPROVAL PROCESS..................................................... 1-41APPENDIX 1G: LAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION ............................................. 1-46

Page 5: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

GLOSSARY OF ABBREVIATIONS, ACRONYMS, AND DEFINITIONS

1-v

30 SW/SEO - 30th Space Wing, Mission FlightControl

30 SW/SEY - 30th Space Wing, Flight Analysis

45 SW/SEO - 45th Space Wing, Mission FlightControl and Analysis

45 SW/SEOE - 45th Space Wing, ExpendableLaunch Vehicle Operations Support and Analysis

45 SW/SEOO - 45th Space Wing, Mission FlightControl

45 SW/SEOS - 45th Space Wing, Space Trans-portation System Operations Support and Analysis

45 and 30 LG - 45th and 30th Logistics Group

45 and 30 MDG - 45th and 30th Medical Group

45 and 30 OG - 45th and 30th Operations Group

45 and 30 SPTG - 45th and 30th Support Group

45 and 30 SW/SE - 45th and 30th Space Wing,Office of the Chief of Safety; see also Office of theChief of Safety

45 and 30 SW/SEG - 45th and 30th Space Wing,Ground Safety

45 and 30 SW/SES - 45th and 30th Space Wing,Systems Safety

approval - Range Safety approval is the final ap-proval necessary for data packages such as thePreliminary Flight Data Package, the Final FlightData Package, the Missile System Prelaunch SafetyPackage, the Range Safety System Report, theGround Operations Plan, and the Facility SafetyData Package. In addition, Range Safety approvalis required for hazardous and safety critical proce-dures prior to the procedure being performed; how-ever, Range Safety approval does not constitutefinal approval for hazardous and safety criticalprocedures since Range Users normally have addi-tional approval requirements prior to the procedurebeing performed.

AF - Air Force

AFETR - Air Force Eastern Test Range

AFI - Air Force Instruction

BDA - Blast Danger Area

Blast Danger Area - a hazardous clear area;clearance prior to establishment of a major explo-sive hazard such as vehicle fuel/oxidizer load andpressurization; the area subject to fragment anddirect overpressure resulting from the explosion ofthe booster/payload

CAL-OSHA - California Occupational Safety andHealth Act

CCAS - Cape Canaveral Air Station

cDR - Conceptual Design Review

CDR - Critical Design Review; Command DestructReceiver

CFR - Code of Federal Regulations

COLA - Collision Avoidance

collective risk - the total risk to an exposed popu-lation; the expected (average, mean) number of in-dividuals who will be casualties

commercial user - a non-federal government or-ganization that provides launch operations services

Control Area Clears - a hazardous clear area;clearance of defined areas to protect personnel fromhazardous operations

control authority - a single commercial user on-site director and/or manager, a full time govern-ment tenant director and/or commander, or UnitedStates Air Force squadron/detachment commanderresponsible for the implementation of launch com-plex safety requirements

deviation - a designation used when a design non-compliance is known to exist prior to hardwareproduction or an operational noncompliance isknown to exist prior to beginning operations atCCAS and Vandenberg Air Force Base

DDESB - Department of Defense Explosive SafetyBoard

DEP - Directed Energy Plan

DoD - Department of Defense

DoDD - Department of Defense Directive

DOT - Department of Transportation

Page 6: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

GLOSSARY OF ABBREVIATIONS, ACRONYMS, AND DEFINITIONS

1-vi

ECP - Engineering Change Proposal

ER - Eastern Range

ERR - Eastern Range Regulation

ESMCR - Eastern Space and Missile CenterRegulation

errant launch vehicle -a launch vehicle that, dur-ing flight, violates established flight safety criteriaand/or operates erratically in a manner inconsistentwith its intended flight performance. Continuedflight of an errant launch vehicle may grossly devi-ate from planned flight, with the possibility of in-creasing public risk to unacceptable limits.

explosive warhead launch approval - the manda-tory prior written approval given by the Eastern orWestern Range Commanders to Range Users wholaunch launch vehicles carrying explosive warheads

explosive quantity distance site plans - a formalplan for explosives facilities and areas required inaccordance with AFM 91-201 and DoD 6055.9-STD detailing explosives quantity operating andstorage limits and restrictions and resultant dis-tance clearance requirements

FCA - Flight Caution Area

FDR - Final Design Review

FFDP - Final Flight Data Package

FFPA - Final Flight Plan Approval

Flight Caution Area - a Hazardous Launch Area;the controlled surface area and airspace outside theFlight Hazard Area (FHA) where individual riskfrom a launch vehicle malfunction during the earlyphase of flight exceeds 1 x 10-6. When activated,only personnel essential to the launch operation(mission-essential) with adequate breathing protec-tion are permitted in this area; see also Flight Haz-ard Area, mission-essential personnel

FHA - Flight Hazard Area

Flight Hazard Area - a Hazardous Launch Area;the controlled surface area and airspace about thelaunch pad and flight azimuth where individual riskfrom a malfunction during the early phase of flightexceeds 1 x 10-5. Because the risk of serious injuryor death from blast overpressure or debris is sosignificant, only mission-essential personnel in ap-

proved blast-hardened structures with adequatebreathing protection are permitted in this area dur-ing launch.

FSDP - Facility Safety Data Package

FTS - Flight Termination System

GOP - Ground Operations Plan

GPS - Global Positioning System

h - hour, hours

Hazardous Clear Areas - Safety Clearance Zonesfor ground processing that are defined in the Op-erations Safety Plans for each operating facility;include BDA, Control Area Clears, and ToxicHazard Corridor

Hazardous Launch Area Clearance - requiredclearances; concurrence from the Chief of Safetymust be obtained for all personnel required or re-questing to be in a Hazardous Launch Area duringa launch operation; mission-essential personnelmay be permitted within the Impact Limit Linesand the FCA, but only within the FHA if located inapproved blast-hardened structures with adequatebreathing apparatus; Wing-essential personnel lo-cated at required work areas and non-essential per-sonnel may be permitted inside the impact limitlines with Wing Commander approval; see alsoFCA, FHA, impact limit lines, mission-essentialpersonnel

Hazardous Launch Areas - Safety ClearanceZones during launch operations, including theFCA, FHA, Vessel Exclusion Area, and impactlimit lines

HCA - Hazardous Clear Areas

HLA - Hazardous Launch Areas

HPWT - High Performance Work Team

ILL - impact limit line

imminent danger - any condition, operation, orsituation that occurs on the Range where a dangerexists that could reasonably be expected to causedeath or serious physical harm, immediately or be-fore the imminence of such danger can be elimi-nated through control procedures; these situationsalso include health hazards where it is reasonablyexpected that exposure to a toxic substance or

Page 7: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

GLOSSARY OF ABBREVIATIONS, ACRONYMS, AND DEFINITIONS

1-vii

other hazard will occur that will cause harm tosuch a degree as to shorten life or cause a substan-tial reduction in physical or mental efficiency eventhough the resulting harm may not manifest itselfimmediately

impact limit line - a Hazardous Launch Area; theboundary within which trajectory constraints andFTSs are used to contain an errant launch vehicleand vehicle debris. Mission-essential and Wing-essential personnel are permitted within the ILLs;with Wing Commander approval, non-essentialpersonnel may be permitted within this area. How-ever, the collective risk will not exceed acceptablestandards for non-essential personnel; see also mis-sion-essential personnel, non-essential personnel

individual risk - the risk to a randomly exposedindividual; the probability that the individual willbe a casualty

ISP - Intended Support Plan

KMR - Kwajalein Missile Range

KSC - Kennedy Space Center

launch area safety - safety requirements involvingrisks limited to personnel and/or property on CCASand may be extended to KSC or VAFB; involvesmultiple commercial users, government tenants, orUnited State Air Force squadron commanders

launch area - the facility, in this case, CCAS andKSC or Vandenberg Air Force Base, where launchvehicles and payloads are launched; includes anysupporting sites on the Eastern or Western Range;also known as launch head

launch complex - a defined area that supportslaunch vehicle or payload operations or storage;includes launch pads and/or associated facilities

launch complex safety - safety requirements in-volving risk that is limited to personnel and/orproperty located within the well defined confines ofa launch complex, facility, or group of facilities;for example, within the fence line; involves riskonly to those personnel and/or property under thecontrol of the control authority for the launch com-plex, facility, or group of facilities

launch head - see launch area

launch vehicle - a vehicle that carries and/or deliv-ers a payload to a desired location; this is a genericterm that applies to all vehicles that may belaunched from the Eastern and Western Ranges,including but not limited to airplanes; all types ofspace launch vehicles, manned space vehicles, mis-siles, and rockets and their stages; probes; aerostatsand balloons; drones; remotely piloted vehicles;projectiles, torpedoes and air-dropped bodies

lead time - the time between the beginning of aprocess or project and the appearance of its results

LDCG - Launch Disaster Control Group; ER andWR teams responsible for responding to launch emer-gencies

LRR - Launch Readiness Review

MIC - meets intent certification; a noncompliancedesignation used to indicate that an equivalent levelof safety is maintained despite not meeting the ex-act requirements stated in this Regulation

MIL-SPEC - military specification

MIL-STD - military standard

mission-essential personnel - those persons neces-sary to successfully and safely complete a hazard-ous or launch operation and whose absence wouldjeopardize the completion of the operation; includespersons required to perform emergency actions ac-cording to authorized directives, persons specifi-cally authorized by the Wing Commander to per-form scheduled activities, and person in training;the number of mission-essential personnel allowedwithin Safety Clearance Zones or HazardousLaunch Areas is determined by the Wing Com-mander and the Range User with Range Safetyconcurrence

MSPSP - Missile System Prelaunch Safety Pack-age

NASA - National Aeronautics and Space Admini-stration

NASC - National Aeronautics and Space Council

NAWC - Naval Air Warfare Center

NSC - National Security Council

noncompliance - a noticeable or marked departurefrom Regulation standards or procedures; includes

Page 8: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

GLOSSARY OF ABBREVIATIONS, ACRONYMS, AND DEFINITIONS

1-viii

deviations, meets intent certifications, and waivers

non-essential personnel - those persons notdeemed mission-essential or Wing-essential; in-cludes the general public, visitors, the media, andany persons who can be excluded from SafetyClearance Zones with no effect on the operation orparallel operations

O&SHA - Operating and Support Hazard Analysis

OSHA - Occupational Safety and Health Act

Office of the Chief of Safety - the Range officeheaded by the Chief of Safety; this office ensuresthat the Range Safety Program meets Range andRange User needs and does not impose undue oroverly restrictive requirements on a program

OCST - Office of Commercial Space Transporta-tion, DOT

PAFB - Patrick Air Force Base located in Florida

PMRF - Pacific Missile Range Facility

payload - the object(s) within a payload fairingcarried or delivered by a launch vehicle to a desiredlocation or orbit; a generic term that applies to allpayloads that may be delivered to or from the East-ern or Western Ranges; includes but is not limitedto satellites, other spacecraft, experimental pack-ages, bomb loads, warheads, reentry vehicles,dummy loads, cargo, and any motors attached tothem in the payload fairing

PD - presidential directive

PDR - Preliminary Design Review

PFDP - Preliminary Flight Data Package

PHA - Preliminary Hazard Analysis

PL - public law

program - the coordinated group of tasks associ-ated with the concept, design, manufacture, prepa-ration, checkout, and launch of a launch vehicleand/or payload to or from, or otherwise supportedby the Eastern or Western Ranges and the associ-ated ground support equipment and facilities

PTR - Program Trouble Report

public safety - safety involving risks to the generalpublic of the United States or foreign countries

and/or their property

radioactive material launch approval - approvalgranted by Range Safety to Range Users intendingto launch radioactive materials

Range Commander - Commander of the Easternand Western Range in accordance with DoDD3200.11; sometimes called Range Director, wheninterfacing with commercial Range Users.NOTE: Currently, the 45 SW and 30 SW Com-manders are also the Range Commanders andRange Directors

Range Safety Launch Commit Criteria - hazard-ous or safety critical parameters, including, but notlimited to, those associated with the launch vehicle,payload, ground support equipment, Range SafetySystem, hazardous area clearance requirements,and meteorological conditions that must be withindefined limits to ensure that public, launch area,and launch complex safety can be maintained dur-ing a launch operation

Range Safety Program - a program implementedto ensure that launch and flight of launch vehiclesand payloads present no greater risk to the generalpublic than that imposed by the overflight of con-ventional aircraft; such a program also includeslaunch complex and launch area safety and protec-tion of national resources

Range Safety System - the system consisting ofthe airborne and ground flight termination systems,airborne and ground tracking system, and the air-borne and ground telemetry data transmission sys-tems

Range Users - clients of the Cape Canaveral AirStation and Vandenberg Air Force Base, such asthe Department of Defense, non-Department ofDefense US government agencies, civilian commer-cial companies, and foreign government agenciesthat use Eastern or Western Range facilities andtest equipment; conduct prelaunch, launch, andimpact operations; or require on-orbit support

Page 9: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

GLOSSARY OF ABBREVIATIONS, ACRONYMS, AND DEFINITIONS

1-ix

Ranges - in this document, Ranges refers to theEastern Range at CCAS, KSC, and PAFB, and theWestern Range at Vandenberg Air Force Base

risk - a measure that takes into consideration boththe probability of occurrence and the consequenceof a hazard to a population or installation. Risk ismeasured in the same units as the consequence suchas number of injuries, fatalities, or dollar loss. ForRange Safety, risk is expressed as casualty expec-tation or shown in a risk profile; see also collectiverisk and individual risk.

risk analysis - a study of potential risk

risk-cost benefit concept - the concept used to de-termine the granting of waivers, deviations, ormeets intent certifications to Eastern and WesternRange 127-1 requirements by comparing the costs,risks, and benefits of the mission. If the applicationof an EWR 127-1 requirement results in a signifi-cant reduction of risk at an acceptable level of cost,it may be judged by Range Safety to be sufficientto impose a requirement; however, if the benefit isinsignificant and/or the cost is high, the require-ment may be deviated from, waived, or determinedto meet the intent, all with consideration to publicsafety. The risk of concern may be the mean or av-erage risk, or it may be a risk corresponding to ahigh consequence at a low probability (a cata-strophic risk). The assurance of a very low prob-ability may be required for a very high consequenceeven if a high cost may be entailed.

RSBBS - Range Safety Bulletin Board System

RSLCC - Range Safety Launch Commit Criteria

RSSR - Airborne Range Safety System Report

RTS - Range Tracking System

safety holds - the holdfire capability, emergencyvoice procedures, or light indication system of eachlaunch system used to prevent launches in the eventof loss of Range Safety critical systems or viola-tions of mandatory Range Safety launch commitcriteria

Safety Clearance Zones - restricted areas desig-nated for day-to-day prelaunch processing andlaunch operations to protect the public, launcharea, and launch complex personnel; these zones

are established for each launch vehicle and payloadat specific processing facilities, including launchcomplexes; includes HCA and HLA

safety margins (destruct) - margins used to avoidoverly restrictive flight termination limits; normallybased on launch vehicle three-sigma performancecharacteristics

SCN - Specification Change Notice

SHA - System Hazard Analysis

space safety professional - a safety professionalwho has been trained and formally certified to meetthe criteria outlined in the Launch Complex SafetyTraining and Certification Program Document

SPR - Software Problem Report

SSHA - Subsystem Hazard Analysis

SSPP - System Safety Program Plan

STR - Software Trouble Report

STS - Space Transportation System

SWI - space wing instruction

TDTS - Telemetry Data Transmitting System

THC - Toxic Hazard Corridor

TIM - Technical Interchange Meeting

Toxic Hazard Corridor - a Hazardous ClearArea; clearance of a sector in which toxic materialmay reach predetermined concentration levels

TPS - Telemetry Processing Station

US - United States

USAF - United States Air Force

USC - United States Code

VEA - Vessel Exclusion Area

Vessel Exclusion Area - a combination of the seasurface area and airspace measured from thelaunch point and extending downrange along theintended flight azimuth; the size of the VEA isbased on hazard containment or a combination ofacceptable impact probability and personnel risk

WCOOA - West Coast Offshore Operating Area

waiver - a designation used when, through an error

Page 10: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

GLOSSARY OF ABBREVIATIONS, ACRONYMS, AND DEFINITIONS

1-x

in the manufacturing process or for other reasons, ahardware noncompliance is discovered after hard-ware production, or an operational noncomplianceis discovered after operations have begun at theEastern or Western Range

Wing Commander - see Range Commander

WSMCR Western Space and Missile CenterRegulation

VAFB - Vandenberg Air Force Base; located inCalifornia

WR - Western Range

WRR - Western Range Regulation

Page 11: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

REFERENCED DOCUMENTS

1-xi

29 CFR 1910.119, Process Safety Management ofHighly Hazardous Chemicals

40 CFR 355, Emergency Planning and Notifica-tion

45 SWI 99-101, 45th Space Wing Mission Pro-gram Documents

AFI 91-204, Safety Investigations and Reports

AFI 91-110, Nuclear Safety Review and LaunchApproval for Space or Missile Use of RadioactiveMaterial and Nuclear Systems

AFI 99-101, Developmental Test and Evaluation

AFI 99-102, Operational Test and Evaluation

AFI 99-113, Space Systems Test and EvaluationProcess Direction and Methodology for SpaceSystems Testing

AFMAN 91-201, Explosive Safety Standards

AFMAN 99-110, Airframe Propulsion-AvionicsTest and Evaluation Process

CERCLA, Comprehensive Environmental Re-sponse, Compensation, and Liability Act of 1980

Department of Defense Directive 3200.11, MajorRange and Test Facility Base

Department of Defense Directive 3230.3, DoDSupport for Commercial Space Launch Activities

DoD 6055.9-STD, DoD Ammunition and Explo-sives Safety Standards

DOT OCST 14 CFR, Chapter III, “CommercialSpace Transportation; Licensing Process forCommercial Space Launch Activities”

Executive Order 12856, “Federal Compliance withRight-to-Know Laws and Pollution Prevention Re-quirements”

MIL-STD-498, Software Development and Docu-mentation

National Aeronautics and Space Council, NuclearSafety Review and Approval Procedures for MinorRadioactive Sources in Space Operations

Presidential Directive/National Security Council25, Scientific or Technological Experiments withPossible Large-Scale Adverse Environmental Ef-fects and Launch of Nuclear Systems into Space

Public Law 10, 10 USC Section 172, AmmunitionStorage Board

Public Law 91-596, 29 USC 651-678, Occupa-tional Health and Safety Act

Public Law 60, 81st Congress, 1st Session, GuidedMissiles Joint Long Range Proving Ground

Public Law 98-575, 49 USC 2601-2623, TheCommercial Space Launch Act of 1984, AsAmended

Public Law 99-499, 42 USC 11001-11050, Su-perfund Amendments and Reauthorization Act(SARA), Title III: Emergency Planning and Com-munity Right-to-Know Act (EPCRA)

Page 12: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -
Page 13: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

CHAPTER 1EASTERN AND WESTERN RANGE

SAFETY POLICIES AND PROCESSES

1-1

1.1 INTRODUCTION

1.1.1 Purpose of the Chapter

Chapter 1 describes the Range Safety Program;defines responsibilities and authorities; and deline-ates policies, processes, and approvals for all ac-tivities from design concept through test, checkout,assembly, and launch of launch vehicles and pay-loads to orbital insertion or impact from or onto theEastern Range (ER) or Western Range (WR). Thefollowing major topics are addressed:

1.2 Range Safety Program1.3 Responsibilities and Authorities1.4 Range Safety Policy1.5 Safety Authorizations, Compliances, and

Documentation1.6 Range Safety and Range User Interface Proc-

ess1.7 Range Safety "Concept to Launch" Process1.8 Changes to Approved Generic Systems1.9 Changes to the Document1.10 Investigating and Reporting Mishaps and

Incidents1.11 Range Safety Range User Handbook1.12 Range Safety Bulletin Board System

1.1.2 Applicability

The policies, requirements, processes, procedures,and approvals defined in this Chapter and the otherchapters in this document are applicable to all or-ganizations, agencies, companies, and programsconducting or supporting operations on the ER andWR. NOTE: When used in this document, the

terms Range or Ranges refer to both the EasternRange and the Western Range.

1.1.2.1 The Eastern and Western Ranges

1.1.2.1.1 The Eastern Range.a. The ER is the launch head at Cape Canav-

eral Air Station (CCAS); owned or leased facilitieson downrange sites such as Antigua and Ascension;and in the context of launch operations, the AtlanticOcean, including all surrounding land, sea, and airspace within the reach of any launch vehicle ex-tending eastward into the Indian and PacificOceans. Figure 1-1 shows the typical launch sectorfor launches from the ER; Figure 1-2 shows ownedor leased facilities on sites downrange from the ER.

b. Range management activities are concen-trated at Patrick Air Force Base (PAFB), Florida.

c. Launch vehicle and payload prelaunch andlaunch activities are concentrated at CCAS, Ken-nedy Space Center (KSC), and miscellaneous out-lying support locations. d. Launch activities conducted by ER person-nel operating outside the geographical limits de-scribed above may occur under Department of De-fense (DoD) or United States Air Force (USAF)direction or under the auspices of agreements madeby those agencies. In such cases, the term EasternRange or ER is expanded to include these situationsand apply, as required, for the specific mission,launch, launch area, and impact area.

Page 14: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-2

Figure 1-1Typical Launch Sector for Launches From the Eastern Range

Page 15: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-3

1.1.2.1.2 The Western Range.a. The WR is the launch head at Vandenberg

Air Force Base (VAFB) and extends along theWest Coast of the continental United States (US)westward through the Pacific and Indian Oceans.Figure 1-3 shows the typical launch sector forlaunches from the WR; Figure 1-4 shows owned orleased facilities on sites uprange along the PacificCoast, including US Navy facilities at Point Mugu,and downrange from the WR.

b. Range management activities as well as launchand prelaunch processing activities are concen-trated at VAFB in California.

c. Launch activities conducted by WR personneloperating outside the geographical limits describedabove may occur under DoD or USAF direction orunder the auspices of agreements made by thoseagencies. In such cases, the term Western Range orWR is expanded to include these situations and ap-ply, as required, to the specific mission, launch,launch area, and impact area.

1.1.2.1.3 Eastern and Western Range Dif-ferences. The ER and WR have some differencesin their Range Safety requirements. These differ-ences are caused by geographical differences thatchange risk levels for launch operations, organiza-tional variations, and different Range User re-quirements such as those associated with mannedspace flights at the ER and ballistic launches intothe Kwajalein Atoll and aircraft tests at the WR. Atpresent, where a requirement differs, the RangeUser may standardize to the more stringent re-quirement or meet the requirements of each Range,whichever option is technically or economicallymore desirable. Specific ER and WR differencesare noted throughout this document.

1.1.2.2 Range Users

Range Users include the DoD, non-DoD US govern-ment agencies, civilian commercial companies, andforeign government agencies that use ER and WRfacilities and test equipment; conduct prelaunch,

Figure 1-2Owned or Leased Facilities on Sites Downrange from the Eastern Range

Page 16: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-4

launch operations, and impact; or require on-orbit orother related support.

a. Commercial users intending to provide launchservices from one of the Ranges shall be sponsoredand have a license from the Department of Trans-portation (DOT) or have a DoD sponsorship andbe accepted by the DoD to use the ER or WR.

b. Foreign government organizations or compa-nies shall be sponsored by an appropriate US gov-ernment organization or be a customer of a com-mercial Range User.

1.2 RANGE SAFETY PROGRAM

The national range system, established by PublicLaw 60, was originally sited based on two primaryconcerns: location and public safety. Thus, RangeSafety, in the context of national range activities, isrooted in PL 60.

To provide for the public safety, the Ranges, usinga Range Safety Program, shall ensure that thelaunch and flight of launch vehicles and payloadspresent no greater risk to the general public thanthat imposed by the overflight of conventional air-craft. In addition to public protection, safety on anational range includes launch area safety, launchcomplex safety, and the protection of national re-sources.

Range Safety is intrinsic to the range mission ofproviding Range Users the facilities, instrumenta-tion, and infrastructure to support launch vehiclesand payloads during prelaunch and launch opera-tions. Significant hazards and risks are inherent tolaunch vehicle and payload tests and operations;therefore, all reasonable precautions shall be takento minimize these risks with respect to life, health,

Figure 1-3Typical Launch Sector For Launches From the Western Range

Page 17: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-5

and property.

1.2.1 Objective of the Program

The objective of the Range Safety Program is toensure that the general public, launch area person-nel, foreign land masses, and launch area resourcesare provided an acceptable level of safety and thatall aspects of prelaunch and launch operations ad-here to public laws and national needs. The mutualgoal of the Ranges and Range Users shall be tolaunch launch vehicles and payloads safely andeffectively with commitment to public safety.

1.2.2 Purpose of the Requirements

Through these requirements, the ER and WRSafety Programs implement and carry out the re-sponsibilities or standards contained in or appliedby the following laws and directives:

a. Public Law 60, Legislative History, 81st Con-

gressb. Public Law 10, 10 USC, Section 172c. Public Law 91-596, 29 USC. NOTE: Con-

tractors are solely responsible for compliance withOSHA standards and the protection of their em-ployees.

d. Public Law 98-575, 49 USCe. Presidential Directive (PD)/National Security

Council (NSC) 25f. Department of Defense Directive 3200.11g. Department of Defense Directive 3230.3

1.2.3 Rationale for the Requirements

This document provides a baseline generic ap-proach for Range Users and Range organizationsthat use the ER or WR to handle, store, assemble,checkout, and launch launch vehicles and their as-sociated payloads. The document is written to

Figure 1-4Owned or Leased Facilities On Sites Uprange Along the Pacific Coast Including US Navy

Facilities at Point Mugu and Downrange From the Western Range

Page 18: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-6

cover a multitude of programs and Range Users. Itspans a wide range of complex systems from thelaunch of the manned space shuttle to loading war-shot torpedoes on submarines. The document hasbeen developed as a baseline document for the fol-lowing reasons:

a. Past experience and input from Range Usersregarding concerns about referenced documents,particularly military standards and military specifi-cations, causing a tiering effect with the result thatdesigners have difficulty understanding which spe-cific requirements apply to a given design

b. Standardized design and safety requirementsfor many aerospace hazardous systems that do notexist except in this document

c. The need for a set of standards that, throughexperience, ensures a prudent level of public safe-ty protection is provided during prelaunch andlaunch operations

d. The need for a set of minimum criteria andrequirements to ensure launch area safety sincecommercial users are not required to directly usemilitary standards or military specifications in thedesign of their hazardous systems except for flighttermination systems required by the Ranges. There-fore, to ensure each Range User is protected fromthe activities of others, this baseline document pro-vides a set of minimum criteria and requirements toensure launch area safety.

e. Wherever possible, military standards (MIL-STDs) and military specifications (MIL-SPECs)will be replaced with equivalent commercial stan-dards. Anywhere a MIL-STD or MIL-SPEC isreferenced in this document, an equivalent commer-cial standard may be used. However, both 45SW/SE and 30 SW/SE shall recognize and approvethe equivalency of the commercial standard prior toits use. As commercial standards and specificationsare developed and approved, this document will beupdated to list and/or incorporate them.

1.2.4 Applicability of the 1997 Edition ofEWR 127-1

This edition of EWR 127-1 is applicable to all newprograms with Program Introduction submittalsdated after 31 October 1997. NOTE: Programsthat have begun significant design prior to this dateand with Program Introductions occurring at a laterdate may submit a program milestone schedule(cDR, PDR, CDR, PI, document submittals, and

other items) and request Range Safety concurrencethat the edition/revision of 127-1 at the time of de-sign commencement is acceptable. However, allRange Users are encouraged to perform ProgramIntroductions at the earliest possible time in theprogram.

1.2.4.1 Status of Previously Approved Programs

Existing program approval and compliance agree-ments on Range User flight hardware systems andsubsystems and ground support equipment, facili-ties, operations, and procedures, including all de-viations, waivers, and meets intent certifications,approved prior to 31 October 1997 shall be hon-ored and do not have to meet the requirements inthis document unless it is determined by the Chiefof Safety or the Range User that one or more of thesituations listed in a through g below exist. NOTE:The exceptions also apply to programs that are ap-proved in accordance with this document, whenapplication of previously non-enforced require-ments of this document are contemplated.

a. Existing programs make major modifications orinclude the use of currently approved components,systems, or subsystems in new applications. EX-CEPTION: Previously approved existing compo-nents, systems, or subsystems that do not increase therisks, do not degrade safety, or can survive new envi-ronments or the new environments are equivalent toor lower than the originally approved qualificationlevels shall be honored and do not have to meet newrequirements as long as data and analyses submittedto and approved by Range Safety show that the crite-ria have been met.

b. The Range User has determined that it is eco-nomically and technically feasible and desirable toincorporate new requirements into the system.

c. The system has been or will be modified to theextent that it is considered a new program or that ex-isting safety approvals no longer apply. NOTE: Riskand hazard analyses in accordance with Appendix 1Band developed jointly by Range Safety and the RangeUser shall be used by Range Safety to determine ap-plicability of the safety approvals.

d. A previously unforeseen or newly discoveredsafety hazard exists that is deemed by either RangeSafety or by the Range User to be significantenough to warrant the change.

e. The system does not meet the requirementsexisting when the system was originally accepted.

Page 19: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-7

NOTE: This category includes systems that werepreviously approved, but when obtaining the ap-proval, noncompliances to the original requirementwere not identified.

f. A system or procedure is modified and a newrequirement reveals that a significant risk exists.

g. Mishap and incident investigations and reportsmay dictate compliance with this edition of thedocument.

1.2.4.2 Implementation of Required Changes

All program hardware and operational changes re-quired by the imposition of a new Range Safetyrequirement shall be implemented in a manner andon a schedule that minimizes the impact on the pro-gram and that is agreed to by both the Range Userand Range Safety.

1.3 RESPONSIBILITIES ANDAUTHORITIES

PL 10, PL 60, PL 98-575, and PD/NSC 25, asimplemented by DoDDs 3200.11 and 3230.3, de-fine public, international, launch area, and launchcomplex safety requirements and establish the re-sponsibility for safety on the Range.

1.3.1 Commanders, 45th Space Wing and30th Space Wing

a. Final authority and responsibility for safety at theER and WR rests with the Space Wing Commanders(Range Commanders). The Range Commander or adesignated representative is responsible for carryingout the Range Safety Program described in this docu-ment.

b. The Wing Commanders shall implement, handlenoncompliances, and/or disposition the requirementsof this document as it applies to Range User programson their Range.

c. Where feasible, the Wing Commanders shallcoordinate all actions between the Ranges to ensurethat consistent and standard Range Safety require-ments and approvals are levied on all Range Users.

1.3.2 Chiefs of Safety, 45th Space Wingand 30th Space Wing

The Chiefs of Safety, the designated representativesof the Wing Commanders/Range Commanders, areresponsible for establishing, complying with, im-plementing, and directing the Range

Safety Program. The Chiefs of Safety responsibili-ties include the following:

a. Enforcing public safety requirements; defininglaunch area safety and launch complex safety re-quirements for mission flight control and otherRange Safety launch support operations

b. Reviewing and coordinating changes with theRange User and providing Range Safety approvalfor operational procedures along with oversight forall prelaunch operations at the launch complex andlaunch vehicle or payload processing facilities forpublic safety and launch area safety concerns

c. Reviewing, providing Range Safety approval,and auditing operations at a launch complex andassociated support facilities for launch complexsafety concerns in accordance with a jointly ac-cepted Launch Complex Safety Training and Certi-fication program. NOTE: If the Range User con-trol authority decides not to implement the planthen Range Safety will assume complete safety re-sponsibility per subparagraph b above.

1.3.3 Commanders, 45th Operations Groupand 30th Operations Group

The Commanders, 45th Operations Group (45 OG)and 30th Operations Group (30 OG), are responsi-ble for:

a. Complying with, implementing, and enforcingthe Range Safety Program

b. Reviewing and accepting all prelaunch andlaunch operations procedures at CCAS and VAFBfor Air Force Programs, including hazardous andsafety critical procedures that may affect publicsafety or launch area safety, after insuring theyhave been approved by Range Safety

c. As a control authority, in accordance with theLaunch Complex Safety Training and CertificationPlan, reviewing and approving prelaunch andlaunch operations procedures for Air Force pro-grams that are limited to launch complex safetyconcerns

d. Providing 45 SW/SE and 30 SW/SE with theinstrumentation, computers, communications,command transmitter systems, weather support,and Range Safety display systems necessary tocarry out prelaunch and flight safety functions.Range Safety shall provide the Operations Groupswith mandatory support requirements, and the Op-erations Groups shall ensure that these require-ments are met.

Page 20: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-8

1.3.4 Commander, 45th Logistics Group

The Commander, 45th Logistics Group (45 LG), isresponsible for complying with, implementing, anddirecting the Range Safety Program and ensuringthat all required instrumentation, computers, com-munications, command systems, and display sys-tems necessary for Range Safety to carry out itsfunctions perform to the prescribed level of reli-ability and meet specified design requirements.

1.3.5 Commanders, 45th Support Groupand 30th Support Group

The Commanders, 45th Support Group (45 SPTG)and 30th Support Group (30 SPTG), are responsi-ble for complying with, implementing, and directingthe Range Safety Program and determining, coor-dinating, and enforcing fire safety, environmentalengineering, and explosive ordnance disposal re-quirements. The Fire Department, EnvironmentalEngineering, and Explosive Ordnance Disposal areresponsible for establishing and implementing theirprograms in coordination with the Office of theChief of Safety.

1.3.6 Commanders, 45th Medical Groupand 30th Medical Group

The Commanders, 45th Medical Group (45 MDG)and 30th Medical Group (30 MDG), are responsi-ble for complying with, implementing, and directingthe Range Safety Program and determining, coor-dinating, and enforcing medical, biological, andradiological health requirements. Radiation Protec-tion Officers and Bioenvironmental Engineering areresponsible for establishing and implementing theirprograms in coordination with the Office of theChief of Safety.

1.3.7 Offices of the Chiefs of Safety, 45thSpace Wing and 30th Space Wing

The Offices of the Chiefs of Safety, 45th SpaceWing (45 SW/SE) and 30th Space Wing (30SW/SE) ensure that the Range Safety Programcomplies with public law and DoD directives asnoted in the Purpose of the Requirement sectionof this Chapter, meets the needs of the Ranges andRange Users, and does not impose undue or overlyrestrictive requirements on Range User programs.NOTE: Unless otherwise noted, the use of the termRange Safety in this Chapter refers to 45 SW/SEand 30 SW/SE. The Safety Offices provide opera-

tional, engineering, scientific, and mathematicalexpertise to accomplish flight analysis, systemsafety, mission flight control, and Air Force groundsafety. Figures 1-5a and b provide charts repre-sentative of both of the Eastern and Western RangeSafety Organizations. The responsibilities of thesesections are slightly different and are described be-low:

1.3.7.1 Air Force Ground Safety, 45th SpaceWing and Ground Safety, 30th Space Wing

1.3.7.1.1 Air Force Ground Safety, 45thSpace Wing. Air Force Ground Safety, 45thSpace Wing (45 SW/SEG) is responsible for devel-oping and implementing a ground and industrialsafety program for Air Force personnel and AirForce resources.

1.3.7.1.2 Ground Safety, 30th Space Wing.Ground Safety, 30th Space Wing (30 SW/SEG) isresponsible for the following. NOTE: 30 SW/SEGis similar to the ER Operations Safety, a govern-ment contractor.

a. Reviewing, coordinating, and approving pro-cedures for prelaunch processing

b. Monitoring selected activities at the launchhead

c. Providing prelaunch and countdown LaunchDisaster Control Groups

d. Defining Safety Clearance Zones and provid-ing advice for the control of access to Safety Clear-ance Zones within the confines of the launch head

e. Providing emergency response support and/orassistance in the event of failures and mishapsduring ground operations

f. Advising the on-site commander on disasterpreparedness and responsiveness

1.3.7.2 Mission Flight Control, 45th SpaceWing and 30th Space Wing

Mission Flight Control, 45th Space Wing (45SW/SEOO) and 30th Space Wing (30 SW/SEO)are responsible for protecting the general public,the launch area, and US and foreign land massesfrom errant launch vehicle flight. In conjunctionwith Operations Support and Analysis (30SW/SEY and 45 SW/SEOE and SEOS) and Sys-tems Safety (SES), Mission Flight Control usesflight safety analysis and systems safety engineer-ing products to develop and implement real-timemission rules and flight termination criteria to con-

Page 21: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-9

trol errant launch vehicle flight from launch to im-pact of vehicles with suborbital trajectories or toorbital insertion for space launch vehicles.

1.3.7.3 Systems Safety, 45th Space Wing and30th Space Wing

Systems Safety, 45th Space Wing (45 SW/SES)and 30th Space Wing (30 SW/SES) are responsi-ble for ensuring that public, launch area and launchcomplex safety and resource protection are ade-quately provided by and for all programs using theRanges. Responsibilities include:

a. Developing safety critical design and operatingcriteria and requirements

b. Reviewing and approving design, test, and

documentation for airborne range safety systems.c. Developing, enforcing, reviewing and approv-

ing engineering design, test, and documentation forhazardous launch vehicle, payload, ground supportequipment, and facility systems

d. Reviewing, approving, monitoring, and classi-fying (as public launch area or launch complexsafety) hazardous and safety critical operations

e. Providing safety engineering and developingprocesses and procedures to mitigate risks involvedin prelaunch and launch operations for both thegeneral public and launch area

f. At the ER, overseeing Operations Safety andensuring they meet contract requirements

g. Operations Safety, a government contractor

COMMANDER45TH SPACE WING(Range Commander)

RANGE SAFETY (SE)CHIEF OF SAFETY

GROUND SAFETY(SEG)

SYSTEMSSAFETY

(SES)

MISSION FLIGHTCONTROL AND

ANALYSIS (SEO)

MISSION FLIGHTCONTROL

(SEOO)

STSOPERATIONS

SUPPORT ANDANALYSIS

(SEOS)

ELV OPERATIONSSUPPORT AND

ANALYSIS (SEOE)

Figure 1-5aEastern Range Safety Organization

COMMANDER30TH SPACE WING(Range Commander)

RANGE SAFETY (SE)CHIEF OF SAFETY

GROUND SAFETY(SEG)

SYSTEMS SAFETY(SES)

MISSION FLIGHTCONTROL (SEO)

FLIGHT ANALYSIS(SEY)

Figure 1-5bWestern Range Safety Organization

Page 22: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-10

for 45 SW/SES is responsible for reviewing for,monitoring for, and enforcing compliance throughRange Safety and/or the appropriate launch com-plex control authority, with this document and otherRange Safety requirements by all personnel oper-ating as Range Users or Support Agencies on theER, primarily during hazardous and safety criticaloperations. The operations and responsibilities ofthis organization are similar to those performed by30 SW/SEGP on the WR.

1.3.7.4 Operations Support and Analysis, 45thSpace Wing, and Flight Analysis, 30th SpaceWing

Operations Support and Analysis, 45th SpaceWing (45 SW/SEOE and SEOS) and Flight Analy-sis, 30th Space Wing (30 SW/SEY) are responsiblefor developing criteria for the control of errant ve-hicle flight to provide public safety. Responsibili-ties include:

a. Approving all launch vehicle and payloadflight plans

b. Determining the need for flight terminationsystems

c. Establishing mission rules in conjunction with45 SW/SEOO and 30 SW/SEO and Range Users

d. Determining criteria for flight termination ac-tion

e. Assessing risks to protect the general public,launch area, and launch complex personnel andproperty

f. Identifying and evaluating risk reduction ac-tions such as evacuation, sheltering, and safetyholds for suitable meteorological conditions

g. Developing mathematical models to increasethe effectiveness of errant vehicle control whileminimizing restrictions on launch vehicle flight

h. In conjunction with Mission Flight Control,ensuring that Mission Flight Control Officers aretrained to perform errant launch vehicle control

i. Determining collision avoidance (COLA) re-quirements for mannable objects

1.3.7.5 Relationship with Range Users

Each of the Safety Office sections is responsible forinitiating, establishing, and implementing RangeUser interface processes to ensure that the require-ments of this document are met and, if desired, tai-lored to meet individual Range User program re-quirements. The interface process is described inthe Range Safety and Range User Interface

Processes section of this Chapter.

1.3.8 Range Users and Supporting Agen-cies

Range Users and supporting agencies are responsi-ble for the following:

a. Providing safe systems, equipment, facilities,and materials in accordance with this document

b. Conducting their operations in a safe mannerthat complies with and implements those portionsof the Range Safety Program that are applicable totheir programs

c. Obtaining review and approval for the followingdocuments:

1. Tailored versions of EWR 127-1, as desired,System Safety Program Plans (SSPP), noncompliancerequests, and Launch Complex Safety Training andCertification Plans (See Appendixes 1A, 1B, and 1Cof this Chapter.)

2. Preliminary and Final Flight Data Packages(PFDP and FFDP), Aircraft and Ship IntendedSupport Plans (ISPs), and Directed Energy Plans(DEPs) (See Chapter 2.)

3. Missile System Prelaunch Safety Package(MSPSP) (See Chapter 3 and Appendix 3A.)

4. Airborne Range Safety System Report(RSSR) (See Chapter 4 and Appendix 4A.)

5. Facility Safety Data Packages (FSDP) asrequired for all critical facilities and launch com-plexes (See Chapter 5 and Appendix 5A.) and ex-plosive quantity distance site plans

6. Ground Operations Plans (GOP) and Haz-ardous and Safety Critical Procedures (See Chapter6 and Appendixes 6A and 6B.)

d. Submitting data for flight control operations,obtaining a Range Safety Launch Operations Ap-proval Letter or verbal approval at the LaunchReadiness Review, and participating in safety criti-cal operations (See Chapter 7.)

e. As applicable, ensuring compliance with theNational Aeronautics and Space Council documentNuclear Safety Review and Approval Procedure forMinor Radioactive Sources in Space Operations

f. As applicable, ensuring compliance withPresidential Directive/NSC 25 as outlined in DoDD3200.11 and AFI 91-110

g. As applicable, ensuring that the requirementsof PL 98-575 and DOT Office of CommercialSpace Transportation (OCST) 14 CFR, Chapter IIIare met

Page 23: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-11

h. Performing risk analyses and implementing con-tingency plans to protect the general public in theevent of a threat from de-orbiting launch vehicles.NOTE: DOT commercial licenses normally addressthese analyses for commercial programs.

i. Coordinating their safety programs withRange Safety to ensure the activities of both or-ganizations meet national policy goals and providefor public and launch site safety and resource pro-tection while minimizing impact on mission re-quirements

j. Providing for crew safety in manned spacelaunch systems and coordinating crew safety pol-icy, procedures, and activities with the Office of theChief of Safety

k. Verifying compliance with this document.NOTE: The use of subcontractors does not relievethe Range User of responsibility. The Range Usershall provide adequate contractual direction andmonitor subcontractor performance to verify com-pliance.

l. As applicable, when involved in joint projects,interfacing and integrating with other Range Usersor associated contractors in their safety programs

1.4 RANGE SAFETY POLICY

a. It is the policy of the Ranges to ensure that therisk to the public, to personnel at the launch area,and to national resources is minimized to the great-est degree possible. This policy shall be imple-mented by employing risk management in threecategories of safety: Public Safety, Launch AreaSafety, and Launch Complex Safety.

b. The Range User shall endeavor to maintain thelowest risk possible, consistent with mission re-quirements, and in consonance with ER and WRlaunch risk guidance. NOTE: Individual hazardousactivities may exceed guidance based on nationalneed after implementation of available cost-effective mitigation. The Launch Area Safety sec-tion of this Chapter includes formulations forevaluating cost-effectiveness.

c. The Wing Commanders may vary from thiscriteria for particular programs or missions basedon geography, weather, and national need; how-ever, the basic standard is no more than that vol-untarily accepted by the general public in normalday-to-day activities.

d. Launch risk guidance has been establishedbased on a standard of a collective risk level of not

more than 30 casualties in 1 million (30 x 10-6) forthe general public and not more than 300 casualtiesin 1 million (300 x 10-6) for essential launch areapersonnel. The basic standard for the general pub-lic is not more than the risk voluntarily accepted innormal day-to-day activities. Further informationon acceptable risk criteria may be found in Appen-dix 1D.

e. Imminent danger situations are subject to thefollowing:

1. Immediate action shall be taken by the su-pervisor or individual responsible for the immediatearea to correct the situation, apply interim controlmeasures, stop the operation, and evacuate all per-sonnel.

2. Any operation, condition, or procedure thatpresents imminent danger shall be brought to theimmediate attention of the supervisor or individualresponsible for the immediate area.

3. All imminent danger situations shall be re-ported to Range Safety not later than 1 h from thetime the situation is identified.

4. Personnel may decline to perform assignedtasks because of a reasonable belief that, under thecircumstances, the task presents imminent danger,coupled with a reasonable belief that there is insuf-ficient time through normal reporting for abatementprocedures to correct the situation.

1.4.1 Public Safety

The Ranges shall strive to ensure that the risk tothe general public and foreign countries fromRange operations meets the criteria established inPL 60, Legislative History. Figure 1-6 shows therisk management criteria guidance to be used fordetermining acceptable risk for individual launches.The figure of 30 x 10-6 shall be used by bothRanges as a level defining “acceptable launch riskwithout high management (Range Commander)review.” Based on national need and the approvalof the Range Commander/Wing Commanders,launches may be permitted using a predicted riskabove 30 x 10-6.

1.4.1.1 Prelaunch and Launch Operations

a. Range Safety shall review, approve, andthrough Operations Safety, monitor, and imposesafety holds when necessary, on all prelaunch andlaunch operations conducted on the Ranges to en-sure that the hazards associated with propellants,

Page 24: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-12

ordnance, radioactive material, and other hazardoussystems do not expose the general public to risksgreater than those considered acceptable by publiclaw and state documents, such as PL 99-499, 29CFR 1910.119, 40 CFR 355, Executive Order12856, and CAL-OSHA.

b. Range Safety shall conduct and oversee launchvehicle, payload, mission flight control, and RangeSafety launch support operations to ensure thatrisks to the general public and foreign countries andtheir property do not exceed acceptable limits con-sistent with mission and national needs.

c. Range Safety shall ensure that each RangeUser provides each launch system with a capabilitythat allows Range Safety to initiate a hold-fire thatprevents launch in the event of loss of Range Safetycritical systems or violation of mandatory RangeSafety launch commit criteria (Appendix 7A).

1. Safety holds shall be initiated to prevent thestart of a launch operation or to stop a launch op-eration that is already underway if it violates pub-lic, launch area, or launch complex safety or launchcommit criteria.

2. Safety holds may be called if Range Safetylaunch commit criteria are violated or if adequatesafety cannot be ensured or verified when personnel

or resources are jeopardized.3. Safety holds may be initiated by the Mission

Flight Control Officers, Operations Safety Man-ager, Range Control Officers, Range OperationsCommander (WR), Aerospace Control Officer(WR), Range User, or any responsible supervisorin charge of a launch operation.

1.4.1.2 Range Safety Critical Systems

Range Safety critical systems include all airborneand ground subsystems of the Range Safety Sys-tem. The Range Safety System consists of airborneand ground flight termination systems (FTSs), air-borne and ground Range Tracking Systems(RTSs), and the Telemetry Data TransmittingSystem (TDTS).

a. All Range Safety critical systems shall be de-signed to ensure that no single point of failure, in-cluding software, will deny the capability to moni-tor and terminate or result in the inadvertent termi-nation of a launch vehicle or payload, as applica-ble.

b. The reliability requirements of the RangeSafety System are as follows:

1. The overall airborne and ground FTS reli-ability goal is 0.9981 at the 95 percent confidence

(“From a Safety Standpoint they [missiles] will be no more dangerous than conventional airplanes flyingoverhead.” Legislative History, 81st Congress, pg. 1235)

Figure 1-6Acceptable Public Exposure Launch Operation Risk Guidance

Page 25: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-13

level.(a) The airborne FTS reliability goal shall

be a minimum of 0.999 at the 95 percent level. Thisgoal shall be met by combining the design approachand testing requirements of Chapter 4 of thisdocument.

(b) The ground FTS shall have a reliabilityof 0.999 at the 95 percent confidence level for a 4 hduration, as required.

2. The overall airborne and ground RangeTracking System (RTS) reliability is a function ofthe following requirements:

(a) The airborne RTS reliability shall be0.995 at the 95 percent confidence level fortransponder systems and 0.999 at the 95 percentconfidence level for global positioning systems.These goals shall be met by combining the designapproach and testing requirements of Chapter 4 ofthis document.

(b) The ground RTS reliability shall be0.999 at the 95 percent confidence level for a 1 hduration, as required.

3. There are no reliability requirements for theTDTS.

c. When possible, Range Safety critical systemsshall be designed to allow single failures in hard-ware and software and still provide overall systemredundancy.

d. Other systems determined to be Range Safetycritical shall have a design reliability of 0.999 atthe 95 percent confidence level.

1.4.1.3 Control of Errant Vehicle Flight

a. Range Safety shall verify that all launch vehi-cles launched from or onto the Ranges have a posi-tive, range-approved method of controlling errantvehicle flight to meet the objective of minimizingrisks to the general public and foreign countries.NOTE: Normally, control systems on launch vehi-cles using the Ranges shall consist of an airborneRange Safety System that shall meet all the re-quirements of Chapters 2, 4, and 7 of this docu-ment. A thrust termination system may be consid-ered as an alternative to a Range Safety System;however, quantification of risks must be deter-mined, and the requirements in Chapter 2 shall bemet. The alternative thrust termination concept anddesign shall be approved by the Range Com-mander.

b. Range Safety shall establish flight termination

criteria and Range Safety mission flight rules toensure that operations do not exceed acceptablepublic safety limits.

c. Range Safety shall establish and control Hazard-ous Launch Areas and procedures to protect the pub-lic on land, on the sea, and in the air for each launchand launch vehicle using the Ranges and to ensure thefollowing criteria are met:

1. No intact launch vehicle, scheduled debris,or payload, or launch vehicle and payload subsys-tems shall be allowed to intentionally impact onland except in the launch area inside the impactlimit lines.

2. Flight paths and trajectories shall be de-signed so that normal impact dispersion areas donot encompass land.

3. Safety margins shall be used to avoid overlyrestrictive flight termination (destruct) limits.

d. Range Safety may allow errant launch vehiclesto fly to obtain maximum data until they wouldpresent an unacceptable risk to the public or untilRange Safety can no longer control the launch ve-hicle.

1.4.2 Launch Area Safety

The Ranges shall ensure that all personnel locatedon CCAS or VAFB or on any supporting sitewithin the ER or WR are provided protection fromthe hazards associated with Range operations.

a. Table 1-1 shows nominal launch area andlaunch complex hazard consequence and probabil-ity categories correlated to different levels of ac-ceptability for prelaunch hazards not associatedwith launch or Range Safety launch commit crite-ria. Numbers provided in Table 1-1 are guides onlyand are not necessarily hard limits.

b. Range Safety shall provide errant launch vehi-cle control protection for the launch area, includingCCAS, KSC, and VAFB.

c. Range Safety shall conduct risk studies andanalyses to determine the risk levels, define accept-able risk levels, and develop exposure criteria.

d. Range Safety shall establish design criteriaand controls, procedures, and processes to mini-mize personnel risks and ensure acceptable launcharea/complex risk levels are not exceeded.

e. Range Safety shall evaluate all launch vehicle,payload, ground support, and facility systems usedon the Ranges to test, checkout, assemble, handle,support, or launch launch vehicles or payloads with

Page 26: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-14

regard to their hazard potential and ensure they aredesigned to minimize risks to personnel and fallwithin acceptable exposure levels.

f. Range Safety shall ensure that all hazardous op-erations affecting launch area safety are identified andconducted using Range Safety approved formal writ-ten procedures. Through Operations Safety, RangeSafety shall ensure launch area safety is provided inaccordance with this document and approved Opera-tions Safety Plans.

g. Range Safety shall define the threat envelopeof all hazardous operations affecting launch areasafety and establish Safety Clearance Zones toprotect personnel and resources. NOTE: A mini-mum number of personnel shall be exposed to theminimum hazard level consistent with efficient taskaccomplishment.

h. Range Safety shall ensure all personnel per-forming hazardous operations that may impactlaunch area safety are provided adequate training toensure proper conduct of their jobs and tasks by

reviewing Range User training plans.

Page 27: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-15

i. Launch Area Resource Protection1.The Ranges shall ensure that launch area

physical resources are provided an acceptable de-gree of protection based on federal law and nationalstandards.

2. Procedures and policies that are applied forpublic and launch area safety shall be used to re-duce risks to launch area physical resources to ac-ceptable levels.

3. Siting, design, and use of physical resourcesshall consider potential hazards and threat enve-lopes to ensure that damage exposure is limited toacceptable levels as defined by federal law and na-tional consensus standards.

1.4.3 Launch Complex Safety

The single commercial user, full-time government

tenant organization or USAF squadron/detachmentcommander, as the control authority has the re-sponsibility for launch complex safety and will ex-ercise the function in accordance with the LaunchComplex Safety Training and Certification require-ments. The control authority has the option of dele-gating this responsibility to the Chiefs of Safety.NOTE: The control authority for safety as definedin this document includes areas within a completelaunch complex (or missile silo) and adjacent fa-cilities used by each agency for launch vehicleand/or payload processing. In all cases, the Chiefsof Safety shall review and approve all hazardousoperating procedures and any other procedures thatRange Safety may review to insure such operationsdo not pose or create a hazardous condition.

Table 1-1Acceptability Guidelines for Prelaunch Launch Area/Launch Complex Hazard Consequences

and Probability Categories

HAZARD SEVERITY POTENTIAL CONSEQUENCES PROBABILITY*

CategoryPersonnel

Illness/InjuryEquipment

Loss($)Unit

DowntimeData

Compromise A B C D EI Catastrophic May cause death. > 1,000,000 > 4 months Data is never recoverable or

primary program objectives arelost.

II Critical May cause severeinjury or severe occu-pational illness.

200,000to

1,000,000

2 weeksto

4 months

May cause repeat of test pro-gram.

III Marginal May cause minorinjury or minor occu-pational illness.

10,000to

200,000

1 Dayto

2 Weeks

May cause repeat of test period.

IV Negligible Will not result in injuryor occupational illness.

< 10,000 < 1 Day May cause repeat of data point,or data may require minor ma-nipulation or computer rerun.

RISK PRIORITY: Unacceptable Waiver or deviation required Operation permissible

*Probability refers to the probability that the potential consequence will occur in the life cycle of the system (test/activity/operation). Use the following list to determine the appropriate Risk Level.

DESCRIPTION**THRESHOLD

LEVELPROBABILITY

VALUE SPECIFIC INDIVIDUAL ITEM FLEET OR INVENTORY***A Frequent 3X10-1 Likely to occur repeatedly Continuously experienced----------------------- 8X10-2 -----------------------------------------------------------------------------------------------------------------------------B Reasonably

probable3X10-2 Likely to occur several times Will occur frequently

----------------------- 8X10-3 -----------------------------------------------------------------------------------------------------------------------------C Occasional 3X10-3 Likely to occur sometime Will occur several times----------------------- 8X10-4 -----------------------------------------------------------------------------------------------------------------------------D Remote 3X10-4 Unlikely to occur, but possible Unlikely, but can reasonably be

expected to occur----------------------- 8X10-5 -----------------------------------------------------------------------------------------------------------------------------E Extremely Im-

probable3X10-5 The probability of occurrence cannot be

distinguished from zero.Unlikely to occur, but possible

** Definitions of descriptive words may have to be modified based on quantity involved.*** The size of the fleet or inventory and system life cycle should be defined.

Page 28: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-16

1.4.3.1 General Requirements

a. Regardless of whether the control authority orRange Safety takes responsibility for launch com-plex safety, the following general requirements ap-ply:

1. Range Safety shall provide errant launchvehicle control protection for the launch area, in-cluding CCAS, KSC, and VAFB and all launchcomplex locations therein.

2. Range Safety shall conduct risk studies andanalyses to determine and define launch complexacceptable risk levels and develop exposure crite-ria.

3. Range Safety shall establish design criteriaand controls, procedures, and processes to mini-mize launch area and launch complex personnelrisks and ensure acceptable risk levels are not ex-ceeded.

4. Range Safety shall evaluate all launch vehi-cles, payloads, ground support, and facility systemsused on the Ranges to test, checkout, assemble,handle, support, or launch vehicles or payloadswith regard to their hazard potential and ensurethey are designed, tested, and maintained to mini-mize risks to launch complex personnel and fallwithin acceptable exposure levels.

b. If the control authority assumes responsibilityfor launch complex safety, the following generalrequirements apply:

1. As requested, Range Safety shall providetechnical advice, requirements interpretation, andsafety guidance to the control authority for launchcomplex safety issues.

2. Range Safety shall audit launch complexhazardous and safety critical procedures to ensurecompliance with this document.

1.4.3.2 Launch Complex Safety Responsibility

The organization responsible for launch complexsafety, either Range Safety or the launch complexcontrol authority (AF Squadron Commanders forAF programs), is subject to the following require-ments:

a. Hazardous Operations1. If requested by the control authority, Range

Safety shall ensure that all hazardous operationsaffecting launch complex safety are conducted us-ing Range Safety approved formal written proce-dures. Through Operations Safety, Range Safetyshall ensure launch complex safety is provided in

accordance with this document and approved Op-erations Safety Plans.

2. If assuming responsibility, the controlauthority shall ensure that all hazardous operationsaffecting launch complex safety are conducted us-ing formal written procedures approved by a spacesafety professional. In accordance with LaunchComplex Safety Training and Certification Re-quirements, the control authority shall ensurelaunch complex safety is provided in accordancewith this document and approved OperationsSafety Plans.

b. Either the control authority or Range Safety, ifrequested, shall define the threat envelope of allhazardous operations affecting launch complexsafety and establish Safety Clearance Zones toprotect launch complex personnel and resources.NOTE: A minimum number of personnel shall beexposed to the minimum hazard level consistentwith efficient task accomplishment.

c. Either the control authority or Range Safety, ifrequested, shall ensure all personnel performinghazardous operations that may impact launch com-plex safety are adequately trained to perform theirjobs and tasks.

d. Either the control authority or Range Safety, ifrequested, shall ensure that adequate personal pro-tective equipment is provided as defined by thisdocument and approved Operations Safety Plans.

e. The areas and facilities for which the controlauthority has responsibility for launch complexsafety are available from the Range Safety Offices.

f. Launch Complex Resource Protection1. The Ranges and control authorities shall

ensure that launch complex physical resources areprovided an acceptable degree of protection basedon federal law and national consensus standards.

2. Procedures and policies that are applied forpublic, launch area, and launch complex safetyshall be used to reduce risks to launch complexphysical resources to acceptable levels.

3. Siting, design, and use of physical resourcesshall consider potential hazards and threat enve-lopes to ensure that damage exposure is limited toacceptable levels as defined by federal law and na-tional consensus standards.

4. Launch complex resource protection issuesshall be coordinated between Range Safety and theaffected Range Users.

(a) USAF squadron or detachment Com-

Page 29: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-17

manders shall be responsible for implementing re-source protection requirements for all DoD flighthardware, ground support equipment, and facilitieswithin their assigned areas.

(b) US Navy, NASA, and other governmenttenant organizations shall be responsible for alltenant-occupied facilities and tenant-owned equip-ment.

(c) The CCAS Commander shall be respon-sible for implementing of resource protection re-quirements for an area on CCAS not assigned to aspecific USAF squadron or detachment commanderor other Range User.

(d) Commercial Range Users shall be re-sponsible for commercially owned, leased, or li-censed physical resources

1.4.3.3 Launch Complex Safety Training andCertification Requirements

The control authority shall implement a LaunchComplex Safety Training and Certification Plan inaccordance with the Launch Complex SafetyTraining and Certification Requirements availablefrom the Range Safety Offices. This process in-cludes the following steps:

a. Range Safety and the control authority jointlytailor the subject document.

b. The control authority submits a plan to com-ply with the subject document.

c. Range Safety reviews and approves the plan.d. The complex control authority safety plan

shall include qualification and certification docu-mentation of personnel performing the safety func-tion for review and approval by the Chiefs ofSafety.

e. Range Safety shall audit launch complexsafety procedures and processes as necessary.

1.5 SAFETY AUTHORIZATIONS,COMPLIANCES, AND

DOCUMENTATION

1.5.1 Purpose of Obtaining Safety Approvals

a. To operate, use, and launch launch vehiclesand payloads from or onto the Ranges, specificmandatory safety approvals shall be obtained toshow compliance with and meet the requirements ofthe Ranges.

b. Commercial users providing launch servicesshall have an approved DOT license in accordancewith DOT OCST 14 CFR Chapter III and meet the

requirements of PL 98-575.

1.5.2 Authorizations

a. Programs launching from only the ER or WRshall obtain authorizations from the appropriate 45SW or 30 SW authority.

b. Programs launching from both the ER andWR shall obtain authorizations for common re-quirements from appropriate 45 SW and 30 SWauthorities.

c. Unique requirements shall require authoriza-tions from the appropriate 45 SW or 30 SWauthority.

d. In general, if a program is approved at the ERor WR, it will be approved at the other withoutfurther review with the exception of ER or WRspecific requirements identified in this document,design or operational changes to the program due tothe change of processing location (a new GOP andhazardous procedures are normally always re-quired), and the exceptions identified in items athrough g of the Status of Previously ApprovedPrograms section of this Chapter.

1.5.2.1 Safety Approvals Authorized by theWing Commanders

The following safety approvals shall be authorizedby the Wing Commanders:

a. Tailored versions of EWR 127-1 affectingpublic safety

b. Range Safety mission flight rules, includingtermination (errant vehicle control) criteria for alllaunch vehicles

c. Range Safety launch commit criteria for alllaunch vehicles

d. The launch of launch vehicles containing ex-plosive warheads

e. The launch of nuclear payloadsf. Noncompliances affecting public safety

1.5.2.2 Safety Approvals Authorized by the Chiefof Safety or a Designated Representative

The following safety approvals shall be authorizedby the Chief of Safety or a designated representa-tive:

a. Tailored versions of EWR 127-1 not affectingpublic safety

b. Noncompliances not affecting public safetyc. System Safety Program Pland. Launch Complex Safety Training and Certifi-

cation Plan

Page 30: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-18

e. Preliminary and Final Flight Data Packagesf. Aircraft and Ship Intended Support Plansg. Directed Energy Plansh. Missile System Prelaunch Safety Packagei. Airborne Range Safety System Reportj. Hazardous and Safety Critical Proceduresk. Facilities Safety Data Packagel. Range Safety Launch Operations Approval

Letterm. Final Range Safety Approval for Launchn. Range Safety instrumentation, tracking, data,

and display requirements for all launch vehicles

1.5.2.3 Launch Complex Safety ApprovalsAuthorized by Control Authorities

Control authorities may approve hazardous andsafety critical procedures associated with launchcomplex safety in accordance with Launch Com-plex Safety Training and Certification Require-ments.

1.5.2.4 Safety Approvals Authorized by theDoD Explosive Safety Board

Explosive site plans require the signature of amember of the DoD Explosive Safety Board(DDESB).

1.5.3 Radioactive Material Launches

All Range Users shall notify Range Safety of anyintended launch of radioactive materials during theconcept phase of the program.

1.5.3.1 National Aeronautics and Space Coun-cil Compliance

As applicable, all Range Users shall certify com-pliance with the National Aeronautics and SpaceCouncil (NASC) document, Nuclear Safety Reviewand Approval Procedures for Minor Radioactivesources in Space Operations, dated 16 June 1970.Range Users may use their own agency equivalentdocument if it meets the requirements of the NASCdocument. Detailed information and procedures arein Chapter 3.

1.5.3.2 Presidential Directive/National SecurityCouncil 25 Compliance

As applicable, all Range Users contemplatinglaunch of a major radioactive source shall complywith PD/NSC 25 as outlined in DoDD 3200.11 andAFI 91-110. Detailed information and proceduresare in Chapters 2 and 3.

1.5.3.3 Radioactive Material Launch Approval

All Range Users shall certify and show proof toRange Safety that they have obtained launch ap-proval for radioactive materials. Detailed informa-tion and procedures are in Chapters 2 and 3.

1.5.4 Documentation and Activity Require-ments

Chapters 2 through 7 of this document haveDocumentation Requirements sections. Thesesections describe the documents that shall be sub-mitted and the processes that shall be used to ob-tain the necessary approvals to launch from theRanges. In addition, appendixes in Chapters 2, 3,4, 5, and 6 provide detailed document content re-quirements that shall be met for some, but not allrequired documents. All other documentation notedin the specific chapters shall also be approved asindicated in the respective chapters. NOTE 1:While developing the documentation requirements,Range Users are encouraged to work closely withRange Safety to facilitate the approval process.NOTE 2: The Range User Handbook providesadditional helpful information regarding documen-tation requirements.

1.5.4.1 Tailored EWR 127-1, System SafetyProgram Plan, Noncompliance Requests, andLaunch Complex Safety Training and Certifica-tion Plan

a. If desired, a Range User and Range Safetyjointly tailored EWR 127-1 may be developed. (SeeAppendix 1A for further information.)

b. A Systems Safety Program Plan (SSPP) shallbe approved within 45 days of any program cDR.(See Appendix 1B for further information.)

c. Noncompliance requests shall be submitted forall identified noncompliances to this document.(See Appendix 1C for further information.)

d. If a control authority desires to assume launchcomplex safety responsibility, a Launch ComplexSafety Training and Certification Plan shall be ap-proved prior to assumption of this responsibility.

1.5.4.2 Flight Data Packages, Intended Sup-port Plans, and Directed Energy Plans

a. The PFDP and FFDP shall be approved priorto support final Launch Readiness Reviews(LRRs).

b. ISPs shall be approved prior to the LRR.c. DEPs shall be approved prior to the LRR.

Page 31: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-19

d. PFDP, FFDP, ISP, and DEP content require-ments may be found in Chapter 2.

1.5.4.3 Missile System Prelaunch SafetyPackage

a. The MSPSP including design documentation,initial test plans and test reports, and recertificationrequirements for all hazardous and safety criticallaunch vehicle and payload systems, ground sup-port equipment, facilities, their interfaces, and op-erations shall be approved prior to hardware arrivaland/or use at the Ranges. NOTE: The NationalAeronautics and Space Administration (NASA) isresponsible for providing review and approval for po-tential hazardous systems and activities on KSC, ex-cept for launch vehicle flight safety, which is the re-sponsibility of the ER.

b. Content and submittal requirements for theMSPSP can be found in Chapter 3 and Appendix3A.

1.5.4.4 Airborne Range Safety System Report

a. The airborne RSSR, including all designdocumentation and test plans and test reports forthe FTS, RTS, and TDTS shall be approvedprior to launch.

b. Content and submittal requirements can befound in Chapter 4 and Appendix 4A.

1.5.4.5 Ground Operations Plan and Hazard-ous and Safety Critical Procedures

a. The GOP shall be approved prior to the startof operations at the Ranges.

b. Content and submittal requirements for theGOP can be found in Chapter 6 and Appendix 6A.

c. Hazardous and safety critical procedures shallbe approved by Range Safety prior to their use atthe Ranges.

d. Content and submittal requirements for Haz-ardous and Safety Critical Procedures may befound in Chapter 6 and Appendix 6B.

1.5.4.6 Facilities Safety Data Package

a. The FSDP shall be approved prior to facilityuse.

b. Content and submittal requirements for theFSDP may be found in Chapter 5 and Appendix5A.

1.5.4.7 Launch Operations Approval

a. WR. A Range Safety Launch Operations Ap-proval Letter to launch from or onto the WR shallbe provided to the Range User no later than thescheduled LRR conducted prior to a plannedlaunch operation. Receipt of this letter depends onthe Range User having obtained the previously re-quired approvals described in this Chapter.

b. ER. Launch Operations Approval Letters arenot normally used on the ER. Wing Safety’s GO atthe LRR constitutes approval to launch and is con-tingent upon the Range User having obtained therequired approvals identified in this Chapter. How-ever, a Range Safety Launch Operations ApprovalLetter can be provided, if requested.

c. Lack of Launch Operations Approval may re-sult in the launch being withdrawn from the Rangeschedule.

1.5.4.8 Final Range Safety Approval to Launch

a. Holdfire checks, Range Safety System checks,and other safety critical checks shall be performedsatisfactorily; environmental conditions shall bemet; and all Range Safety launch commit criteriashall be “green” prior to final approval to launch.

b. Given that holdfire checks, Range Safety Sys-tem checks, other safety critical checks, and

Page 32: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-20

environmental conditions are satisfactory and allRange Safety launch commit criteria are “green,”Range Safety shall provide a final approval tolaunch as follows: At the ER, the Chief of Safetyprovides approval by relaying the MFCO,“CLEAR TO LAUNCH.” At the WR, the MFCOissues a GREEN to go electronically and a verbalcall “Safety is sending a green.”

1.6 RANGE SAFETY AND RANGEUSER INTERFACE PROCESS

The complexity of present space programs and theinevitable cost of changes in hardware and impacton time schedules can be reduced by joint RangeSafety and Range User planning. The goal of theinterface process is to provide final Range Safetyapprovals for launch as early as possible. RangeUsers are strongly encouraged to solicit RangeSafety participation in the development of Requestsfor Proposals, source selection processes, and de-velopment of contract documents such as State-ments of Work and Contract Data RequirementsLists.

It is not the intent of this document or the interfaceprocess to stifle ingenuity, new technology, state-of-the-art development, or unique solutions to safetyproblems. Instead, the interface process ensuresthat both Range Safety and Range Users under-stand the requirements of this document and reachmutual agreement on compliance methods early inthe program.

1.6.1 Range Safety Funding

Range Users and supporting agencies are responsi-ble for full funding of activities associated withRange Safety support early in and throughout theprogram in accordance with funding requirementsof DoDD 3200.11, AFR 80-29, AFI 99-110 at theER and WR and 45 SWI 99-101 at the ER with thefollow-on funding for each fiscal year to be re-ceived at the start of each fiscal year. Programsintending to perform launch operations at both theER and WR shall fund both Ranges.

At the ER, Range Safety will provide cost esti-mates in accordance with 45 SWI 99-101 to helpRange Users estimate funding requirements.

1.6.2 Initial Range Safety and Range UserTechnical Interchange Meeting

Range Users shall contact Range Safety to arrangean initial Technical Interchange Meeting (TIM)during the concept phase of a program. The pur-pose of this meeting is to present program conceptsregarding flight plans; launch complex selection;launch vehicle, payload, and ground supportequipment; range safety system; and facility design,operations, and launch complex safety responsibil-ity to determine if there are any major safety con-cerns that could impact the program.

This TIM may occur at anytime but should be nolater than the formal Program Introduction in ac-cordance with the Universal Documentation Systemand, at the ER, 45 SWI 99-101. The cost of theinitial interface meetings will not be charged to theRange User as long as the workload associatedwith this activity is insignificant in scope.

1.6.3 Tailoring Process

If desired by the Range User, Range Safety and theRange User shall jointly develop a tailored editionof this document for the program. The purpose oftailoring the document is to ensure that only appli-cable or alternative Range User requested equiva-lent requirements are levied upon the program andthat Range Safety requirements are levied in themost efficient manner possible.

a. Requirements in this document are subject totailoring within limits, including detailed design,operating, and documentation submission require-ments. Details of the tailoring process can be foundin Appendix 1A.

b. Tailoring, if desired, should begin at the earli-est opportunity and finish no later than the criticaldesign review.

1.6.4 Other Range Safety and Range UserTechnical Interchange Meetings andReviews

Range Users and Range Safety shall jointly agreeto arrange the following TIMs and reviews as nec-essary:

a. Flight Safety TIMs (PFDP-, FFDP-related,Chapter 2)

Page 33: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-21

b. As required, combined or independent safetyreviews in association with the Concept DesignReview (cDR), Preliminary Design Review (PDR),and Critical Design Review (CDR) for launch ve-hicle, payload, and associated ground supportequipment design (MSPSP-related, Chapter 3),airborne Range Safety System and associatedground support equipment design (RSSR-related,Chapter 4), critical facility design (FSDP-related,Chapter 5), and ground operations plans (GOP-related, Chapter 6)

1. cDRs shall provide design and operationsdetail to at least the system level.

2. PDRs shall provide design and operationsdetail to at least the subsytem and box level.

3. CDRs shall provide design and operatingdetail to the component and piece part level.

c. Hazardous and Safety Critical ProceduresTIMs (Chapter 6)

d. Other TIMs, reviews, and meetings as neces-sary

1.6.5 Noncompliance With the Require-ments

Range Users are responsible for identifying allnoncompliances with this document to RangeSafety for resolution. The three types of noncom-pliances are meets intent certifications (MICs), de-viations, and waivers. Details and requirements forsubmitting noncompliance requests can be found inAppendix 1C.

1.6.5.1 Meets Intent Certification

MICs are used when Range Users do not meet ex-act EWR 127-1 requirements but do meet the intentof the requirements. Rationale for equivalent safetyshall be provided. NOTE: MICs are normally in-corporated during the tailoring process.

1.6.5.2 Deviations and Waivers

Deviations and waivers to the requirements of thisdocument are used when the mission objectives ofthe Range User cannot otherwise be achieved.NOTE 1: Many previously approved waiverswould be classified as deviations based on the defi-nition below. NOTE 2: Programs using earlier edi-tions of the document will continue to hold waiverapprovals; new documentation is not required.

1.6.5.2.1 Deviations. Deviations are used whena design noncompliance is known to exist prior to

hardware production or an operational noncompli-ance is known to exist prior to beginning operationsat the Ranges.

1.6.5.2.2 Waivers. Waivers are used when,through an error in the manufacturing process orfor other reasons, a hardware noncompliance isdiscovered after hardware production, or an opera-tional noncompliance is discovered after operationshave begun at the Ranges.

1.6.5.2.3 Deviation and Waiver Policy.a. It is the policy of the Ranges to avoid the use

of deviations and waivers except in extremely raresituations, and they are granted only under uniqueand compelling circumstances. Range Safety and theRange User shall jointly endeavor to ensure that allrequirements of this document are met as early in thedesign process as possible to limit the number of re-quired deviations and waivers to an absolute mini-mum.

b. Individually, the Range Commanders have theauthority to change, deviate from, or waive any re-quirement in this document for a specific program ormission operating at the respective launch area. EachRange Commander has the authority to accept risksthat exceed those defined in Table 1-1 for a specificmission based on national or mission need.

1. Rationale for national need or mission re-quirements shall be explained.

2. Acceptable risk mitigation and "get well"plans shall be provided since they are an integralpart of the basis for approval.

c. When granted, deviations and waivers arenormally given for a defined period of time or agiven number of missions until a design or opera-tional change can be implemented.

1.6.6 System Safety Program Require-ments

Range Users shall develop and maintain a SystemSafety Program in accordance with Appendix 1Bof this Chapter. An SSPP shall be submitted toRange Safety for review and approval.

1.7 RANGE SAFETY CONCEPT TOLAUNCH PROCESS

The overall Range Safety process from "concept tolaunch" for new launch vehicles is shown in Figure1-7. This process is tailorable to apply to payloads,ground support equipment, critical facilities, and/orhazardous and safety critical operations. The top

Page 34: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

1-22

row of boxes represents the subprocesses for es-tablishing the program concept and applicableRange Safety requirements per this Chapter. Thesecond row of boxes represents the subprocessesfor analysis, design and test for the program perChapters 2-5 of this document. The third row ofboxes represents the subprocesses for operationsand launch at the Ranges per Chapters 6 and 7 ofthis document. Details of the steps of this processcan be found in this Chapter and Chapters 2through 7 of this document as indicated. In addi-tion, the Range User Handbook describes this proc-ess in greater detail. NOTE: Appendix 1F containsa detailed tailored version of this process specifi-cally developed for generic payloads and payloadbuses.

1.7.1 Range Safety Milestones

Range Safety milestones are those events that shalloccur for Range Safety to approve a program dur-ing the "concept to launch" cycle. The contents ofthe document, 45 SW/SE and 30 SW/SE responsi-bilities and authorities, required meetings and ac-tivities, documentation, and approvals, have beenaddressed earlier in this Chapter.

1.7.2 Time Frames and Schedules

Time frames and event schedules vary dependingupon the complexity of the program. Figure 1-7time frames provide a general schedule of events asguidance for new, major launch vehicle programs.For smaller vehicles and payloads, these timeframes can be compressed to a year or less. Timeframe requirements for Range Safety and theRange Users throughout the document are baselinesfor all programs; however, they may be alteredduring the tailoring process.

1.8 CHANGES TO APPROVEDGENERIC SYSTEMS

a. Once baseline or generic launch systems, in-cluding launch vehicles, payloads, ground supportequipment, RSSs, and critical facilities have beenapproved, only those systems and subsystems thatchange shall be submitted to Range Safety for re-view and approval. NOTE 1: The approval proc-ess remains the same as described above and issubject to the requirements in the Situations Re-quiring Reevaluation of Previously ApprovedPrograms section of this Chapter. NOTE 2: Ap-

Figure 1-7Range Safety “Concept to Launch” Process

Page 35: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes31 October 1997

1-23

pendix 1F provides a tailored process for the ap-proval of generic payloads.

b. Documentation shall be marked or labeled as"Mission Unique," "Upgrade," "Change," or“Other” to the previously approved system andshall be prepared in such a manner to allow easyreference to previously approved submittals.

1.9 CHANGES TO EWR 127-1

This document shall normally be updated at leastonce every four years; however, it may be updatedonce a year. If circumstances warrant, revisionsmay be made on a chapter-by-chapter basis withinthese time constraints.

a. Permanent changes to EWR 127-1 shall beperformed in accordance with the requirements inAppendix 1E.

b. Changes requiring immediate attention, suchas those based on a previously unknown risk orsafety compromise, shall be made as necessary anddistributed as EWR 127-1 Change Notices.

c. Change Notices shall be coordinated betweenthe ER and WR, and all affected Range Users shallbe notified.

1.10 INVESTIGATING ANDREPORTING MISHAPS AND

INCIDENTS

1.10.1 Mishaps and Incidents Involving AirForce Personnel and Resources

In accordance with AFI 91-204, the Ranges shallinvestigate and report all mishaps involving AirForce personnel and resources.

1.10.2 Non-Air Force Personnel and Re-sources

a. The ER and the WR will not report or investi-gate non-Air Force mishaps under AFI 91-204 aus-

pices. However, Range Safety may assist and par-ticipate in non-Air Force mishap investigations thataffect or could affect operations on the Range,public safety, launch area safety, launch complexsafety, or resource protection.

b. Range Safety shall be provided with the inves-tigation results of any mishaps or incidents occur-ring on the Ranges.

c. Regardless of the Range User, the RangeCommander may conduct formal investigations intoany mishap and incident that affects or could affectpublic, launch area safety, or launch complexsafety.

1.11 RANGE SAFETY RANGE USERHANDBOOK

A Range Safety Range User Handbook is availableto all Range Users. This handbook provides infor-mational tools to help Range Users achieve theRange Safety “concept to launch” process in themost efficient manner possible. Contact the RangeSafety Office to obtain a copy or download thehandbook from the Range Safety web site.

1.12 RANGE SAFETY WEB SITE

The Range Safety web site is a tool for notifying theRange User community of issues pertaining to Safety,including changes to EWR 127-1, and for distributingthe various editions of 127-1. The 1997 and subse-quent editions will be distributed primarily via the website. Access is through the 45th Space Wing HomePage, “http//www.pafb.af.mil/”. Once on the homepage, clicking on “Range Safety” takes you to EWR127-1 information. Questions and comments can besent via e-mail to [email protected].

Page 36: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1ATHE EWR 127-1 TAILORING PROCESS

1-24

1A.1 INTRODUCTION

1A.1.1 Purpose

Tailoring provides a means for formulating a spe-cific edition of the document incorporating onlythose requirements that apply to a particular RangeUser program. A tailored version of the document isdenoted as EWR 127-1 [T]. Programs that launchfrom only the ER or WR shall be tailored by theappropriate 45 SW/SE or 30 SW/SE section. Pro-grams that intend to launch from both Ranges shallbe tailored by a combined 45 SW/SE and 30SW/SE team.

1A.1.2 Content

This Appendix describes the rationale for tailoring,the tailoring process, and the requirements fordocumenting tailored editions of the document.

1A.1.3 Applicability

The tailoring process is applicable to all programs(boosters, solid rocket motors, upper stages, pay-loads, associated ground support equipment andfacilities). The tailoring process is optional for newprograms, and existing programs where RangeSafety and the Range User agree this process wouldbe effective.

1A.1.4 Formation of a High PerformanceWork Team

A high performance work team (HPWT) shall beformed to perform tailoring during Technical Inter-change Meetings (TIMs). HPWT Membership shallinclude Range User and Range Safety personnelwho have specific tailoring authority.

1A.1.5 Tailoring Rationale

Tailoring shall be accomplished based on the fol-lowing rationale:

1A.1.5.1 Deletion of a Requirement

a. When a requirement is not applicable to aRange User Program, the requirement shall be de-leted.

b. The original paragraph number and headingsshall remain, but the non-applicable text shall beremoved and replaced with the abbreviation N/A.

1A.1.5.2 Change to a Requirement.a. MICs may be provided by the High Perform-

ance Work Team through the change process;however, the High Performance Work Team can-not provide deviation or waivers.

b. A change is allowed to tailor the requirementto a particular system as long as the intent of therequirement is met and the equivalent level ofsafety is maintained.

c. The change shall be written in the place of theoriginal requirement.

d. The existing numbering system shall remainthe same to the maximum extent possible.

e. Additional paragraphs may be added; how-ever, using the remaining unaffected paragraphnumbers is not allowed.

f. All changes shall be highlighted in bold.

1A.1.5.3 Addition to a Requirement

a. An addition to a requirement is allowed whenthere are no existing requirements addressing newtechnology, when unforeseen hazards are discov-ered, when federal or industry standards change,and for similar reasons.

b. An addition shall be added with new para-graph numbers in the section for which it is appro-priate or in a new section if no other section ap-plies.

c. All additions shall be highlighted by underline.

1A.1.5.4 Range User Information Only

a. Requirements having only an indirect effect onthe Range User but which are still required of theprogram as a whole shall remain in the tailoreddocument as information only. Examples of suchrequirements include Operations Safety responsi-bilities, other Range Contractor responsibilities,and Range User facilities manager responsibilities.

b. All "Range User Information Only" require-ments shall be highlighted with an asterisk prior tothe affected paragraph number.

1A.1.5.5 Deviations and Waivers

Deviations and waivers are not rationale for thedeletion of requirements. The requirements shall

Page 37: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1ATHE EWR 127-1 TAILORING PROCESS

1-25

remain in the EWR 127-1 [T] and the deviation andwaiver process shall be used for the disposition ofthe requirement.

1A.1.5.6 Risk-Cost Benefit Analysis

a. Technical issues regarding such items as applica-ble requirements, policy, criteria, or data may beevaluated on a risk-cost benefit basis to determine ifthe risk is acceptable to deviate from or waive the re-quirements.

b. A risk-cost benefit analysis, based on the crite-ria defined in Figure 1-6 and Table 1-1 of thisChapter shall be submitted to Range Safety.

c. Based on risk-cost benefit analysis data, RangeSafety and the Range User shall reach agreement onthe disposition of the requirement in question.

d. If the application of an EWR 127-1 require-ment results in significant reduction of risk at a sig-nificant cost benefit, it may be judged by RangeSafety to be sufficient to impose the requirement;however, if the benefit is insignificant and/or thecost is high, the requirement may be deviated from,waived, or determined to meet the intent, all withconsideration for public safety.

1A.1.6 Scheduling Technical InterchangeMeetings

a. TIMs are required for Range Users to presenttheir systems to Range Safety and to participate inthe active tailoring of the document.

b. TIMs shall be scheduled as early in the programas possible when program definition is sufficient tomake the meetings worthwhile and structured so thattechnical tailoring is completed before contractual tai-loring (word smithing) is started.

c. EWR 127-1 [T] TIM data shall be provided toRange Safety at least 30 days prior to scheduledTIMs.

1A.2 TAILORING PROCESS

1A.2.1 Preparation of an Optional Draft Edi-tion of EWR 127-1

a. If desired, the Range User and/or Range Safetymay produce an optional draft edition of EWR 127-1 Tailored [T] based on conceptual data and meet-ings.

b. The purpose of a draft EWR 127-1 [T] is toeliminate all non-applicable requirements, leaving

only applicable requirements from which detailedtailoring can be performed.

c. The draft EWR 127-1 [T] shall be deliveredas soon as possible and is negotiable.

1A.2.2 Generation of Tailoring Requests

a. EWR 127-1 [T] Tailoring Requests shall beused to document proposed EWR 127-1 [T] dele-tions, changes, and additions.

b. Tailoring Requests should be completed priorto scheduled TIMs and submitted to Range Safetyfor review or they may be completed during TIMs.NOTE: An example is in the Range User RangeSafety Handbook.

c. The forms for submitting Tailoring Requestsmay be found in the Range User Handbook.

1A.2.2.1 Completing Tailoring Requests

a. The original EWR 127-1 paragraph number,original (or summarized, if sufficiently detailed)text, tailored paragraph number, proposed text,and the rationale for the change shall be included.

b. Deletions of requirements that are non-applicable and need no formal explanation may allbe listed on one or more Tailoring Request forms.

c. Tailoring Requests dealing with similar or re-lated requirements and rationale may all be com-bined on the same Tailoring Request form.

1A.2.2.2 Disposition of Tailoring Requests

a. If necessary, Range Safety will comment onthe proposed change and dispose of it as "approvedas written," "approved with provided comments,"or "disapproved."

b. When agreement is reached and a TailoringRequest approved, Range Safety and Range Userrepresentatives shall sign and date the form.

1A.2.3 Publication of EWR 127-1 [T]

1A.2.3.1 Final Publication

a. The goal for final publication of an EWR127-1 [T] is as soon as possible, but should be nolater than 30 days after the PDR.

b. In some cases, it may be necessary to com-plete the EWR 127-1 [T] as part of the contractingprocess or at some other point prior to the PDR. Inthese cases, Range Safety will work with theRange User to establish and meet a completion

Page 38: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1ATHE EWR 127-1 TAILORING PROCESS

1-26

date for EWR 127-1 [T] publication.

1A.2.3.2 Identification of EWR 127-1 [T]

a. Each EWR 127-1 [T] shall be given a uniquetitle and each header of each page of the EWR 127-1 [T] shall indicate the edition is a tailored editionof EWR 127-1.

b. Even page headers shall incorporate the titleof the program, the edition number, and the date(EWR 127-1 Tailored for XXX Program, EditionX, Date).

c. Odd page headers shall incorporate the titleof the chapter and the chapter number (East-ern andWestern Range Policies and Processes, Chapter 1[T].

1A.2.3.3 Effectivity of EWR 127-1 [T]

a. Each EWR 127-1 [T] shall contain a prefaceparagraph detailing its effectivity.

b. At a minimum, the types of vehicles, the timeperiod, and the number of vehicles to which theEWR 127-1 [T] applies shall be addressed.

1A.2.3.4 Assumptions

a. Each EWR 127-1 [T] shall contain a prefaceparagraph detailing the critical assumptions thatwere made in writing the tailored edition.

b. The nature of the assumptions shall be such that achange may invalidate the EWR 127-1 [T] or require achange or update. An example of such a critical as-sumption is that the design of any hazardous systemdoes not change from that presented prior to publica-tion of the EWR 127-1 [T].

1A.2.3.5 Management Summaries

a. Since management will be unable to review allcomplete editions of EWR 127-1 [T], managementsummaries shall be prepared to specifically identifyEWR 127-1 [T] deletions, changes, and additions.

b. The management summary shall consist of allsigned EWR 127-1 [T] Tailoring Requests and alist of all HPWT members.

c. A copy of the management summary and thefinal EWR 127-1 [T] ready for signature shall beprovided to the Range Commander and the Chiefof Safety for their signature.

1A.2.4 Approvals

a. Each significant addition, change, or deletionshall be signed off by the Range Safety Programmanager and the appropriate Range User repre-sentative on the Tailoring Request form.

b. Tailored chapters affecting public safety (nor-mally Chapters 1, 2, 4, and 7) shall be approvedand signed by the Chief of Safety or a designatedrepresentative and the appropriate Range User rep-resentative on the Preface page of the EWR 127-1[T].

c. Tailored chapters not affecting public safety(normally Chapters 3, 5, and 6) shall be approvedand signed by the appropriate Range Safety sectionchief or a designated representative and the appro-priate Range User representative.

d. Each complete, final EWR 127-1 [T] affect-ing public safety shall be approved and signed bythe Wing Commander or a designated representa-tive and the appropriate Range User representative.

1A.2.5 Revisions to EWR 127-1 [T]

a. Any revision to the document shall be eval-uated against each program EWR 127-1 [T] todetermine applicability.

b. Any revisions to EWR 127-1 [T] shall bemade in accordance with the EWR 127-1 changeprocess.

Page 39: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-27

1B.1 GENERAL SYSTEM SAFETYPROGRAM REQUIREMENTS

1B.1.1 System Safety Program

The Range User shall establish and maintain asystem safety program to support efficient and ef-fective achievement of overall system safety objec-tives.

1B.1.1.1 Management System

The Range User shall establish a safety manage-ment system to implement provisions of thisdocument. A Range User program manager shallbe responsible for the following:

a. Establishing, controlling, incorporating, di-recting, and implementing the system safety pro-gram policies

b. Ensuring that mishap risk is identified andeliminated or controlled within established pro-gram risk acceptability parameters.

c. Establishing internal reporting systems andprocedures for investigation and disposition ofsystem related mishaps and safety incidents, in-cluding potentially hazardous conditions not yetinvolved in a mishap or incident and reporting suchmatters to Range Safety

d. Reviewing and approving safety analyses, re-ports, and documentation submitted to RangeSafety to establish knowledge and acceptance ofresidual risks.

1B.1.1.2 Key System Safety Personnel

The Range User shall establish and maintain a keysystem safety position for each program. The indi-vidual in this position shall be directly responsibleto the Range User program manager for safetymatters. At a minimum, Range User safety person-nel shall be responsible for the following:

a. Reviewing and approving safety analyses, re-ports, and documentation submitted to RangeSafety.

b. Reviewing and approving all hazardous andsafety critical test plans and procedures conductedat the Ranges and verifying that all safety require-ments are incorporated.

1B.1.1.3 Compliance

Compliance with all contractually imposed re-

quirements of this document is mandatory. When arequested system safety program plan is approvedby Range Safety, it provides a basis of under-standing between the Range User and Range Safetyas to how the system safety program will be ac-complished. Any noncompliance must be requestedby the Range User and approved by Range Safety.

1B.1.1.4 Conflicting Requirements

When conflicting requirements or deficiencies areidentified in system safety program requirements orwith other program requirements, the Range Usershall submit notification, with proposed solutionsor alternatives and supporting rationale, to RangeSafety for resolution.

1B.1.1.5 System Safety Precedence

The order of precedence for satisfying systemsafety requirements and resolving identified haz-ards shall be as follows:

a. Design for minimum risk. From the first, de-sign to eliminate hazards. If an identified hazardcannot be eliminated, reduce the associated risk toan acceptable level, as defined by Range Safety,through design selection.

b. Incorporate safety devices. If identified haz-ards cannot be eliminated or their associated riskadequately reduced through design selection, thatrisk shall be reduced to a level acceptable to RangeSafety through the use of fixed, automatic, or otherprotective safety design features or devices. Provi-sions shall be made for periodic functional checksof safety devices when applicable.

c. Provide warning devices. When neither designnor safety devices can effectively eliminate identi-fied hazards or adequately reduce associated risk,devices shall be used to detect the condition and toproduce an adequate warning signal to alert per-sonnel of the hazard. Warning signals and theirapplication shall be designed to minimize the prob-ability of incorrect personnel reaction to the signalsand shall be standardized within like types of sys-tems.

d. Develop procedures and training. Where it isimpractical to eliminate hazards through designselection or adequately reduce the associated riskwith safety and warning devices, procedures andtraining shall be used. However, without a specific

Page 40: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-28

deviation or waiver from Range Safety, no warn-ing, caution, or other form of written advisory shallbe used as the only risk reduction method for Cate-gory I or II hazards (per Chapter 1 Table 1-1).Procedures may include the use of personal protec-tive equipment. Precautionary notations shall bestandardized as specified by Range Safety. Tasksand activities judged to be safety critical by RangeSafety require certification of personnel profi-ciency.

1B.1.1.6 Risk Assessment

Decisions regarding resolution of identified hazardsshall be based on assessment of the risk involved.To aid the achievement of the objectives of systemsafety, hazards shall be characterized as to hazardseverity categories and hazard probability levels,when possible. Since the priority for system safetyis eliminating hazards by design, a risk assessmentprocedure considering only hazard severity, willgenerally suffice during the early design phase tominimize risk. When hazards are not eliminatedduring the early design phase, a risk assessmentprocedure based upon the hazard probability, haz-ard severity, as well as risk impact, shall be used toestablish priorities for corrective action and resolu-tion of identified hazards.

1B.1.2 Task 1: Establish a System SafetyProgram

The purpose of this task is to establish the founda-tion for a system safety program. The requirementsfor Task 1 are as follows:

a. Establish and execute a system safety programthat meets the tailored requirements of this docu-ment.

b. Develop a planned approach for safety taskaccomplishment, provide qualified people to ac-complish the tasks, establish the authority for im-plementing the safety tasks through all levels ofmanagement, and allocate appropriate resources,both manning and funding, to ensure the safetytasks are completed.

c. Establish a system safety organization orfunction and lines of communication within theprogram organization and with associated organi-zations (government and contractor).

d. Establish interfaces between system safety andother functional elements of the program, as well as

between other safety disciplines such as nuclear,range, explosive, chemical, and biological.

e. Designate the organizational unit responsiblefor executing each safety task.

f. Establish the authority for resolution of identi-fied hazards.

g. Define system safety program milestones andrelate these to major program milestones, programelement responsibility, and required inputs and out-puts.

h. Establish an incident alert and notification,investigation and reporting process, to include noti-fication of Range Safety.

1B.1.3 Task 2: Develop a System SafetyProgram Plan

The purpose of this task is to develop a SystemSafety Program Plan (SSPP). The SSPP shall de-scribe in detail tasks and activities of system safe-ty management and system safety engineering re-quired to identify, evaluate, and eliminate and con-trol hazards, or reduce the associated risk to a levelacceptable to Range Safety throughout the systemlife cycle. The approved plan provides a formalbasis of understanding between the Range User andRange Safety on how the SSPP will be conductedto meet the requirements of EWR 127-1, includinggeneral and specific provisions. The approved planshall account for all contractually required tasksand responsibilities on an item-by-item basis. TheRange User shall submit a draft SSPP to RangeSafety for review and approval within 45 days ofcontract award and a final at least 45 days prior toany program cDR. The SSPP shall include the fol-lowing information:

1B.1.3.1 System Safety Organization

The System Safety Organization section shall de-scribe the following:

a. The system safety organization or functionwithin the organization of the total program usingcharts to show the organizational and functionalrelationships and lines of communication

b. The organizational relationship between oth-erfunctional elements having responsibility for taskswith system safety impacts and the system safetymanagement and engineering organization

c. Review and approval authority of applicabletasks by system safety

Page 41: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-29

d. The responsibility and authority of systemsafety personnel, other Range User organizationalelements involved in the system safety effort, con-tractors, and system safety groups

e. A description of the methods by which safetypersonnel may raise issues of concern directly tothe program manager or the program manager'ssupervisor within the organization

f. Identification of the organizational unit re-sponsible for executing each task

g. Identification of the authority in regard toresolution of all identified hazards

h. The staffing of the system safety organizationfor the duration of the program to include personnelloading and a summary of the qualifications of keysystem safety personnel assigned to the effort, in-cluding those who possess coordination and ap-proval authority for Range User prepared docu-mentation

i. The process by which Range User manage-ment decisions will be made, including such deci-sions as timely notification of unacceptable risks,necessary action, incidents, or malfunctions, waiv-ers to safety requirements, program deviations

j. Details of how resolution and action relative tosystem safety will be accomplished at the programmanagement level possessing resolution authority

1B.1.3.2 System Safety Program Milestones

The SSPP shall:a. Define system safety program milestones and

relate these to major program milestones, programelement responsibility, and required inputs and out-puts

b. Provide a program schedule of safety tasks,including start and completion dates, reports, andreviews

c. Identify subsystem, component, softwaresafety activities as well as integrated system levelactivities such as design analyses, tests, and dem-onstrations applicable to the system safety programbut specified in other engineering studies and de-velopment efforts to preclude duplication

1B.1.3.3 System Safety Data

The SSPP shall:a. Identify deliverable data by title, number, and

means of delivery such as hard copy, electronic

b. Identify non-deliverable system safety dataand describe the procedures for accessibility byRange Safety and retention of data of historicalvalue

1B.1.3.4 System Safety Interfaces

The SSPP shall identify, in detail:a. The interface between system safety and all

other applicable safety disciplines such as: nuclearsafety, Range Safety, explosive and ordnancesafety, chemical and biological safety, laser safe-ty,and any others

b. The interface between system safety, systemsengineering, and all other support disciplines suchas maintainability, quality control, reliability, soft-ware development, human factors engineering,medical support (health hazard assessments), andany others

c. The interface between system safety and allsystem integration and test disciplines

1B.1.4 Task 3: Establish System Safety Pro-gram Reviews and Audits

The purpose of this task is to establish a systemsafety program review and audit program as speci-fied by Range Safety. This task is also used to ac-quire support for special requirements such as cer-tifications and test and flight readiness reviews.The following tasks shall be performed:

a. Conduct, document, and make documentationavailable to Range Safety upon request the follow-ing reviews and audits:

1. The Range User system safety program2. Associate contractor system safety pro-

grams3. Support contractor system safety programs4. Subcontractor system safety programs

b. Provide the support for the following:1. Safety reviews and audits performed by rep-

resentatives of Range Safety2. Presentations to government certifying ac-

tivities such as phase safety reviews, munitionssafety boards, nuclear safety boards, or flightsafety review boards to the extent specified by thisdocument. NOTE: These may also include specialreviews such as flight and article readiness reviewsor pre-construction briefings.

3. Safety reviews shall be held in association

Page 42: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-30

with program cDR, PDR, and CDRs. Generally,the safety reviews shall address the following:

a) Program systems and operations overviewb) Presentation of Range Safety required

documentationc) EWR 127-1 Noncompliancesd) Open safety issues

1B.1.5 Task 4: Track Hazards and RiskResolution

The purpose of this task is to establish a singleclosed-loop hazard tracking system by developmentof a method or procedure to document and trackhazards and their controls, providing an audit trailof hazard resolutions. A centralized file, computerdatabase, or document called a Hazard Log shallbe maintained and made available to Range Safetyupon request. At a minimum, the Hazard Log shallcontain the following information:

a. Description of each hazard, including an asso-ciated hazard risk index

b. Status of each hazard and controlc. Traceability of resolution on each Hazard Log

item from the time the hazard was identified to thetime the risk associated with the hazard was re-duced to a level acceptable to Range Safety

d. Identification of residual riske. Action persons and organizational elementf. The recommended controls to reduce the haz-

ard to a level of risk acceptable to Range Safetyg. The signature of Range Safety accepting the

risk effecting closure of the Hazard Log item

1B.2 HAZARD ANALYSISAND RISK RESOLUTION

NOTE: The Range User shall perform all of therequired Preliminary Hazard Analyses (PHAs),Subsystem Hazard Analyses (SSHAs), SystemHazard Analyses (SHAs), Operating and SupportHazard Analyses (O&SHAs) and Safety Assess-ments per Tasks 1 through 8 that follow; however,the Range User shall submit to Range Safety onlythose Hazard Analyses and Safety Assessments asspecifically required per the Data Requirementssections of Chapters 3, 4, 5, and 6 of this docu-ment.

1B.2.1 Task 1: Perform and Document APreliminary Hazard Analysis

The purpose of this task is to perform and docu-ment a Preliminary Hazard Analysis (PHA) toidentify safety critical areas, to provide an initialassessment of hazards, and to identify requisitehazard controls and follow-on actions. The RangeUser shall perform and document a PHA to obtainan initial risk assessment of a concept or system.Based on the best available data, including mishapdata from similar systems and other lessonslearned, hazards associated with the proposed de-sign or function shall be evaluated for hazard se-verity, hazard probability, and operational con-straint. Safety provisions and alternatives needed toeliminate hazards or reduce their associated risk toa level acceptable to Range Safety shall be in-cluded. At a minimum, the PHA shall consider thefollowing for identification and evaluation of haz-ards:

a. Hazardous components such as fuels, propel-lants, lasers, explosives, toxic substances, hazard-ous construction materials, pressure systems, andother energy sources

b. Safety related interface considerations amongvarious elements of the system such as materialcompatibility, electromagnetic interference, inad-vertent activation, fire and explosive initiation andpropagation, and hardware and software controls.NOTE: This shall include consideration of the po-tential contribution by software, including softwaredeveloped by other contractors and sour-ces, tosubsystem and system mishaps.

c. Safety design criteria to control safety-criticalsoftware commands and responses such as inad-vertent command, failure to command, untimelycommand or responses, inappropriate magnitude,or designated undesired events shall be identifiedand appropriate action taken to incorporate them inthe software and related hardware specifications.

d. Environmental constraints including the oper-ating environments such as drop, shock, vibration,extreme temperatures, humidity, noise, exposure totoxic substances, health hazards, fire, electrostaticdischarge, lightning, electromagnetic environmentaleffects, ionizing and non-ionizing radiation includ-ing laser radiation

e. Operating, test, maintenance, built-in-tests,diagnostics, and emergency procedures (humanfactors engineering, human error analysis of op-

Page 43: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-31

erator functions, tasks, and requirements; effect offactors such as equipment layout, lighting require-ments, potential exposures to toxic materials, ef-fects of noise or radiation on human performance;explosive ordnance render safe and emergency dis-posal procedures; life support requirements andtheir safety implications in manned systems, crashsafety, egress, rescue, survival, and salvage)

f. Those test unique hazards that will be a directresult of the test and evaluation of the article orvehicle

g. Facilities, real property installed equipment,support equipment such as provisions for storage,assembly, checkout, Proof testing of hazardoussystems and assemblies that may involve toxic,flammable, explosive, corrosive or cryogenic mate-rials and wastes; radiation or noise emitters; elec-trical power sources

h. Training and certification pertaining to haz-ardous and safety critical operations and mainte-nance of hazardous and safety critical systems

i. Safety related equipment, safeguards, andpossible alternate approaches such as interlocks;system redundancy; fail safe design considerationsusing hardware or software controls; subsystemprotection; fire detection and suppression systems;personal protective equipment; heating, ventilation,and air-conditioning; and noise or radiation barriers

j. Malfunctions to the system, subsystems, orsoftware. NOTE: Each malfunction shall be speci-fied, the cause and resulting sequence of eventsdetermined, the degree of hazard determined, andappropriate specification and/or design changesdeveloped.

1B.2.2 Task 2: Perform and Document Sub-system Hazard Analyses

The purpose of this task is to perform and docu-ment a Subsystem Hazard Analysis (SSHA) toverify subsystem compliance with safety require-ments contained in subsystem specifications andother applicable documents; identify previouslyunidentified hazards associated with the design of

subsystems including component failure modes,critical human error inputs, and hazards resultingfrom functional relationships between componentsand equipment comprising each subsystem; andrecommend actions necessary to eliminate identifiedhazards or control their associated risk to accept-able levels. The Range User shall perform anddocument an SSHA to identify all components andequipment that could result in a hazard or whosedesign does not satisfy contractual safety require-ments. This will include government furnishedequipment, non-developmental items, and software.Areas to consider are performance, performancedegradation, functional failures, timing errors, de-sign errors or defects, or inadvertent functioning.The human shall be considered a component withina subsystem, receiving both inputs and initiatingoutputs, during the conduct of this analysis. Theanalysis shall include a determination of the fol-lowing:

a. The modes of failure including reasonablehuman errors as well as single point and commonmode failures, and the effects on safety when fail-ures occur in subsystem components

b. The potential contribution of hardware andsoftware, including that which is developed byother contractors and sources, events, faults, andoccurrences such as improper timing on the safetyof the subsystem

c. That the safety design criteria in the hard-ware, software, and facilities specifications havebeen satisfied

d. That the method of implementation of hard-ware, software, and facilities design requirementsand corrective actions has not impaired or de-creased the safety of the subsystem nor has it intro-duced any new hazards or risks

e. The implementation of safety design require-ments from top level specifications to detailed de-sign specifications for the subsystem. NOTE: Theimplementation of safety design requirements de-veloped as part of the PHA shall be analyzed toensure that it satisfies the intent of the require-ments.

f. Test plan and procedure recommendations tointegrate safety testing into the hardware and soft-ware test programs

Page 44: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-32

g. That system level hazards attributed to thesubsystem are analyzed and that adequate controlof the potential hazard is implemented in the design

1B.2.2.1 SSHA Analysis Techniques

If no specific analysis techniques are directed or ifRange User recommends that a different techniquethan specified by Range Safety should be used, theRange User shall obtain approval of techniques tobe used prior to performing the analysis.

1B.2.2.2 SSHA Software

a. When software to be used in conjunction withthe subsystem is being developed under MIL-STD-498 or MIL-STD-1679 or other developmentdocuments; the Range User performing the SSHAshall monitor, obtain, and use the output of eachphase of the formal software development processin evaluating the software contribution to theSSHA.

b. Problems identified that require the reaction ofthe software developer shall be reported to RangeSafety in time to support the ongoing phase of thesoftware development process.

1B.2.2.3 Updating the SSHA

The Range User shall update the SSHA as a resultof any system design changes, including softwaredesign changes, that affect system safety.

1B.2.3 Task 3: Perform and Document Sys-tem Hazard Analyses

The purpose of this task is to perform and docu-ment a System Hazard Analysis (SHA) to verifysystem compliance with safety requirements con-tained in system specifications and other applicabledocuments; identify previously unidentified hazardsassociated with the subsystem interfaces and sys-tem functional faults; assess the risk associatedwith the total system design, including software,and specifically of the subsystem interfaces; andrecommend actions necessary to eliminate identifiedhazards and/or control their associated risk to ac-ceptable levels.

The Range User shall perform and document asystem hazard analysis to identify hazards and as-sess the risk of the total system design, includingsoftware, and specifically of the subsystem inter-

faces. This analysis shall include a review of sub-system interrelationships to determine the follow-ing:

a. Compliance with specified safety design crite-ria

b. Possible independent, dependent, and simulta-neous hazardous events including system failures;failures of safety devices; common cause failuresand events; and system interactions that could cre-ate a hazard or result in an increase in mishap risk

c. Degradation in the safety of a subsystem orthe total system from normal operation of anothersubsystem

d. Design changes that affect subsystemse. Effects of reasonable human errorsf. Potential contribution of hardware and soft-

ware, including that which is developed by otherRange Users and other sources or commercial off-the-shelf hardware or software, events, faults andoccurrences such as improper timing on the safetyof the system.

g. That the safety design criteria in the hard-ware, software, and facilities specifications havebeen satisfied

h. That the method of implementation of thehardware, software, and facilities design require-ments and corrective actions has not impaired ordegraded the safety of the system nor has intro-duced any new hazards

1B.2.3.1 SHA Analysis Techniques

If no specific analysis techniques are directed or ifRange User recommends that a different techniquethan specified by Range Safety should be used, theRange User shall obtain approval of techniques tobe used prior to performing the analysis. The SHAmay be combined with and/or performed usingsimilar techniques to those used for the SSHA.

1B.2.3.2 SHA Software

a. When software to be used in conjunction withthe system is being developed under DoD-STD-2167 and DoD-STD-2168; or MIL-STD-1679 orother development documents; the Range User per-forming the SHA shall monitor, obtain, and use theoutput of each phase of the formal software devel-opment process in evaluating the software contri-bution to the SSHA.

b. Problems identified that require the reaction of

Page 45: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-33

the software developer shall be reported to RangeSafety in time to support the ongoing phase of thesoftware development process.

1B.2.3.3 Updating the SHA

The Range User shall update the SHA as a resultof any system design changes, including softwaredesign changes, that affect system safety.

1B.2.4 Task 4: Perform and Document Oper-ating and Support Hazard Analyses

The purpose of this task is to perform and docu-ment Operating and Support Hazard Analysis(O&SHA) to evaluate activities for hazards or risksintroduced into the system by operational and sup-port procedures and to evaluate adequacy of op-erational and support procedures used to eliminate,control, or abate identified hazards or risks.

The Range User shall perform and document anO&SHA to examine procedurally controlled activi-ties. The O&SHA identifies and evaluates hazardsresulting from the implementation of operations ortasks performed by persons, considering the fol-lowing criteria: the planned system configurationand/or state at each phase of activity; the facilityinterfaces; the planned environments or the rangesthereof; the supporting tools or other equipment,including software controlled automatic test equip-ment, specified for use; operational and/or task se-quence, concurrent task effects and limitations;biotechnological factors, regulatory or contractu-ally specified personnel safety and health require-ments; and the potential for unplanned events in-cluding hazards introduced by human errors. Thehuman shall be considered an element of the totalsystem, receiving both inputs and initiating outputsduring the conduct of this analysis.

The O&SHA shall identify the safety requirementsor alternatives needed to eliminate or control identi-fied hazards or to reduce the associated

risk to a level that is acceptable under either regu-latory or Range Safety specified criteria. Theanalysis shall identify the following:

a. Activities that occur under hazardous condi-tions, their time periods, and the actions required tominimize risk during these activities and time peri-ods

b. Changes needed in functional or design re-quirements for system hardware and software, fa-cilities, tooling, or support and test equipment toeliminate or control hazards or reduce associatedrisks

c. Requirements for safety devices and equip-ment, including personnel safety and life supportequipment

d. Warnings, cautions, and special emergencyprocedures such as egress, rescue, escape, rendersafe, explosive ordnance disposal, and back-out,including those necessitated by failure of a com-puter software-controlled operation to produce theexpected and required safe result or indication

e. Requirements for packaging, handling, stor-age, transportation, maintenance, and disposal ofhazardous materials

f. Requirements for safety training and personnelcertification

g. Effects of non-developmental hardware andsoftware across the interface with other systemcomponents or subsystems

h. Potentially hazardous system states under op-erator control

1B.2.4.1 Assessment of Procedures

The O&SHA shall document system safety as-sessment of procedures involved in: system pro-duction, deployment, installation, assembly, test,operation, maintenance, servicing, transportation,storage, modification, demilitarization, and dis-posal.

1B.2.4.2 O&SHA Analysis Techniques

If no specific analysis techniques are directed or ifthe Range User recommends that a different tech-nique than specified by Range Safety should beused, the Range User shall obtain approval of tech-niques to be used prior to performing the analysis.

Page 46: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-34

1B.2.4.3 Updating the O&SHA

The Range User shall update the O&SHA as a re-sult of any system design or operational changes.

1B.2.5 Task 5: Perform and DocumentSafety Assessments

The purpose of this task is to perform and docu-ment a comprehensive evaluation of the mishap riskbeing assumed prior to test or operation of a sys-tem. The Range User shall perform and document asafety assessment to identify all safety features ofthe hardware, software, and system design and toidentify procedural, hardware and software relatedhazards that may be present in the system beingacquired including specific procedural controls andprecautions that should be followed. The safetyassessment shall summarize the following informa-tion:

a. The safety criteria and methodology used toclassify and rank hazards, plus any assumptions onwhich the criteria or methodologies were based orderived including the definition of acceptable riskas specified by Range Safety

b. The results of analyses and tests performed toidentify hazards inherent in the system, including:

1. Those hazards that still have a residual riskand the actions that have been taken to reduce theassociated risk to a level contractually specified asacceptable

2. Results of tests conducted to validate safetycriteria, requirements and analyses

c. The results of the safety program efforts., in-cluding a list of all significant hazards along withspecific safety recommendations or precautionsrequired to ensure safety of personnel, property, orthe environment. NOTE: The list shall be catego-rized as to whether or not the risks may be expectedunder normal or abnormal operating conditions.

d. Any hazardous materials generated by or usedin the system

e. Conclusion with a signed statement that allidentified hazards have been eliminated or theirassociated risks controlled to levels contractually

specified as acceptable, and that the system isready to test or operate or proceed to the next ac-quisition phase

f. Recommendations applicable to hazards at theinterface of Range User systems with other sys-tems, as required

1B.2.6 Task 6: Perform and Document Engi-neering Change Proposals, Specifica-tion Change Notices, Software Prob-lem Reports, Program or SoftwareTrouble Reports, and Requests

The purpose of this task is to perform and docu-ment analyses of Engineering Change Proposals(ECPs), Specification Change Notices (SCNs),Software Problem Reports (SPRs), program orsoftware trouble reports (PTRs, STRs), and re-quests for deviation or waiver to determine thesafety impact on the system.

1B.2.6.1 Engineering Change Proposals

As specified by Range Safety, the Range User shallanalyze each ECP to determine the hazards associ-ated with it, assess the associated risk, and predictthe safety impact of the ECP on the existing sys-tem. The Range User shall notify Range Safetywhen an ECP changes the level of safety of the ex-isting system.

1B.2.6.2 Specification Change Notices

The Range User shall analyze each SCN to deter-mine the potential effect on safety critical compo-nents or subsystems. The Range User shall notifyRange Safety if the level of safety of the systemchanges.

1B.2.6.3 Software Problem Reports

The Range User shall review each SPR to deter-mine the potential safety implications. If safety im-pacts are identified, the Range User shall notifyRange Safety of a decrease in the level of safety ofthe system.

1B.2.6.4 Program or Software Trouble Reports

The Range User shall review each PTR and STR todetermine the potential safety implications. If

Page 47: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-35

safety impacts are identified, the Range User shallnotify Range Safety of a decrease in the level ofsafety of the system.

1B.2.7 Task 7: Perform and Document Com-pliance With Safety Requirements

The purpose of this task is to define and performtests and demonstrations or use other verificationmethods on safety critical hardware, software, andprocedures to verify compliance with safety re-quirements.

The Range User shall define and perform tests,demonstrations, develop models, and otherwiseverify the compliance of the system with safety re-quirements on safety critical hardware, software,and procedures. Induced or simulated failures shallbe considered to demonstrate the acceptable safetyperformance of the equipment and software.

Where hazards are identified during the develop-ment efforts and analysis or inspection cannot de-termine the adequacy of actions taken to reduce therisk, safety tests shall be specified and conducted toevaluate the overall effectiveness of the actionstaken. SSPPs and test plan and procedure docu-ments shall be revised to include these tests.

Where costs for safety testing would be prohibitive,safety characteristics or procedures may be verifiedby engineering analyses, analogy, laboratory test,functional mockups, or models and simulationswhen approved by Range Safety. Specific safetytests shall be integrated into appropriate system testand demonstration plans, including verification andvalidation plans, to maximum extent possible.

Test plans, test procedures, and the results of alltests including design verification, technical opera-tional evaluation, technical data and requirementsvalidation and verification, production acceptance,and shelf-life validation shall be reviewed to en-sure:

a. Safety of the design, including operating andmaintenance procedures, is adequately demon-strated, including verification of such items assafety devices and warning devices for all cata-strophic hazards not eliminated by design. Critical,marginal, and negligible hazards shall also be ad-dressed as required by Range Safety.

b. Results of safety evaluations of the system areincluded in the test and evaluation reports on hard-ware or software.

1B.2.8 Task 8: Perform and Document Com-pliance with Applicable Codes

The purpose of this task is to perform and docu-ment an assessment to identify and verify compli-ance with military, federal, national, international,and industry codes to ensure safe design of a sys-tem, and to comprehensively evaluate the safetyrisk being assumed prior to test or operation of asystem or at contract completion.

The Range User shall perform and document asafety compliance assessment to identify anddocument compliance with appropriate design andoperational safety requirements. The assessmentidentifies the contractually imposed standards,specifications, and codes appropriate to the safetyof the system and documents compliance with theserequirements.

The assessment includes necessary hazard analysis,design drawing and procedural reviews, andequipment inspections. The assessment shall incor-porate the scope and techniques of the PHA,SSHA, SHA, and O&SHA to the extent necessaryto ensure the safe design, operation, maintenance,and support of the system. A safety complianceassessment shall include the following:

a. Identification of military, federal, national,international, and industry safety specifications,standards, and codes applicable to the system anddocumentation of compliance of the design andprocedures with these requirements

b. Identification of other military, federal, na-tional, international, and industry safety specifica-tions, standards, and codes applicable to the sys-tem, that are required by law or the use thereof isconsidered good engineering practice, and docu-mentation of compliance of the design and proce-dures with these requirements

c. Identification and evaluation of residual haz-ards inherent in the system or that arise from sys-tem unique interfaces, installation, test, operation,maintenance, or support

d. Identification of necessary specialized safetydesign features, devices, procedures, skills, train-

Page 48: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1BSYSTEM SAFETY PROGRAM REQUIREMENTS

1-36

ing, facilities, support requirements, and personnelprotective equipment

e. Identification of hazardous materials and jus-tification for using such a material instead of a less

or non-hazardous material and the precautions andprocedures necessary for safe storage, hand-ling,transport, use, and disposal of material.

Page 49: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1CSUBMITTING EWR 127-1 NONCOMPLIANCE REQUESTS

1-37

1C.1 INTRODUCTION

1C.1.1 Purpose

Meets intent certifications (MICs), deviations, andwaivers are used when Range Users can not meetor feel that they can meet equivalent, though not theexact requirements of the document.

1C.1.2 Content

This Appendix describes the noncompliance cate-gories and the process for submitting MICs, devia-tions, and waivers.

1C.1.3 Applicability

a. The noncompliance process is applicable to allprograms including boosters, solid rocket motors,upper stages, payloads, ground support equipment,facilities, and others that operate at the Ranges orelsewhere if governed under Range personnel un-less grandfathered in accordance with the criteriastated below.

b. The noncompliance process is also applicableto all programs regardless of which version of theold Range Safety Standards (such as AFETR 127-1, ESMCR 127-1, ERR 127-1, WSMCR 127-1,and WRR 127-1) is under contract.

c. The flight plan approval process does not fallwithin the intent of this Appendix except when itinvolves launch vehicle and/or payload hardware.

1C.1.4 Grandfathering Criteria

Previously approved systems with or withoutgranted MICs, deviations, and waivers will begrandfathered and maintain approval and need notbe resubmitted unless it is determined by the Chiefof Safety and/or the Range User that one of thefollowing situations exists:

a. Existing programs make major modificationsor include the use of currently approved com-ponents, systems, or subsystems in new application(through tailoring if desire) Exception: Previouslyapproved existing components, systems, or sub-systems that do not increase the risks, do notdegrade safety, or can survive new environmentsare equivalent to or lower than the originallyapproved qualification levels shall be honoredand do not have to meet new requirements as longas data and analyses show that the criteria havebeen met.

b. The Range User has determined that it iseconomically and technically feasible to incor-porate new requirements into the system.

c. The system has been or will be modified to theextent that it is considered a new program or thatexisting safety approvals no longer apply. NOTE:Risk and hazard analyses developed jointly byRange Safety and the Range User shall be used todetermine applicability of the safety approvals.

d. A previously unforeseen or newly discoveredsafety hazard exists that is deemed by either RangeSafety or the Range User to be significant enoughto warrant the change.

e. The system does not meet the requirementsexisting when the system was originally accepted.NOTE: This category includes systems that werepreviously approved, but when obtaining theapproval, the noncompliances to the originalrequirement were not identified.

f. A system or procedure is modified and a newrequirement reveals that a significant risk exists.

g. Accident and incident investigations and re-ports may dictate compliance with the document.

1C.1.5 Noncompliance Categories

1C.1.5.1 Public Safety

Public safety noncompliance deals with safety re-quirements involving risks to the general public ofthe US or foreign countries and/or their property.

1C.1.5.2 Launch Area Safety

Launch area safety noncompliances deal withsafety requirements involving risks that is limited topersonnel and/or property on CCAS and may beextended to KSC, and VAFB. Launch area safetyinvolves multiple commercial users, governmenttenants, or squadron commanders.

1C.1.5.3 Launch Complex Safety

Launch complex safety noncompliances deal withsafety requirements involving risk that is limited tothe personnel and/or property under the control of asingle commercial user, full time government tenantorganization, or USAF squadron/detach-mentcommander (control authority). Launch complexsafety is limited to risks confined to a

Page 50: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1CSUBMITTING EWR 127-1 NONCOMPLIANCE REQUESTS

1-38

physical space for which the single control author-ity is responsible.

1C.1.6 Effectivity of Noncompliances

1C.1.6.1 Lifetime

a. Lifetime deviations and waivers are unde-sirable and shall be limited to those situationswhere it is virtually impossible to meet therequirement or meet the intent of the requirement.

b. Lifetime MICs are allowed provided equiva-lent safety is maintained.

1C.1.6.2 Time Limited

a. Time limited deviations and waivers are set fora limited period of time or a limited number oflaunches. The time constraint is normallydetermined as a function of cost, impact onschedule, and the minimum time needed tosatisfactorily modify or replace the non-compliantsystem or to modify the non-compliant operation.

b. MICs may be time limited depending on themethod by which equivalent safety is accomplished.If excessive procedural controls, personnel, mate-rial, or costs are required to maintain equivalentsafety, the MIC should be time limited.

1C.1.7 Conditions for Issuance of Devia-tions, MICs, and Waivers

a. Hazard Mitigation. All reasonable steps shallbe taken to meet the intent of the documentrequirements and mitigate associated hazards toacceptable levels, including design and operationalmethods.

b. Get Well Plans. All deviations, MICs, andwaivers that are not granted for the life of a pro-gram shall have a plan to meet the requirements inquestion by the time the approved effectivity ex-pires.

1C.1.8 Risk-Cost Benefit Analysis

a. Technical disagreements regarding such itemsas applicable requirements, policy, criteria, or datamay be evaluated on a risk-cost benefit basis todetermine if the risk is acceptable to delete, modify,deviate from, or waive the requirements.

b. Risk-cost benefit analyses based on the criteriadefined in Tables 1-1 and 1-2 of this Chapter shallbe submitted to Range Safety.

c. Based on risk-cost benefit analysis data,Range Safety and the Range User shall reachagreement on the disposition of the requirement inquestion.

d. If the application of an EWR 127-1 require-ment results in a significant reduction of risk at asignificant cost benefit, it may be judged by RangeSafety to be sufficient to impose the requirement;however, if the benefit is insignificant and/or thecost is high, the requirement may be deviated from,waived, or determined to meet the intent, all withconsideration for public safety.

1C.2 SUBMITTING NONCOMPLIANCES

1C.2.1 Format

All noncompliances shall be submitted in writing inletter or memorandum format or the equivalent. Anexample format may be found in the Range UserHandbook.

1C.2.2 Content

The following items shall be included in the letteror memorandum:

a. Title: MIC, Deviation, Waiver of (require-ment a) for (requirement b)

b. Descriptive Title of MIC, Deviation, Waiverrequest

c. MIC, Deviation, Waiver categoryd. MIC, Deviation, Waiver effectivitye. Background

1. Summary of Range Safety requirement2. Statement of the noncompliance3. Reason for request

f. Conditions for MIC, Deviation, Waiver1. Hazard mitigation2. Get Well Plan

1C.2.3 Process

a. Requests for MICs, deviations, and waiversshall be submitted to the Office of the Chief ofSafety as early as they are known to be necessary.

b. Public safety MICs, deviations, and waiverssuch as those including flight plan approval, flighttermination system design, and toxic propellantstorage normally require extensive risk analysesthat can take one to two years to perform;therefore, these deviations, MICs, and waivers shallbe initiated during the planning phase and be closed

Page 51: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1CSUBMITTING EWR 127-1 NONCOMPLIANCE REQUESTS

1-39

out by Range Safety approval or design changeprior to manufacture of the booster, spacecraft,flight termination system or other system inquestion.

c. Launch site safety and launch complex safetyMICs, deviations, and waivers normally requiretwo weeks to two months to process depending onthe nature of the noncompliance and the requestedeffectivity.

1C.2.4 Approvals

a. Programs launching from only the ER or WRrequire only the appropriate 45 SW/SE or 30SW/SE approvals.

b. Programs launching from both Ranges requireapprovals from 45 SW/SE and 30 SW/SE.

c. Waivers and deviations dealing with public sa-fety shall be approved by the Wing Commanders ortheir designated representatives.

d. Waivers and deviations other than public sa-fety shall be approved by the Chiefs of Safety ortheir designated representatives.

e. MICs shall be approved by appropriate 45SW/SE or 30 SW/SE section chiefs or their desig-nated representatives.

Page 52: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1DEWR 127-1 ACCEPTABLE RISK CRITERIA

1-40

1D.1 INTRODUCTION

a. The criteria defined in this Appendix is for-mulated to meet the requirements of PL 60 and ap-ply to all programs and missions operating at theRanges.

b. All programs and missions are subject toGO/NO-GO decisions based on risk acceptance.The overall risk levels may or may not be an addi-tive value that includes risks resulting from debris,toxic, and blast overpressure exposures. Risk guid-ance levels in the Launch Area Safety and LaunchComplex Safety sections of this Chapter are de-rived from the criteria shown in Table 1D-1.

c. These risk guidance levels are provided asguidance for the Wing Commanders and as plan-ning information for Range Users.

d. Range Users should use this guidance to de-velop their program or mission plans to minimizerisk levels.

1D.2 DESCRIPTION OF RISK CRITERIA

a. As shown in Table 1D-1, comparing normallyaccepted public, day-to-day accident risk exposureto normal launch vehicle and payload launch oper-ating risks indicates that, under any circumstances,the annual collective risk for launch operations issmall.

b. A ratio of 1 x 10-3/1.8 x 104 = 5.7 x 10-8 isobtained between the maximum annual launch risksaccepted under the guidance limits and the totalannual launch risk. Therefore, launch operationsrisks are only this fraction of the normally acceptedrisk levels defined in the Public Safety section ofthis document.

c. Individual hazardous activities may exceedguidance levels based on national need or missionrequirements. Deviations, meets intent certifica-tions, or waiver requests are required.

Table 1D-1Comparison of Various Normally Accepted Public Ambient Collective Accident Risks

with Collective ER and WR Launch Risk Guides

Hazardous EventsAverage US IndividualCasualty Risk per Year

Collective Casualty Risk perYear for Population in ERand WR Launch Area

a

Equivalent LaunchCollective Casualty

Risk per Year

Launch Guidance Lim-its: Collective Casualty

Risks per Launch

All Accidents 7.2 X 10 -2 b

1.8 X 104

Motor Vehicle Accidents 8.0 X 10-3 b

2.0 X 103

Air Travel Accidents 6.4 X 10-4 c

1.6 X 102

Natural Hazards d 2.6 X 10-4 e

6.5 X 101

Hypothetical Nuclear Plant Accident 4.0 X 10-6 e 1.0

Aviation Over flight Accidents 1.8 x 10-2 f

Maximum Risk Acceptableg for Acci-

dent in One-Time National NeedLaunch

1 x 10-2

3 X 10-4 h

Maximum Risk Acceptable g for Acci-dents in Launches Unless High Man-agement Review

1 X 10-3

3 X 10-5 i

Notes:a

Total population of 2.5 X 105

assumed exposed to ER or WR launch area Accidents.b

From total numbers of casualties (at least one-day disability) in Accident Facts, 1994, a publication of the National Safety Council,divided by US population of 2.5 X 108

cFrom number of fatalities in Accident Facts, 1994, multiplied by 200, approximately the average number f causalities (at least one-

day disability) experienced in the US for each accident fatality experienced.d

Lightning, tornadoes, hurricane (earthquake negligible)e

From Reactor Safety Study, WASH-1400/NUREG-75/014, 1975.f

From Philipson, Lloyd L., Refined Estimate of the Risk from Aviation Accidents to the Population in the CCAS Area of Concern,ACTA Inc., Report No. 94-297/46-01, September 1994. (Estimates derived for the ER; assumed to be applicable to the WR aswell)

gWaiver or Deviation Required.

hAt most one such launch per year assumed.

iFrom Risk Commonality/Acceptability Workshop, August 1990.

Page 53: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Safety Policies and Processes 31 October 1997

APPENDIX 1EMAKING CHANGES TO EWR 127-1

1-41

1E.1 INTRODUCTION

1E.1.1 Purpose

Changing the document provides a means forkeeping the document current with new technologyand processes and allowing for internal and exter-nal technical reviews.

1E.1.2 Content

This Appendix describes the process for submittingchanges to the document. These changes are globalin nature and do not address technical changes thatare related to specific and unique program issues.

1E.1.3 Applicability

The document change process is applicable to allRange Users and Range organizations that are re-sponsible for applying the document on contractand monitoring the compliance and implementationof the requirements.

1E.2 CHANGE PROCESS

Changes to EWR 127-1 shall be submitted usingthe Change Request form. Only one change is al-lowed per Change Request form and that change isrequired to stand alone regarding specific subjectmatter and alphanumeric paragraph number.NOTE: A sample of this form may be found in theRange Safety Range User Handbook.

1E.2.1 Completing Change Requests

Change Requests shall include the following infor-mation:

a. Date of requestb. Name of originatorc. Name of company or agencyd. Address of company or agencye. Telephone and Fax numbers as applicable

f. The alphanumeric designation of the affectedparagraph

g. The text for the suggested changeh. The rationale for the suggested change

1E.2.2 Submitting Change Requests

Completed Change Requests shall be submitted tothe 45 SW/SE Office of the Chief of Safety, Sys-tems Safety Engineering Support, 1201 MinutemanStreet, Patrick Air Force Base, Florida 32925-3238.

1E.2.3 Range User Review

Depending upon the impact of a proposed change,Change Requests may be sent out to Range Usersfor review and comment prior to final resolution.

In addition, if the proposed change is complex,meetings may be arranged with Range Users asrequired.

1E.2.4 Disposition of Change Requests

a. 45 SW/SE is the office of primary responsi-bility and 30 SW/SE will be the office of coordi-nating responsibility for all EWR 127-1 changes.

b. The disposition of Change Requests falls intothe following three categories:

1. Concur As Written2. Concur With The Intent. In such cases, the

Change Request will be rewritten.3. Do Not Concur. Rationale for not accepting

the proposed change will be provided.

1E.2.5 Range User Notification

Approved changes to the document shall be pub-lished annually. Changes requiring immediateRange User attention shall be published as requiredas official document Change Notices. A sampleChange Notice is included in the Range UserHandbook.

Page 54: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1FGENERIC PAYLOAD POLICY AND APPROVAL REQUIREMENTS

1-42

1F.1 GENERIC PAYLOAD POLICY

The interactive process between Range Safety,payload manufacturers, and launch vehicle compa-nies or government agencies described in this sec-tion will ensure minimum impact to payload pro-grams and reduce the cost and time required for theapproval process.

Many payload systems are generic, meaning theyare built to a common bus structure, using a com-mon launch vehicle, and common Range processingprelaunch and launch procedures. As a result, thesegeneric payloads contain few changes to the base-line system; and the safety data can remain thesame from one mission to the next.

To take advantage of previously approved payloadsystems and generic safety data, the policy de-scribed below shall be followed; however, they maybe modified to meet individual program require-ments:

a. Range Safety and the payload manufacturer inconjunction with the launch vehicle company orgovernment agency shall conduct initial planningmeetings to establish a generic payload approvalprocess.

b. Once a baseline system has been approved,Range Safety efforts will focus on specific changesfor each new program or mission. NOTE: Existingand ongoing previously approved components,systems, and subsystems need not be resubmittedas part of data packages for review and approval.

c. Range Safety, the payload manufacturer, andlaunch vehicle company, or government agency,shall conduct a safety assessment of each new pro-gram or mission to define changes and/or additionsthat create new, uncontrolled hazards or that in-crease risks significantly.

d. Based on the joint safety assessment, the par-ties shall agree on the minimum required docu-mentation to be submitted to Range Safety for re-view and approval.

e. Data submittal and Range Safety responsetimes shall be established based on the joint safetyassessment and modified only upon agreement ofall parties.

f. The goal of the generic payload approvalprocess is to achieve final Range Safety approvalat least 60 calendar days prior to payload arrival on

the launch complex.

1F.2 APPROVAL PROCESS FOREXISTING PAYLOAD BUSES

For currently existing payload buses, the goal is togrant baseline approvals for generic buses duringthe first mission after implementation of this ap-proach. Subsequent flights would use the joint as-sessment process to review and approve changes tothe generic bus and/or payload additions for spe-cific missions. Key to the approach is the safetyassessment that is used to determine whetherchanges or additions have created any new uncon-trolled hazards or increased the risks significantly.The assessment results will be utilized to determinedata required and review and approval require-ments.

The approval process for existing payload buses isshown in Figure 1F-1 and described below:

1F.2.1 Launch Services and Mission Orien-tation Briefing

a. A launch services and mission orientationsafety briefing shall be conducted for Range Safetyapproximately 45 days after contract award for themission. The briefing shall cover the followingtopics:

1. Changes to the launch vehicle2. Changes to the payload bus3. Planned payload additions for the mission4. Changes to hazardous systems and opera-

tions (the focus of this review)b. Range Safety concurrence for both the mission

concept and schedule for the remaining RangeSafety milestones shall be provided during the mis-sion orientation safety briefing or within 14 calen-dar days after the briefing.

1F.2.2 Data Review and Approval

1F.2.2.1 Mission Unique Missile System Pre-launch Safety Package

a. A Missile System Prelaunch Safety Package(MSPSP) shall be delivered approximately 12months prior to launch and contain the data re-quirements identified during the mission orientationsafety briefing on the changes to launch vehicle andpayload unique for the mission and identified in theinitial operation's concept review.

Page 55: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Policies and Processes 31 October 1997

APPENDIX 1FGENERIC PAYLOAD POLICY AND APPROVAL REQUIREMENTS

1-43

b. Range Safety shall provide responses 45calendar days after receipt of the data package.

1F.2.2.2 Ground Operations Plan (GOP) andHazardous and Safety Critical Procedures

a. A GOP supplement describing changes to ap-proved operations and/or new or modified safetycritical or hazardous procedures shall be deliveredto Range Safety approximately 120 days prior topayload arrival on the Range. NOTE: This sup-plement is required only if changes have been madeto operations and procedures that affect hazardouslevels or risks.

b. Range Safety shall provide responses 45 cal-endar days after receipt of the data.

1F.2.3 Mission Approval Safety Review

a. A mission approval safety review shall beconducted approximately L - 120 days to obtainRange Safety approval for launch vehicle andpayload processing, transport to the payload launchpad, payload launch vehicle mating, and launch padpayload processing.

b. Unless there are significant issues, RangeSafety shall provide mission safety approval 14calendar days after the safety review.

1F.2.4 Final Launch Approval

a. Final approval to proceed with launch vehicleand payload processing up to beginning the finalcountdown shall be provided by Range Safety atleast 60 days prior to payload arrival at the launch

complex. NOTE: Flight plan approval for a mis-sion that involves public safety may not be granteduntil just prior to the Launch Readiness Review(LRR) depending on the complexity of the publicsafety issue encountered. For example, typically, atthe ER, easterly launch azimuths can be approvedat least 120 days prior to launch; on the other hand,high inclination launches may require extensive riskanalyses that can delay final flight plan approvaluntil just prior to the LRR.

1F.3 APPROVAL PROCESS FOR NEW PAYLOAD BUSES

For new payload buses, the goal is to grant baselineapprovals for generic buses during the first missionafter implementation of this approach. Subsequentflights would use the joint assessment process toreview and approve changes to the generic busand/or payload additions for specific missions. Keyto the approach is the safety assessment that is usedto determine whether changes or additions havecreated any new uncontrolled hazards or increasedthe risks significantly. The assessment results willbe used to determine data required and review andapproval requirements.

The approval process for new payload buses isshown in Figure 1F-2 and described below:

1F.3.1 Concept Orientation Briefing andSafety Review

a. A concept orientation briefing shall be pro-vided to Range Safety early in (no later than 45

Figure 1F-1Approval Process for Existing Payload Buses

MSPSP CHANGESL-12 MONTHS

SAFETY OPERATIONALSUPPLEMENT CHANGESPAYLOAD ARRIVAL ATCCAS/VAFB -120 DAYS

MISSION ORIENTATION BRIEFINGCONTRACT AWARD +45 DAYS

RANGE SAFETY APPROVALMISSION ORIENTATION BRIEFING+14 DAYS

RANGE SAFETY APPROVALMSPSP CHANGES RECEIPT +45DAYS

RANGE SAFETY APPROVALSAFETY OPERATIONALSUPPLEMENT CHANGESRECEIPT +45 DAYS

MISSION APPROVAL SAFETYREVIEWL-120 DAYS

RANGE SAFETY APPROVALMISSION APPROVAL SAFETYREVIEW +14 DAYS

FINAL RANGE SAFETY LAUNCHAPPROVALPAYLOAD ARRIVAL AT LAUNCHCOMPLEX -60 DAYS

Page 56: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1FGENERIC PAYLOAD POLICY AND APPROVAL REQUIREMENTS

1-44

days from) the conceptual phase of the develop-ment (cDR).

b. The generic approval process shall be docu-mented and concept approvals granted so that anaudit trail can be established.

c. A concept orientation safety review shall beheld in conjunction with this briefing and approvalof design concepts, schedule of safety submittals,and Range Safety responses shall be documented.

d. Range Safety concept approvals not granted atthis meeting shall be provided within 14 calendardays.

1F.3.2 Preliminary Design Review

a. A preliminary design review (PDR) shall beheld at least 12 months prior to scheduled launchand will to provide necessary MSPSP data for ini-tial Range Safety approval before the final payloaddesign and prelaunch processing is initiated.

b. Range Safety shall provide approvals within45 calendar days after the meeting.

1F.3.3 Critical Design and Data Review

a. Prior to initiating hardware manufacture, acritical design review (CDR) shall be held to pro-

vide Range Safety the necessary MSPSP data togrant final design approval and prelaunch process-ing initial procedure review.

b. Range Safety shall provide a response in 45calendar days after meeting.

c. A Ground Operations Plan describing opera-tions and containing safety critical and hazardousprocedures shall be delivered to Range Safety ap-proximately 120 days prior to payload arrival onthe Range.

d. Range Safety shall provide responses within45 calendar days.

1F.3.4 Mission Approval Safety Review

a. A mission approval safety review shall beconducted approximately L - 120 days to obtainRange Safety approval for launch vehicle andpayload processing, transport to the payload launchpad, payload launch vehicle mating, and launch padpayload processing.

b. Unless there are significant issues, Range Sa-fety shall provide mission safety approval 14 cal-endar days after the safety review.

Figure 1F-2Approval Process for New Payload Buses

CDRPRIOR TO INITIATINGHARDWAREMANUFACTURE

CONCEPT ORIENTATIONBRIEFINGEARLY IN CONCEPT PHASE

RANGE SAFETY CONCEPTAPPROVALCONCEPT ORIENTATIONBRIEFING +14 DAYS

RANGE SAFETY APPROVALCDR +45 DAYS

MISSION APPROVALSAFETY REVIEWL -120 DAYS

RANGE SAFETY APPROVALMISSION APPROVALSAFETY REVIEW +14 DAYS

FINAL RANGE SAFETYLAUNCH APPROVALPAYLOAD ARRIVAL ATLAUNCH COMPLEX -60DAYS

PDRL-12 MONTHS

RANGE SAFETY APPROVALPDR +45 DAYS

SAFETY OPERATIONSSUPPLEMENTPAYLOAD ARRIVAL ATCCAS/VAFB -120 DAYS

RANGE SAFETY APPROVALSAFETY OPERATIONSSUPPLEMENT RECEIPT +45DAYS

Page 57: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Policies and Processes 31 October 1997

APPENDIX 1FGENERIC PAYLOAD POLICY AND APPROVAL REQUIREMENTS

1-45

1F.3.5 Final Launch Approval

Final approval to proceed with launch vehicle andpayload processing up to beginning the finalcountdown shall be provided by Range Safety atleast 60 days prior to payload arrival at the launchcomplex. NOTE: Flight plan approval for a mis-sion that involves public safety may not be grant-ed until just prior to the LRR, depending on thecomplexity of the public safety issue encountered.Typically, easterly launch azimuths can be ap-proved at least 120 days prior to launch. On theother hand, high inclination launches may requireextensive risk analyses that can delay final flight

plan approval until just prior to the LRR.

1F.4 INCIDENTAL RANGESAFETY ISSUES

Incidental Range Safety issues such as componentfailures, test failures, and the discovery of unfore-seen hazards occurring after baseline approvalsshall be worked in real time as part of the final ap-proval process for an individual launch. Typicallythese issues involve the launch vehicle, not thepayload.

Page 58: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1GLAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION

1-46

1G.1 INTRODUCTION

1G.1.1 Purpose

This appendix provides 45 SW/SE and 30 SW/SEoperational safety training and certification re-quirements for launch complex safety. These re-quirements shall be used by Range Users who wishto assume control authority for launch complexsafety. NOTE: These requirements may be jointlytailored by the Range User and Range Safety tomeet special or unique program requirements inaccordance with Appendix 1A. Minimum stan-dards, roles, and responsibilities for a launch com-plex safety program are defined in this appendix.

1G.1.2 Applicability

The requirements in this appendix apply to all full-time government tenant organizations, single com-mercial users, or USAF squadron/detachmentcommanders who assume control authority andresponsibility for hazardous procedures identifiedby Range Safety as launch complex safety opera-tions. Responsibilities and authorities are defined inChapters 1 and 6 of EWR 127-1.

1G.2 LAUNCH COMPLEX OPERATIONSSAFETY PROGRAM GENERAL

REQUIREMENTS

a. The Range User shall establish and maintain alaunch complex operations safety program to sup-port efficient and effective achievement of overalloperations safety objectives. NOTE: The safetytraining and certification program shall be referredto as the launch complex operations safety pro-gram.

b. The Range User shall implement the require-ments defined in this appendix using a Range User-prepared operations safety training and certificationplan.

1G.2.1 Safety Management System

The Range User shall establish a safety manage-ment system to implement provisions of this appen-dix. The launch complex safety control authorityshall be responsible for the following: a. Establishing, controlling, incorporating, di-recting, and implementing the launch complex

operations safety program policies b. Establishing internal reporting systems andprocedures for investigation and disposition oflaunch complex safety operations mishaps and in-cidents, including potentially hazardous conditionsnot yet involved in a mishap or incident and re-porting such matters to Range Safety c. Reviewing and approving launch complexsafety hazardous procedures

1G.2.2 Launch Complex Operations SafetyPersonnel Responsibilities and Quali-fications

1G.2.2.1 Safety Manager

1G.2.2.1.1 Safety Manager Responsibilities.The Range User shall establish and maintain alaunch complex operations safety manager directlyresponsible to the launch complex safety controlauthority. At a minimum, the Range User safetymanger shall be responsible for the following:

a. Approving all launch complex safety op-erations analyses, reports, and documentation

b. Approving all launch complex safety haz-ardous procedures and verifying they comply withOSHA/EPA operation requirements and the re-quirements of EWR 127-1, particularly those de-fined in Chapter 6.

1G.2.2.1.2 Safety Manager Qualifications.The launch complex safety operations safety man-ager shall have a minimum of 10 years of applica-ble managerial or supervisory experience includingat least seven years experience in three of the fourfunctional areas listed below. A Bachelor of Sci-ence in Engineering and a CSP are also required.

a. Large missile, space vehicle, rocket, tor-pedo, pre-launch, launch, post-launch operationsand/or recovery operations

b. System safety hazard analysis and designor research and development testing of ordnance,explosives, other types of munitions, pyrotechnics,cryogenic, toxic/hypergolic propellants, high pres-sure gases, radioactive materials, or other hazard-ous systems/components

c. Nuclear safety and/or ionizing/non-ionizing radiation

d. Preparation and/or review and approval ofhazardous operating procedures for missile andweapons systems

Page 59: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Policies and Processes 31 October 1997

APPENDIX 1GLAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION

1-47

1G.2.2.2 Safety Personnel

1G.2.2.2.1 Safety Personnel Responsibilities.Safety personnel shall be directly responsible to thelaunch complex safety operations safety manager.At a minimum, Ranger User launch complex safetypersonnel shall be responsible for the following:

a. Reviewing launch complex safety operationsanalyses, reports, and documentation

b. Performing a detailed safety engineering re-view of launch complex safety hazardous proce-dures to ensure compliance with federal, state, localOSHA/EPA operation requirements and the re-quirements in EWR 127-1, particularly those de-fined in Chapter 6.

c. Performing safety, surveillance, and moni-toring of all launch complex safety hazardous op-erations

1G.2.2.2.2 Safety Personnel Qualifications.Launch complex safety personnel shall meet rigidqualification standards and shall be fully experi-enced, trained, and certified to perform launchcomplex safety duties.

a. All safety personnel shall have at least fouryears of applicable experience in at least three ofthe four functional areas identified in 1G.2.2.1.2.

b. Personnel who provide detailed safety engi-neer review of launch complex safety analyses, re-ports, documentation, and hazardous proceduresshall have a Bachelor of Science degree in Engi-neering and a CSP.

c. The launch complex safety work force shallbe composed of the following levels of experience.NOTE: An Engineering degree may be used tosatisfy three years of the required experience, or anequivalent combination of education, experience,and training may be deemed acceptable by 45SW/SE.

1. At least 30 percent shall have more thaneight years of applicable experience in at least threeof the four functional areas identified in 1G.2.2.1.2.

2. An additional 50 percent shall have atleast six years applicable experience in at leastthree of the four functional areas identified in1G.2.2.1.2.

3. An additional 10 percent shall have atleast four years applicable experience in at least

three of the four functional areas identified in1G.2.2.1.2.

4. The remaining 10 percent may be trainees.

1G.2.3 Launch Complex Operations SafetyPersonnel Training Requirements

The launch complex safety operations safety man-ager and safety personnel shall have initial and re-fresher training in the following areas every threeyears:

a. Recognition of launch complex safety haz-ards including:

1. Overhead and mobile crane and hoists2. Sling assemblies3. Handling structures4. Personnel work platforms5. Acoustic hazards6. Non-ionizing radiation7. Laser systems8. Ionizing radiation sources9. Hazardous materials10. Airborne and ground pressure systems11. Airborne and ground cryogenic systems12. Airborne and ground hypergolic systems13. Airborne and ground ordnance systems14. Solid propellants15. Airborne and ground electrical and elec-

tronic equipment.16. Motor vehicles17. Forklifts18. Computer controlled systems such as

cranes and robots19. Facilities

b. Failure modes for launch complex systems in-cluding cause and effect

c. Preventive and control measures for launchcomplex safety hazards

d. Safety devices for launch complex systemse. Protective equipmentf. Monitoring and warning devices for launch

complexesg. Operations hazards analysis techniquesh. Human engineering principlesi. Emergency proceduresj. Hazardous procedures approval and deviation

processk. Preparation and hazards of hazardous materi-

als

Page 60: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1GLAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION

1-48

l. Federal (OSHA/EPA), state, local, and AirForce (EWR 127-1, particularly those in Chapter6) hazardous operations requirements

m. Accident investigationsn. Non-destructive examination techniqueso. Single failure point analysis

1G.2.4 Compliance

Compliance with all launch complex safety opera-tions requirements of federal, state, and local regu-lations, EWR 127-1 (particularly those defined inChapter 6) is mandatory. When the Range Userlaunch complex safety operations safety programplan is approved by Range Safety, it provides abasis of understanding between the Range User andRange Safety as to how the launch complex opera-tions safety program will be accomplished.

1G.2.5 Conflicting Requirements

When conflicting requirements or deficiencies areidentified in launch complex operations safety pro-gram requirements or with other program require-ments, the Range User shall submit notificationwith proposed solutions or alternatives and sup-porting rationale to Range Safety for resolution.

1G.3 FOUNDATION OF LAUNCH COMPLEXOPERATIONS SAFETY PROGRAM

This section describes the foundation of a launchcomplex operations safety program. The require-ments are as follows:

a. Establishing and executing a launch complexoperations safety program which meets the tailoredrequirements of this appendix

b. Developing a planned approach for safety taskaccomplishment, providing qualified people to ac-complish the tasks, establishing the authority forimplementing the safety tasks through all levels ofmanagement, and allocating appropriate resources,both manning and funding, to ensure the safetytasks are completed

c. Establishing a launch complex operationssafety organization with function and lines ofcommunication within the program organizationand with associated organizations (government andcontractor)

d. Establishing interfaces between launch com-plex operations safety and other functional ele-ments of the program

e. Designating the organizational unit responsiblefor executing each safety task

f. Establishing the authority for resolution ofidentified launch complex operational hazards.

g. Defining launch complex operational safetyprogram milestones and relate these to major pro-gram milestones, program element responsibility,and required inputs and outputs.

h. Establishing an incident alert and notification,investigation and reporting process, to include noti-fication of Range Safety.

i. Establishing and executing a launch complexsafety operations safety program that complies withthe following:

1. Launch complex safety operation require-ments in EWR 127-1, particularly those definedin Chapter 6

2. OSHA 1910.119 (c): Employee participa-tion

3. OSHA 1910.119(d)(1)(2): Process safety in-formation

4. OSHA 1910.119(f): Operating procedures5. OSHA 1910.119(g): Training6. OSHA 1910.119(h): Contractors7. OSHA 1910.110(I): Pre-startup safety8. OSHA 1910.119(j)(2)(3)(4)(5): Mechanical

Integrity9. OSHA 1910.119(k): Hot work permit10. OSHA 1910.119(l): Management of

Change11. OSHA 1910.119(m): Incident investigation12. OSHA 1910.119 (n): Emergency planning

and response13. OSHA 1910.119(o): Compliance Audits14. OSHA 1910.119(p): Trade secrets15. Air Force Occupational and Environmental

Instruction, AFI 91-301

1G.4 LAUNCH COMPLEX OPERATIONSSAFETY PROGRAM PLAN

a. The Range User shall develop a launch com-plex operations safety program plan (LCOSPP)that describes the tasks and activities of launchcomplex safety operations safety management andsafety personnel required to identify, evaluate,eliminate, and control launch complex operationshazards.

b. The approved plan shall account for all EWR127-1 (particularly those in Chapter 6) and federal,

Page 61: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Policies and Processes 31 October 1997

APPENDIX 1GLAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION

1-49

state, and local regulations pertaining to launchcomplex safety operations on an item-by-item ba-sis. c. The Range User shall submit a draft LCOSSPto Range Safety for review and approval within 90days of the date the Range User wishes to assumecontrol authority for launch complex safety opera-tions.

d. The LCOSPP shall include the following sec-tions:

1G.4.1 Launch Complex Operations SafetyOrganization

The Organization section shall describe the fol-lowing:

a. The launch complex operations safety organi-zation using charts to show the organizational andfunctional relationships and lines of communication

b. The organizational relationship between otherfunctional elements having responsibility for taskswith launch complex safety operations impacts andthe launch complex operations safety organization

c. Review and approval authority of applicabletasks by launch complex operations safety

d. The responsibility and authority of launchcomplex operations safety personnel, other RangeUser organizational elements involved in the systemsafety effort, contractors, and system safety groups

e. A description of the methods by which safetypersonnel may raise issues of concern directly tothe program manager or the program manager’ssupervisor within the organization

f. Identification of the organizational unit respon-sible for performing each task

g. Identification of the authority responsible forresolving launch complex safety operations hazards

h. The staffing of the launch complex operationssafety organization for the duration of the programincluding personnel loading and a summary of thequalifications of safety personnel assigned to theeffort, including those who possess coordinationand approval authority

i. The process by which Range User manage-ment decisions are made, including such decisionsas timely notification of unacceptable risks, neces-sary action, incidents or malfunctions, and waiversto operations safety requirements

j. Details of how resolution and action relativeto launch complex operations safety will be accom-plished at the program management level possess-ing resolution authority.NOTE: See Appendix 1B.1.3.1 for additionalguidance.

1G.4.2 Launch Complex Operations SafetyProgram Milestones

The LCOSPP shall:a. Provide a program schedule of safety tasks,

including start and completion dates, reports, andreviews

b. Identify subsystem, component, and softwaresafety activities as well as integrated system levelactivities such as design analyses, tests, and dem-onstrations applicable to the launch complex op-erations safety program but specified elsewhere toavoid duplication.NOTE: See Appendix 1B.1.3.2 for additionalguidance.

1G.4.3 LCOSPP Data

The LCOSPP shall provide the following data:a. A list of all analyses, reports, and documenta-

tion used by safety personnel to review and ap-prove hazardous launch complex safety proceduresand execute the safety program

b. A list of all hazardous procedures categorizedas launch complex safety procedures by RangeSafety

c. The procedures for accessibility of the data byRange Safety and for retention of the data for his-torical and legal requirements

1G.4.4 Interfaces

The LCOSPP shall identify the following interfacesin detail:

a. The interface between launch complex opera-tions safety and all other applicable safety disci-plines such as nuclear safety, Range Safety, explo-sive and ordnance safety, chemical and biologicalsafety, and laser safety

b. The interface between launch complex opera-tions safety, systems engineering, systems safetyengineering, and all other support disciplines suchas maintainability, quality control, reliability, soft-ware development, human factors engineering, andmedical support (health hazards assessments)

Page 62: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Eastern and Western Range 127-1 31 October 1997

APPENDIX 1GLAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION

1-50

c. The interface between launch complex opera-tions safety and all system integration and test dis-ciplinesNOTE: See Appendix 1B.1.3.4 for additionalguidance.

1G.4.5 Internal Reviews and Audits

The LCOSPP shall describe the procedures for ac-complishing the following:

a. Annual review of the launch complex opera-tions safety program to verify compliance, rele-vancy, adequacy, and ensure documentation is cur-rent

b. Launch complex safety management and op-erational reviews (self-audits) to identify programdeficiencies and ensure safety program effective-ness

1G.5 LAUNCH COMPLEX OPERATIONSSAFETY HAZARDS ANALYSIS

The Range User shall perform and document thefollowing safety hazard analyses in accordancewith the requirements specified in referenced sec-tions of Appendix 1B:

a. A Launch Complex Safety Operating andSupport Hazard Analysis (O&SHA) in accordancewith the requirements in Appendix 1B.2.4, Task 4

b. Safety analyses of Engineering Change Pro-posals (ECPs), Specification Change Notices(SCNs), Software Problem Reports (SPRs), Pro-gram or Software Trouble Reports (PTRs, STRs),and requests for EWR 127-1 (Chapter 6) deviationor waiver to determine the launch complex safetyimpact on the system in accordance with the re-quirements in Appendix 1B.2.6, Task 6

c. A safety compliance assessment to identify andverify compliance with Air Force, federal, state,local, and industry codes to ensure that the hazard-ous systems are being operated properly in accor-dance with the requirements in accordance withAppendix 1B.2.8

1G.6 RANGE SAFETY AUDITS

a. Launch complex safety audits shall be con-ducted by Range Safety on a periodic basis.

b. The audit shall measure the status of eachsafety task, interrelationship between safety andother program disciplines, identification and im-plementation of safety requirements/criteria, and

documented evidence which reflects planned vs.actual safety accomplishment.

c. Each audit shall evaluate program milestones,safety program milestones and incompatibilitiesthat require remedial corrective action.

d. The Range User shall initiate positive correc-tive actions where deficiencies are revealed by theaudits.

e. Components, equipment, conditions, designs,or procedures that provide unusual safety prob-lems, shall be audited.

f. Audits shall include verification or correctiveaction on problems revealed by previous audits.

g. The Range User shall support these RangeSafety audits by providing access to documentationthat substantiates compliance with federal, state,local, and EWR 127-1 (particularly Chapter 6)launch complex operations safety requirements.

1G.7 45 SW/30 SW SAFETY PROGRAMAPPROVAL

The Range User launch complex operations safetyprogram shall be approved by the 45 SW/CC or 30SW/CC, as appropriate, once the following taskshave been accomplished:

a. The Range User shall submit a letter to the 45SW/30 SW Commander stating that they wish toexercise control authority over launch complexsafety operations, and the commander has agreed.

b. The Range User shall identify those launchcomplex safety operations/procedures they wish tohave control authority for, and provides this list toRange Safety.

c. Range Safety will identify those opera-tions/procedures that can be classified as launchcomplex safety operations

d. The Range User and Range Safety will jointlytailor this appendix and Chapter 6 of EWR 127-1.

e. The Range User shall prepare the launchcomplex operations safety program plan andsubmit to Range Safety for review and approval.f. The Range User shall prepare operating haz-ards analysis (as required) and submit to RangeSafety for review and approval.g. The Range User control authority for launchcomplex safety shall submit a certification ofcompliance and substantiating data to RangeSafety for review and approval.

Page 63: 1 CHAPTER 1Supp... · 2010. 11. 18. · 1.12 RANGE SAFETY WEB SITE ... 30 SW/SEO - 30th Space Wing, Mission Flight Control 30 SW/SEY - 30th Space Wing, Flight Analysis 45 SW/SEO -

Chapter 1: Eastern and Western Range Policies and Processes 31 October 1997

APPENDIX 1GLAUNCH COMPLEX SAFETY TRAINING AND CERTIFICATION

1-51

1G.8 SAFETY PROGRAM DECERTIFICATION

a. As appropriate, the Range User launch com-plex operations safety program can be decertifiedby the 45 SW/CC or 30 SW/CC for the followingreasons:

1. The safety program, as implemented, does

not comply with the Range approved launch com-plex operations safety program requirements

2. Internal audits or Range Safety of safetyprogram indicate serious deficiencies that are notbeing corrected in a time frame acceptable toRange Safety

3. Numerous anomalies and/or accidentscaused by operational deficiencies in the safetyprogram

b. Possible 45 SW/CC, 30 SW/CC actions fol-lowing safety program decertification include:

1. Range Safety and its operations safety con-tractor will assume control of launch complexsafety operations

2. Launch complex safety operations will beterminated until the safety program is approved by45 SW/CC or 30 SW/CC, as appropriate.